Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/Pbt4UfNqI2sf-WdnrReSZ1eSUdY.roa
File: Pbt4UfNqI2sf-WdnrReSZ1eSUdY.roa (raw, json)
Hash identifier: N69+TNXLiUH+brw8axqwV305Z8ujmW6lpWAjpr2kNV4=
Subject key identifier: 3D:BB:78:51:F3:6A:23:6B:1F:F9:67:67:AD:17:92:67:57:92:51:D6
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 08E18C54
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/Pbt4UfNqI2sf-WdnrReSZ1eSUdY.roa
Signing time: Sat 01 Jan 2022 00:57:15 +0000
ROA not before: Sat 01 Jan 2022 00:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208002
IP address blocks: 185.137.213.0/24 maxlen: 24
185.137.212.0/24 maxlen: 24
185.137.214.0/24 maxlen: 24
185.137.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148999252 (0x8e18c54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Jan 1 00:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dbb7851f36a236b1ff96767ad179267579251d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d8:44:02:93:27:4c:1d:c3:d0:c6:78:d9:d6:
12:1e:41:a3:df:18:75:a5:2d:79:bc:cc:8a:52:1f:
72:33:72:d1:df:42:d3:1c:a5:9e:96:b9:ee:2b:33:
df:93:b0:aa:f9:8b:f8:90:79:0e:1b:f6:b5:94:e1:
52:4a:3c:4e:b9:b7:d7:ef:b5:a1:e5:98:ec:4a:58:
5e:15:5a:9a:af:5a:75:58:f5:ee:33:ef:9d:14:9d:
e9:84:33:4d:15:58:fb:4a:95:e9:0e:25:bd:08:62:
f5:4f:09:7e:8f:ab:63:a9:ea:0f:36:c3:9d:9a:c5:
bc:3b:44:86:c6:38:85:e8:c2:3a:39:db:74:6d:02:
03:77:79:76:5f:91:be:03:15:07:59:8f:cd:ed:2b:
5c:85:7d:45:22:a7:88:a4:d2:1a:a6:26:c4:15:d1:
c9:35:30:36:e8:84:13:5f:4c:22:35:58:eb:61:03:
f5:8c:a8:79:fc:04:37:69:85:c0:d1:8b:6f:c3:ff:
78:ea:cd:18:3e:b8:c3:7b:b1:be:e2:69:fa:b1:4f:
4b:44:2e:2f:9a:fc:61:48:a3:c8:a4:ad:17:f7:0e:
74:1f:9e:2c:c8:dd:d5:a3:76:11:05:23:4e:c1:f0:
ec:60:63:c7:19:e7:9f:f6:56:94:dd:cc:eb:0f:44:
83:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:78:51:F3:6A:23:6B:1F:F9:67:67:AD:17:92:67:57:92:51:D6
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/Pbt4UfNqI2sf-WdnrReSZ1eSUdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:6e:91:a4:48:37:52:4f:14:ff:06:aa:19:4c:df:84:0a:fa:
07:a7:6d:3d:92:f3:33:e6:05:d6:e0:aa:82:67:25:88:fd:34:
61:5d:58:d7:79:a0:95:d2:67:1d:ad:67:03:c6:70:d9:13:b5:
54:11:57:9c:15:1f:e5:88:6f:cb:58:31:73:d7:44:ce:7d:5a:
bc:c5:eb:76:b5:6c:ef:b8:25:7b:31:f3:aa:8c:54:b3:b8:b0:
56:60:05:5d:03:b3:a9:a2:52:28:91:54:d9:88:2b:6e:4c:94:
20:ea:3b:91:6c:91:8f:ac:7b:5b:8f:61:fe:4d:3a:34:0c:40:
56:f9:cc:30:ed:fe:b7:06:69:48:d8:45:a9:2c:62:c0:e9:be:
a1:03:62:75:d6:5f:6b:64:6c:67:00:13:b9:4e:57:83:d8:ea:
b3:8e:51:19:6d:da:92:b8:bf:ac:52:da:8f:82:0f:87:b7:ac:
19:ad:08:d7:86:eb:a3:91:9e:63:5b:f2:1e:8f:7a:24:4c:4a:
c3:16:2d:0f:a6:b4:fe:06:52:59:d5:a1:58:4e:62:cc:7a:6b:
6b:67:1f:ef:58:9c:04:45:3d:28:a1:36:0a:c3:7b:ff:0f:8e:
16:71:b9:b3:4b:b4:8e:6a:05:cb:fd:a8:75:fc:76:c2:c0:d0:
94:c7:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:55 2024 by rpki-client on console-ams.rpki-client.org