Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/pTYL0sVrEwdOufI5duqUgEnY75o.roa
File: pTYL0sVrEwdOufI5duqUgEnY75o.roa (raw, json)
Hash identifier: enEaLug3TFzD5Vmnsk8qfb9QXN+E54xftqqaxYjc/+Y=
Subject key identifier: A5:36:0B:D2:C5:6B:13:07:4E:B9:F2:39:76:EA:94:80:49:D8:EF:9A
Certificate issuer: /CN=88f6580a229ccfd5369e19e252adcb728cdacd39
Certificate serial: 03165CE5
Authority key identifier: 88:F6:58:0A:22:9C:CF:D5:36:9E:19:E2:52:AD:CB:72:8C:DA:CD:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPZYCiKcz9U2nhniUq3LcozazTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/pTYL0sVrEwdOufI5duqUgEnY75o.roa
Signing time: Mon 03 Jan 2022 16:02:58 +0000
ROA not before: Mon 03 Jan 2022 16:02:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399114
IP address blocks: 185.234.115.0/24 maxlen: 24
94.154.8.0/24 maxlen: 24
2a10:e580::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51797221 (0x3165ce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f6580a229ccfd5369e19e252adcb728cdacd39
Validity
Not Before: Jan 3 16:02:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5360bd2c56b13074eb9f23976ea948049d8ef9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:c9:0f:d1:a1:5b:fa:93:ad:9f:20:6c:43:
a5:a6:43:3d:21:5a:ff:93:91:0c:ef:78:5e:ff:48:
bd:0f:79:0f:7f:42:90:75:ee:82:ae:54:8d:74:8e:
78:8c:7b:b6:50:4b:d3:65:46:15:9d:8e:dd:78:bc:
52:e8:b3:55:0e:9f:87:84:b6:a2:3e:21:c9:7e:d6:
d4:88:9c:4d:51:a9:f9:c0:b0:cd:e1:6f:8c:c0:4d:
4a:e9:0c:f3:a5:7d:88:bd:35:93:15:79:20:4e:07:
22:22:fc:5e:e0:9f:29:32:4c:a6:76:fc:9a:3a:e5:
12:28:49:ec:fe:a6:15:09:b3:a8:3a:23:73:30:6f:
ab:04:74:fd:3e:f3:a1:08:bb:e0:25:5c:5b:e7:c5:
e0:8e:7e:d5:7b:6d:95:29:c7:00:83:63:5d:01:32:
11:bb:14:3b:1a:ae:61:30:d2:80:a1:2b:ea:0f:c0:
c3:ff:52:5f:2a:6f:06:33:14:b1:57:57:1b:31:62:
a3:93:7c:5e:68:7b:bb:75:d3:5b:c9:21:46:81:aa:
7b:52:15:83:ad:74:fe:55:9d:3e:13:f2:4a:91:75:
d7:78:13:66:87:0d:01:c9:dc:79:d2:65:ea:df:9e:
aa:02:79:dc:3e:73:a0:33:08:07:d4:d2:a6:e3:71:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:36:0B:D2:C5:6B:13:07:4E:B9:F2:39:76:EA:94:80:49:D8:EF:9A
X509v3 Authority Key Identifier:
keyid:88:F6:58:0A:22:9C:CF:D5:36:9E:19:E2:52:AD:CB:72:8C:DA:CD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPZYCiKcz9U2nhniUq3LcozazTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/pTYL0sVrEwdOufI5duqUgEnY75o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/iPZYCiKcz9U2nhniUq3LcozazTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.8.0/24
185.234.115.0/24
IPv6:
2a10:e580::/29
Signature Algorithm: sha256WithRSAEncryption
a1:d3:41:55:6a:9b:a7:ca:63:85:3c:25:b8:15:36:32:09:98:
18:83:87:76:cd:01:53:da:95:d4:2d:3f:50:6f:3d:73:fb:98:
33:12:e8:d8:72:cf:d2:11:72:45:48:3f:fa:9b:a3:71:8c:7d:
08:10:53:7a:fd:ef:45:d6:4b:18:b2:b6:04:80:36:e4:86:c3:
54:75:06:9d:8c:5c:3e:58:bb:bd:58:d2:e1:eb:fa:33:2b:c0:
e1:e9:b4:b0:6e:f9:73:b7:fe:5e:2e:3c:f1:c8:17:56:73:fb:
9a:66:e2:57:d8:e1:5f:4f:6c:de:91:c4:cc:2e:77:2e:b2:e4:
a3:ec:31:85:6f:2e:a5:d9:30:df:4e:18:31:05:e4:da:60:85:
34:3e:7b:ca:0e:c0:36:67:3f:f5:20:5b:08:e3:a6:07:d5:56:
a1:1b:08:e4:1a:76:57:a3:77:23:c3:42:7d:36:bd:f6:1d:28:
c5:fd:2b:e5:63:44:97:40:0a:6f:d9:ad:fb:44:9c:f7:97:85:
0d:c3:30:8f:4d:6f:e9:4f:83:ff:78:e5:2d:7b:3e:c4:99:5e:
e1:d4:7e:87:29:33:64:52:5c:d9:18:b1:e0:64:28:68:4f:04:
b2:82:3c:5a:9d:48:e0:9c:1b:4c:9b:e9:ce:62:07:a3:59:f9:
47:a9:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:26 2023 by rpki-client on console-ams.rpki-client.org