Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/pkyi8LfElYps0FogkyoT1eK3R7A.roa
File: pkyi8LfElYps0FogkyoT1eK3R7A.roa (raw, json)
Hash identifier: jdeeU88S8WLumQQbOBzhZEY+2bVuvGvssuedOeuz2a0=
Subject key identifier: A6:4C:A2:F0:B7:C4:95:8A:6C:D0:5A:20:93:2A:13:D5:E2:B7:47:B0
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0C256D32
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/pkyi8LfElYps0FogkyoT1eK3R7A.roa
Signing time: Mon 06 Jun 2022 17:29:21 +0000
ROA not before: Mon 06 Jun 2022 17:29:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.148.242.0/24 maxlen: 24
185.148.241.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
45.133.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203779378 (0xc256d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jun 6 17:29:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a64ca2f0b7c4958a6cd05a20932a13d5e2b747b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:2f:7d:13:57:17:ea:95:8c:a3:9d:01:94:
f8:a5:72:7b:eb:62:55:d6:05:4b:ad:be:f1:8f:63:
ed:4f:84:b2:4c:f3:f1:8f:0f:12:51:4c:0f:95:c4:
ef:fa:1b:e5:a1:45:54:71:ea:fd:5a:58:74:cd:79:
b5:44:a4:92:da:25:cb:34:c0:d7:f1:ab:f5:fe:f7:
80:b8:06:ac:fa:7b:75:aa:57:8e:63:e3:4f:31:41:
e4:5e:6b:85:66:7c:28:2d:48:64:a9:88:26:19:9a:
1e:c9:44:c1:b0:f2:07:91:18:de:00:39:7d:cd:96:
b4:e7:af:10:2c:07:f0:8f:94:a6:52:db:13:02:72:
9e:cc:18:2f:ab:d4:1a:55:f3:6b:47:01:f3:0c:e9:
7d:79:af:c5:73:6f:41:80:5b:b8:d3:2c:08:a3:3b:
8c:8f:18:67:f4:c7:50:dc:d9:18:8a:b6:52:7f:e2:
9b:9a:d1:2a:3a:e1:27:ba:33:6c:58:b4:58:8e:bd:
6e:6b:5b:d9:aa:10:9f:35:dd:cf:01:4f:2d:4e:5a:
2f:15:85:8a:b3:f9:29:74:ff:ca:4a:23:1a:1b:9c:
66:81:b1:f7:ac:61:fb:76:c1:08:72:64:5d:bd:67:
35:3a:de:ad:ec:06:06:f3:7c:72:cd:22:37:17:08:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4C:A2:F0:B7:C4:95:8A:6C:D0:5A:20:93:2A:13:D5:E2:B7:47:B0
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/pkyi8LfElYps0FogkyoT1eK3R7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.39.0/24
185.148.241.0-185.148.243.255
Signature Algorithm: sha256WithRSAEncryption
62:44:8a:70:11:00:17:48:d2:c1:8e:c3:0d:f5:6a:ec:80:58:
f3:99:20:06:e7:ab:9d:a9:3b:53:fc:62:c1:59:a1:9e:64:83:
52:84:0f:fe:7a:b1:06:2b:08:d7:cf:30:0f:e3:5d:9a:68:ad:
62:5c:a5:d8:cd:d9:b7:58:91:05:d6:67:a1:4d:8a:d0:12:03:
7e:3c:a0:79:b5:f8:af:4f:f0:30:e8:a7:68:cc:5e:ad:57:1b:
84:e1:b4:3a:af:f8:3b:ea:bc:93:43:7a:52:fb:8c:1c:6c:bc:
f9:17:8c:4c:19:7a:53:7a:48:20:5a:42:b1:d2:ff:30:39:21:
fd:26:8d:08:5c:8d:9f:a2:24:ac:ff:65:59:08:b2:76:73:f7:
43:02:38:e6:3f:84:3a:b6:c1:d8:28:b1:82:3f:53:f6:5a:98:
49:87:9b:ca:95:d4:d3:22:d8:af:c9:03:7f:3e:3f:75:5b:84:
a6:f0:70:28:d9:78:ae:85:f7:39:bd:c8:f4:39:36:ea:9f:88:
d9:7d:4d:5f:92:eb:d3:ca:67:d0:1e:ca:49:7a:7e:f4:55:00:
bb:36:5b:2c:91:fc:9e:8a:9e:83:74:cf:ff:21:5f:93:64:d5:
fa:e2:f2:84:99:91:c9:24:28:bc:64:91:00:de:63:af:47:e5:
c5:af:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org