Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pLeWVDpOTQvugi4VDTR6PmVDFNE.roa
File: pLeWVDpOTQvugi4VDTR6PmVDFNE.roa (raw, json)
Hash identifier: dCKntKSwIAD46k4OS+0dW0UggtFGY/zkF4ybqWPCHqU=
Subject key identifier: A4:B7:96:54:3A:4E:4D:0B:EE:82:2E:15:0D:34:7A:3E:65:43:14:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1D724D23
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pLeWVDpOTQvugi4VDTR6PmVDFNE.roa
Signing time: Wed 09 Mar 2022 11:21:39 +0000
ROA not before: Wed 09 Mar 2022 11:21:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 185.221.67.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
92.249.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494030115 (0x1d724d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 9 11:21:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4b796543a4e4d0bee822e150d347a3e654314d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:cd:f6:fb:a0:58:8c:7c:4f:90:3f:b9:10:
8a:47:7d:14:b3:b4:fb:1c:90:d2:1d:ca:a3:80:14:
d8:a3:0c:ba:8f:5d:72:24:97:9f:5c:8b:a3:40:9e:
34:70:12:dc:73:e2:4c:82:e6:9f:de:18:2e:5e:90:
df:66:4a:23:6e:55:bf:0e:b9:b6:13:5a:ce:8c:b0:
36:ee:e3:50:ff:9d:1f:be:22:e9:20:52:52:84:42:
c1:5b:58:c9:d0:1a:55:31:e1:c6:10:e1:05:f8:d9:
6e:74:1d:16:c5:56:81:de:8f:2b:11:50:6a:0b:53:
9d:4a:9c:b0:97:ca:20:bb:ff:a4:3b:5b:af:6c:3b:
dc:42:01:3f:d6:f5:3d:88:d6:6d:63:be:6d:2c:d9:
51:8e:37:6b:b1:83:19:8c:6c:b6:03:50:a1:89:1e:
ab:2f:ec:45:51:2d:0e:7f:9e:25:43:c4:2b:cd:e5:
75:e4:fd:e2:92:78:ce:8c:0a:27:2a:c5:76:6a:d9:
b1:f9:7a:74:98:84:71:fe:21:45:89:03:f5:39:28:
53:00:4d:d9:1a:a4:bd:0d:ef:bd:b6:48:53:c0:b9:
bd:59:d1:f6:11:61:bf:46:af:bb:07:e3:d4:58:45:
5b:ce:89:a0:89:ee:92:8d:11:f6:73:64:c8:ff:3f:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:96:54:3A:4E:4D:0B:EE:82:2E:15:0D:34:7A:3E:65:43:14:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pLeWVDpOTQvugi4VDTR6PmVDFNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.145.0/24
92.249.49.0/24
185.221.67.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c6:fd:2a:65:65:85:c2:58:b3:08:96:86:71:f9:1d:c0:99:
56:ac:3a:27:3b:75:86:6b:23:cd:42:fa:f6:85:7a:14:13:27:
c2:d8:3e:2f:0c:8d:c4:e0:16:23:4f:97:14:27:0e:0a:2a:6c:
f3:5f:93:92:15:70:52:e1:c1:21:a5:fe:dc:aa:79:56:86:5a:
4b:bd:71:23:7a:41:4d:53:dd:ab:b8:7b:89:b6:20:de:03:d3:
52:bd:7a:e6:13:5c:95:41:57:a4:7f:c2:15:57:3a:9a:ab:a0:
d8:45:38:f5:ca:29:c6:97:6b:a7:c7:41:b6:cb:a7:5b:71:4c:
f2:4e:f9:10:50:b1:8c:6a:5a:85:62:c6:24:0c:b5:89:1b:0c:
23:e8:05:e6:b0:03:d1:87:c0:d4:1a:38:5c:3e:00:b6:c3:fd:
15:4f:cf:0e:44:f4:76:5b:a5:19:ae:8b:4b:14:a4:12:fe:66:
54:7a:54:18:a5:2b:93:69:7f:63:4d:80:8a:21:ef:67:0c:a1:
41:5c:ad:34:df:a3:87:2c:d4:25:d5:cc:8d:c0:83:7c:b3:fb:
af:34:b6:b0:a3:48:42:95:f0:1f:19:76:27:6d:29:c4:85:dc:
1d:c7:57:bd:ac:43:02:0a:02:a3:e3:3d:5b:b3:39:66:17:82:
99:40:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org