Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PSPTOj4Z0eP9j_F4a3vozb8rTb4.roa
File: PSPTOj4Z0eP9j_F4a3vozb8rTb4.roa (raw, json)
Hash identifier: 74tw2LLQA61636tpETiF4/obATe8H8DJkLT/vSXqK2c=
Subject key identifier: 3D:23:D3:3A:3E:19:D1:E3:FD:8F:F1:78:6B:7B:E8:CD:BF:2B:4D:BE
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38B21F07
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PSPTOj4Z0eP9j_F4a3vozb8rTb4.roa
Signing time: Tue 17 May 2022 05:30:21 +0000
ROA not before: Tue 17 May 2022 05:30:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59484
IP address blocks: 151.251.40.0/24 maxlen: 24
151.251.41.0/24 maxlen: 24
151.251.42.0/24 maxlen: 24
151.251.60.0/24 maxlen: 24
87.227.140.0/24 maxlen: 24
151.251.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951197447 (0x38b21f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:30:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d23d33a3e19d1e3fd8ff1786b7be8cdbf2b4dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:ca:9d:24:1d:b5:f1:1d:fe:5a:67:88:af:
3b:d0:99:b8:9c:06:c8:9c:d1:73:41:d3:61:a8:3a:
2e:8b:7e:03:2c:d3:20:ac:9b:03:b7:b7:a0:e1:e2:
2a:c3:7a:a7:a3:1c:8f:c8:e7:3f:c6:b7:60:48:2d:
7a:e3:eb:de:0a:a3:fc:d3:a0:82:4a:6c:90:98:49:
6c:ce:a2:51:d7:23:a4:ac:09:e2:ed:e8:92:17:8e:
3b:19:37:eb:2e:1b:f6:e6:2f:e1:c0:05:21:cb:ee:
a4:ec:16:40:17:d6:cc:d4:17:6d:dc:d9:ba:6c:2b:
57:fd:2b:b2:b5:94:70:79:02:69:15:7c:6a:5a:73:
6e:99:3b:7f:a7:29:1d:bf:ff:76:95:eb:6d:74:fe:
7d:27:18:71:83:5d:0b:a4:64:8b:d2:9b:13:3d:4c:
0d:be:9a:fd:09:5d:42:2d:24:07:0b:17:e5:22:82:
01:83:e1:ed:16:18:a0:e0:9c:88:27:27:d3:c9:a6:
6b:dc:be:10:f7:af:0d:2a:19:db:50:50:d6:ec:96:
6b:62:13:25:f0:0d:ff:03:8e:2c:5c:a6:fa:ae:1a:
39:fb:96:ab:5b:2c:f7:7b:47:87:40:d2:32:0b:16:
23:03:6a:3c:ad:50:81:78:9f:fc:73:47:04:92:0f:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:23:D3:3A:3E:19:D1:E3:FD:8F:F1:78:6B:7B:E8:CD:BF:2B:4D:BE
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PSPTOj4Z0eP9j_F4a3vozb8rTb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.227.140.0/24
151.251.32.0/22
151.251.40.0-151.251.42.255
151.251.60.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2d:1c:19:08:8d:b6:3c:6c:64:18:c9:36:ec:7d:8f:f9:55:
11:db:56:1f:b8:70:15:b4:a0:67:5e:10:78:f9:35:c8:02:bc:
4e:ad:e3:0d:df:d3:2f:5e:3e:d7:66:00:61:b9:ac:b7:de:f7:
05:e5:cb:d6:27:54:08:da:9a:c8:27:ab:af:b8:66:22:2a:72:
26:a0:b2:0c:4a:9c:9c:84:8b:83:c0:1c:18:ae:5e:63:fe:45:
9e:1c:54:be:c0:a4:8a:ca:50:ea:39:00:2c:2c:c1:09:db:d7:
2c:f7:ba:90:2b:38:d8:67:3f:24:f1:64:41:e9:f5:84:8f:71:
9b:e7:86:ce:b5:a5:1a:7b:9c:25:cf:9a:2c:0f:cd:83:fc:a4:
e9:4e:88:a8:07:ea:5f:b2:d7:c1:ca:64:b7:ac:d7:f7:ab:56:
ae:d4:bc:e4:33:29:08:7d:ae:71:f8:35:27:0f:49:87:28:5d:
13:f8:46:e9:d6:41:13:74:4a:15:05:6a:f5:26:3a:ed:6e:ff:
47:1f:89:52:3b:c9:94:c2:1f:ee:df:a4:9b:37:9d:26:da:e8:
9f:34:86:8e:04:e0:a5:1f:cd:1e:1a:f9:20:fd:11:1f:61:71:
c1:c6:81:03:1e:49:80:52:ca:6c:a7:84:b5:56:b2:b0:b3:17:
fd:47:92:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:19 2023 by rpki-client on console-fra.rpki-client.org