Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/PTCPDx9u2EQVHC_bQj_f0fsyTzw.roa
File: PTCPDx9u2EQVHC_bQj_f0fsyTzw.roa (raw, json)
Hash identifier: jdPThT3NFXIubmVs013iVRuFHL4jSf1IFHqnpkj6WIs=
Subject key identifier: 3D:30:8F:0F:1F:6E:D8:44:15:1C:2F:DB:42:3F:DF:D1:FB:32:4F:3C
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 0C9CAFAA
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/PTCPDx9u2EQVHC_bQj_f0fsyTzw.roa
Signing time: Sat 01 Jan 2022 05:01:07 +0000
ROA not before: Sat 01 Jan 2022 05:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31043
IP address blocks: 195.47.232.0/24 maxlen: 24
185.117.112.0/22 maxlen: 22
2a0c:3180::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211595178 (0xc9cafaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Jan 1 05:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d308f0f1f6ed844151c2fdb423fdfd1fb324f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:08:b8:a6:92:a3:29:8d:48:5e:15:d6:58:
b8:c2:be:c4:28:e9:c7:71:8a:80:8a:72:a0:92:76:
3f:86:9f:e7:b4:10:d8:9c:be:77:78:97:43:fb:19:
09:7c:3b:1b:c1:2a:91:4c:b8:02:7d:8b:16:3e:ad:
94:28:c3:df:16:0a:e0:19:cf:0d:53:3f:64:a9:8b:
77:6f:6f:bc:1f:74:91:e3:08:d8:6a:77:5a:ef:d7:
70:02:c4:a6:d5:e0:9f:96:63:02:58:a2:c7:07:e1:
8e:76:a7:f6:84:83:69:04:2f:5f:99:3f:5a:29:09:
17:e3:49:05:64:7f:1f:df:f1:1e:76:0b:b9:55:3b:
a3:77:13:7c:a6:d9:5b:d4:1f:0e:36:8a:f1:ad:ad:
e3:db:3a:e2:50:8a:ac:20:dc:27:6f:1f:6d:32:a6:
ae:6c:16:f3:1b:8d:84:36:22:a8:db:78:b3:04:9c:
f3:8e:db:39:23:68:bc:f9:12:26:1f:d4:48:cd:08:
94:83:07:11:3f:ec:c8:6d:cf:88:c1:47:40:98:de:
63:0b:c3:d9:cf:05:ba:dc:4d:80:96:be:59:06:19:
56:bf:30:45:d0:6d:e2:e7:20:91:8d:33:18:5e:1f:
17:2a:47:c4:05:57:a3:d4:a9:14:96:5d:bf:5b:7e:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:8F:0F:1F:6E:D8:44:15:1C:2F:DB:42:3F:DF:D1:FB:32:4F:3C
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/PTCPDx9u2EQVHC_bQj_f0fsyTzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.112.0/22
195.47.232.0/24
IPv6:
2a0c:3180::/32
Signature Algorithm: sha256WithRSAEncryption
07:a2:92:96:88:ff:5f:41:ff:7b:f1:ab:2b:18:3f:55:a2:d8:
c5:ff:5c:fd:67:4c:64:6d:39:a8:10:43:3a:c0:39:a8:6c:f9:
18:05:5c:6a:ee:2f:93:9e:bd:04:79:42:5f:b4:f0:f6:70:5b:
bb:ae:9b:99:cb:83:a0:b3:f6:b0:7a:95:28:4c:4c:be:e4:31:
92:07:92:cb:2c:fa:8a:92:a9:b0:ad:30:45:bb:19:02:64:f1:
f5:1a:75:65:c8:ec:9c:65:ab:c0:c0:7f:57:84:ce:2a:6c:4c:
97:a7:f9:bd:7b:4b:4c:d8:80:2e:66:db:bf:4a:9c:d1:bd:be:
55:33:97:2c:ca:2e:de:06:e1:7b:04:07:8f:49:82:43:d3:a1:
a9:31:95:6f:84:e5:f0:45:9c:4a:02:94:99:04:83:a7:f0:3d:
22:4b:f9:ff:da:40:d0:e4:32:7d:44:d4:30:2b:8a:2e:e0:a2:
b7:73:ae:ea:f8:7c:20:3f:85:2c:64:a5:a2:e6:39:e3:28:6f:
07:f3:e2:ce:7d:63:ac:e7:0f:9b:c4:6d:aa:bf:5b:92:ab:a3:
4f:3e:17:9d:a8:01:74:b1:8f:aa:80:ae:fa:a3:d3:db:0c:8f:
8e:00:2f:19:2f:3e:47:63:02:6e:d2:92:e2:f6:00:e7:87:a3:
4e:2a:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:47 2024 by rpki-client on console-ams.rpki-client.org