Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/PtmGnpV4mnb7GV2FWLPgVeoEz7Q.roa
File: PtmGnpV4mnb7GV2FWLPgVeoEz7Q.roa (raw, json)
Hash identifier: xc2Ls3VpADitjntZx/QbybvQl1NuO9o9ObNftm7789M=
Subject key identifier: 3E:D9:86:9E:95:78:9A:76:FB:19:5D:85:58:B3:E0:55:EA:04:CF:B4
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B59FD72
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/PtmGnpV4mnb7GV2FWLPgVeoEz7Q.roa
Signing time: Sat 01 Jan 2022 08:58:35 +0000
ROA not before: Sat 01 Jan 2022 08:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34117
IP address blocks: 195.46.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190446962 (0xb59fd72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ed9869e95789a76fb195d8558b3e055ea04cfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:20:45:f5:ca:0e:06:42:c5:24:c9:25:2e:
48:39:77:59:e1:d0:8a:3f:5a:b8:55:7b:bb:11:19:
63:c0:ce:a3:51:d3:ae:21:df:0b:56:e6:d9:f0:a9:
bd:1b:26:6d:29:2b:b1:b5:01:b1:ad:75:5b:d9:d6:
17:3b:9e:33:b1:2a:5e:a2:01:fc:e5:24:ce:a4:d9:
55:72:a5:9e:e5:ed:81:9f:fc:6e:9a:dd:83:54:a9:
99:69:6b:6b:c1:9b:c2:4c:03:3e:a4:b3:18:39:6c:
c9:f4:e8:16:67:18:61:32:e1:a6:ac:1a:5f:02:51:
45:0f:b2:b2:3e:da:a4:d9:a2:f4:6a:f5:b9:d9:43:
77:79:2b:ca:06:bf:2a:76:cc:6f:6c:75:79:8e:e9:
c9:f8:a0:95:07:65:b7:be:b8:27:77:d7:c7:e0:d2:
09:38:17:f4:68:2c:dd:88:6a:e9:64:ef:f6:6e:0c:
e8:34:a5:f5:17:b8:07:a4:e6:07:38:a7:f6:a0:e0:
2d:e7:af:ec:44:7f:e3:29:cd:51:2c:fb:f4:5f:38:
b5:75:26:02:9a:8d:9d:26:91:2c:b4:f3:34:fd:07:
4f:07:31:dc:bc:da:01:c5:61:fb:a9:2a:ea:d2:b4:
5e:9a:ba:98:70:06:99:0b:b6:36:62:42:44:27:c0:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D9:86:9E:95:78:9A:76:FB:19:5D:85:58:B3:E0:55:EA:04:CF:B4
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/PtmGnpV4mnb7GV2FWLPgVeoEz7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.46.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ac:4e:5a:c0:b4:e3:0d:59:0c:28:57:32:65:b8:9e:91:fb:
d9:5e:01:69:fb:4f:f6:f7:99:15:bb:a7:05:3e:52:f7:d0:78:
9f:8e:b9:e5:21:8e:fd:e7:2b:0f:7a:6b:36:ff:71:5f:ec:96:
69:b7:18:4d:fd:f0:82:d5:1b:9a:9c:38:34:1a:1c:bb:3a:ef:
b5:92:76:24:c6:69:ea:21:70:83:6a:e3:91:25:d6:d7:70:9d:
dd:b4:26:1e:8b:d1:0d:76:f3:91:3d:ab:52:8a:40:6e:db:30:
db:8c:a9:ee:ca:66:44:b5:1a:33:77:74:f9:21:4a:d2:d6:cc:
8d:9d:71:8f:b9:20:ec:62:6b:db:c2:d2:14:1d:b8:5c:5c:3a:
26:77:49:ea:80:88:73:4c:1c:94:e1:d1:8b:96:c1:f3:fc:ef:
23:ec:f1:93:6a:e7:c5:4d:fb:76:6e:ca:75:67:22:74:14:dc:
d8:49:36:25:e6:24:67:67:23:2e:76:41:9f:df:81:83:fe:f9:
b3:c7:54:6a:41:fe:a3:99:cb:32:a1:82:1a:6a:50:23:6e:98:
b4:c6:33:13:b3:ab:04:eb:1a:61:92:cf:bd:3f:de:fb:4b:12:
24:c0:e9:43:b9:65:e9:93:83:89:0b:3f:85:1d:2e:a8:82:da:
55:4b:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org