Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/PCZo_chsxatTLoAWtoNelo1dvxc.roa
File: PCZo_chsxatTLoAWtoNelo1dvxc.roa (raw, json)
Hash identifier: UZZpcriyx2uHC1UZaBahNRfBq6/CiMJT7A/fIDueeUQ=
Subject key identifier: 3C:26:68:FD:C8:6C:C5:AB:53:2E:80:16:B6:83:5E:96:8D:5D:BF:17
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 0184E17C93A07307887B84E4E51C306A0F1A
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/PCZo_chsxatTLoAWtoNelo1dvxc.roa
Signing time: Mon 05 Dec 2022 08:52:28 +0000
ROA not before: Mon 05 Dec 2022 08:52:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34373
IP address blocks: 185.97.228.0/22 maxlen: 22
185.165.68.0/22 maxlen: 22
45.128.64.0/22 maxlen: 24
86.48.68.0/22 maxlen: 22
91.219.76.0/22 maxlen: 22
193.105.233.0/24 maxlen: 24
185.56.52.0/22 maxlen: 22
185.69.204.0/22 maxlen: 22
45.132.40.0/22 maxlen: 22
185.116.40.0/22 maxlen: 23
185.210.128.0/22 maxlen: 24
217.61.253.0/24 maxlen: 24
2a0b:ec00::/29 maxlen: 29
2a06:7bc0::/29 maxlen: 29
2a0b:57c0::/29 maxlen: 36
2a06:900::/29 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:7c:93:a0:73:07:88:7b:84:e4:e5:1c:30:6a:0f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Dec 5 08:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c2668fdc86cc5ab532e8016b6835e968d5dbf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6f:d1:3f:93:87:76:fe:f2:c5:a3:61:54:02:
92:88:5c:a7:0d:f5:76:44:8a:9b:36:86:ac:9c:17:
a1:ad:eb:a6:3b:03:f1:f7:05:7b:a7:b4:7f:e3:00:
0c:8d:e2:00:a8:f2:01:c5:b4:f2:97:ac:e7:55:c7:
25:f7:a7:b5:90:43:06:95:8a:0a:b9:09:eb:f8:b6:
af:83:6e:74:0f:e7:a0:3e:5d:c7:52:d9:d2:1a:c5:
0f:5c:bb:69:5b:2f:13:15:44:64:49:72:72:de:38:
84:e2:dc:3c:c6:22:e7:bd:6a:f1:8d:22:37:1c:47:
ee:95:61:81:aa:57:03:3e:3f:b4:10:8f:7e:b8:67:
63:f6:fb:77:27:03:a5:6c:1a:54:fc:3e:2c:a6:8d:
d6:b2:03:4e:a5:32:d1:a1:3e:dc:26:a0:94:b1:28:
d0:e2:53:64:f8:35:94:04:fe:77:4a:fe:8a:79:60:
8b:ee:c4:8e:bf:9a:f5:f4:66:07:a8:2f:18:55:14:
b6:4c:30:e7:ff:16:3e:4f:5d:e4:79:e1:a5:66:17:
d6:6b:8d:cd:2a:75:e4:7e:d0:b1:66:09:aa:62:49:
aa:9e:77:0c:51:fd:b9:2e:43:13:73:d0:60:47:7b:
e2:2a:76:e0:91:eb:a4:c1:1b:e8:e3:91:9f:69:31:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:26:68:FD:C8:6C:C5:AB:53:2E:80:16:B6:83:5E:96:8D:5D:BF:17
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/PCZo_chsxatTLoAWtoNelo1dvxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.64.0/22
45.132.40.0/22
86.48.68.0/22
91.219.76.0/22
185.56.52.0/22
185.69.204.0/22
185.97.228.0/22
185.116.40.0/22
185.165.68.0/22
185.210.128.0/22
193.105.233.0/24
217.61.253.0/24
IPv6:
2a06:900::/29
2a06:7bc0::/29
2a0b:57c0::/29
2a0b:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
4e:17:55:b3:74:fa:a6:ee:dc:87:b8:6c:4e:fc:b1:33:dc:30:
14:57:98:ca:c6:4e:f8:07:0e:1e:80:07:20:ab:a3:dc:1d:30:
99:b9:91:22:51:3d:cc:cc:db:f9:35:38:12:0d:5f:03:09:56:
d7:05:34:c1:9c:26:7f:00:13:a1:de:be:ce:97:5f:40:76:c9:
5b:67:15:a4:bc:52:fa:2d:bf:83:bc:a9:11:e3:e8:7a:21:46:
62:be:ff:17:69:99:d1:a8:0f:e9:6b:3b:14:57:57:a0:ef:57:
ab:6d:b0:85:1d:df:4d:b6:4e:5e:08:6b:4c:92:8d:cb:2d:ad:
57:3f:3e:8c:2d:44:99:3c:63:eb:5f:ec:f8:62:aa:e6:e6:aa:
42:62:68:3d:8c:58:39:77:c4:c3:33:51:fd:82:78:e1:90:eb:
40:c9:a2:7d:87:07:f0:df:dd:da:f7:c6:e6:ac:55:72:fa:37:
cc:41:d6:6d:74:eb:8b:4b:61:f0:43:9b:5a:1a:71:80:87:7c:
8c:f4:2d:25:61:0c:a9:19:89:6f:8a:7b:4a:c6:fe:d8:a1:2b:
86:ec:dd:ae:2c:79:8d:41:b6:41:a0:cc:25:7b:30:d8:2a:6f:
61:53:21:18:9c:6f:b4:be:b7:96:70:4a:41:f0:93:b5:0c:fe:
88:25:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org