Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/PU02gMPpOCcnKH7KHp4dcsVp1I4.roa
File: PU02gMPpOCcnKH7KHp4dcsVp1I4.roa (raw, json)
Hash identifier: KNdoAVUSiN+aP2ON/uPB6RrMMzFbJ4QOb5VD/8A8Fx0=
Subject key identifier: 3D:4D:36:80:C3:E9:38:27:27:28:7E:CA:1E:9E:1D:72:C5:69:D4:8E
Certificate issuer: /CN=747c2e3a51489f1b01b4371758099bc85dd90f07
Certificate serial: 0183F0C4C9296C0B6E3809A0B62725FB7B98
Authority key identifier: 74:7C:2E:3A:51:48:9F:1B:01:B4:37:17:58:09:9B:C8:5D:D9:0F:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/PU02gMPpOCcnKH7KHp4dcsVp1I4.roa
Signing time: Wed 19 Oct 2022 15:02:51 +0000
ROA not before: Wed 19 Oct 2022 15:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135330
IP address blocks: 185.74.222.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:c4:c9:29:6c:0b:6e:38:09:a0:b6:27:25:fb:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747c2e3a51489f1b01b4371758099bc85dd90f07
Validity
Not Before: Oct 19 15:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d4d3680c3e9382727287eca1e9e1d72c569d48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:7b:8a:5b:61:3b:55:2a:c6:90:23:ab:95:
07:eb:17:9d:67:b0:e6:ab:6b:9b:e5:d0:99:22:66:
db:2b:51:e7:00:a5:16:bb:c1:0c:7b:20:86:15:d0:
9a:a6:ce:15:b3:fe:45:70:74:15:5a:9f:c9:9c:92:
4d:b1:fc:c7:d1:0b:a0:94:5c:66:aa:1f:7e:66:ba:
eb:c3:eb:b6:bc:69:64:2c:c2:e9:6d:40:ad:ba:a6:
c3:60:13:38:5a:e2:6e:2d:ad:b2:ba:66:73:58:4a:
09:42:c9:cb:b8:fc:17:e6:95:f0:97:d2:c1:7c:1f:
b2:90:f8:1b:37:d5:9f:ce:db:04:d6:1c:b5:74:90:
6f:b8:6b:9d:32:f8:23:e2:1a:f1:1a:d8:93:83:43:
57:d9:53:99:5a:de:02:e6:b3:46:38:b0:ae:b5:48:
99:a0:b0:ec:c1:a9:cf:fc:09:f6:7d:6a:51:ff:d5:
7d:75:bd:dd:0b:8e:02:36:a6:71:65:94:ba:ee:cf:
f9:4a:41:43:36:71:0d:72:a5:82:3e:5d:13:83:91:
47:0f:ae:32:2e:12:04:1b:e9:e3:03:5b:eb:fb:7c:
63:0c:c2:98:7a:e5:02:58:79:c4:ff:9f:ef:49:d8:
3b:3b:0e:97:a6:ce:09:99:c1:b4:6b:65:71:9e:64:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4D:36:80:C3:E9:38:27:27:28:7E:CA:1E:9E:1D:72:C5:69:D4:8E
X509v3 Authority Key Identifier:
keyid:74:7C:2E:3A:51:48:9F:1B:01:B4:37:17:58:09:9B:C8:5D:D9:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/PU02gMPpOCcnKH7KHp4dcsVp1I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.222.0/24
Signature Algorithm: sha256WithRSAEncryption
85:dc:91:ec:3c:ec:dd:8f:8e:d8:1f:55:dd:22:e4:de:5c:05:
3c:36:4b:2d:77:4c:e7:21:cf:b2:20:60:bf:e9:d4:5b:b6:f3:
a7:58:59:1f:e5:d4:33:35:37:55:97:49:65:05:c2:dd:70:22:
37:be:03:8d:db:b9:f5:b2:2b:5b:5f:f5:89:31:ca:0c:f3:62:
76:b3:eb:77:f9:9f:d3:e7:6a:ad:d8:42:a0:d7:cc:0e:96:34:
eb:14:65:37:7d:fc:62:ec:40:ff:c1:de:8c:d8:fa:eb:61:c4:
30:fb:db:86:d3:9d:01:ff:03:3e:a4:73:78:70:88:3b:35:92:
69:53:87:d5:bf:c0:a5:68:a8:04:cd:ef:47:6e:e4:72:96:59:
e6:23:44:99:aa:59:c7:2f:fc:5c:bf:f0:de:ce:95:a9:48:dd:
cc:aa:aa:db:ec:93:3b:37:30:5a:60:67:c9:c1:ac:79:0d:c4:
a4:2f:d5:54:f7:bd:a2:bd:a8:00:10:b1:f6:98:2b:54:7e:ba:
d0:cb:3a:df:32:f2:e2:84:dc:ea:fe:59:3e:dd:86:e6:a6:5e:
15:15:e2:f9:0d:c9:4b:64:93:b8:89:29:65:51:74:55:27:1d:
9f:97:f1:cc:23:4a:c8:07:19:4c:ba:00:ec:d9:dc:0c:97:d3:
32:7e:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:48 2024 by rpki-client on console-ams.rpki-client.org