Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/PiGQQe7TAdIpdHVtETB_A6YX2BE.roa
File: PiGQQe7TAdIpdHVtETB_A6YX2BE.roa (raw, json)
Hash identifier: PxDkPcsz+nWA7lWjIZHyvVsAoEqN6FO0zNoiNDQf244=
Subject key identifier: 3E:21:90:41:EE:D3:01:D2:29:74:75:6D:11:30:7F:03:A6:17:D8:11
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: E21901
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/PiGQQe7TAdIpdHVtETB_A6YX2BE.roa
Signing time: Sat 01 Jan 2022 10:00:45 +0000
ROA not before: Sat 01 Jan 2022 10:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202311
IP address blocks: 195.26.68.0/22 maxlen: 24
195.26.70.0/23 maxlen: 23
2a07:f680::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14817537 (0xe21901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Jan 1 10:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e219041eed301d22974756d11307f03a617d811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:68:85:7d:84:7c:b8:fa:d2:52:9b:f1:8b:
b2:93:a0:63:43:5a:2a:b5:47:13:6d:d9:97:de:03:
21:21:d2:4f:4f:53:b6:96:a6:a1:20:ee:cf:46:80:
21:d7:a8:45:a5:86:67:5c:79:81:9d:eb:35:90:db:
24:8a:5f:16:fc:3d:bc:74:b9:db:8a:e4:4c:6d:9b:
24:23:b0:3a:94:af:37:a7:2d:23:02:80:6f:62:43:
81:f8:0a:26:69:8d:b4:cd:f6:56:20:03:81:e9:04:
17:a2:f7:e7:9f:f0:0b:57:02:b6:9e:46:93:bd:7a:
d0:21:2f:13:bb:9d:ff:da:16:6d:e1:06:9f:38:ad:
f8:bd:3c:56:82:46:a8:d8:51:14:c5:63:2b:f7:3f:
4d:8c:c3:cb:1e:d5:c4:bd:3a:55:cf:d0:05:b2:44:
11:7c:40:36:b3:8f:a6:dc:fc:fb:3a:f3:c0:f3:a7:
ef:b7:80:a1:5f:02:19:09:19:5d:19:c1:2d:16:b0:
44:eb:24:4f:9a:16:02:41:4d:5b:ee:cd:a1:3f:cf:
6a:3e:5e:5e:c8:84:80:f4:3a:8b:23:f4:a7:31:77:
78:eb:fa:7e:57:d2:50:4d:20:cc:84:e1:c0:54:77:
79:e6:77:04:82:f3:6c:cb:95:51:bf:d8:5a:0d:ef:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:21:90:41:EE:D3:01:D2:29:74:75:6D:11:30:7F:03:A6:17:D8:11
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/PiGQQe7TAdIpdHVtETB_A6YX2BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.68.0/22
IPv6:
2a07:f680::/29
Signature Algorithm: sha256WithRSAEncryption
63:ce:66:fc:e5:cd:1a:60:60:29:e7:ca:f4:6b:c9:82:88:35:
0c:31:04:5f:01:3f:93:fa:29:7b:49:3f:dd:11:bc:24:68:14:
5c:30:ad:f6:b8:29:3b:d8:65:04:23:44:b6:aa:29:f0:9c:76:
64:3f:81:f8:85:60:5c:6b:cf:07:b3:c2:e5:3d:a1:8b:20:65:
fb:ac:1e:b7:07:51:cc:6d:e1:d4:41:3e:88:56:c4:36:e0:93:
47:35:5c:aa:ea:32:c0:67:06:79:09:46:96:eb:18:e4:89:cb:
86:e1:85:01:2f:0d:6e:f6:73:48:ec:69:a7:d1:4d:96:99:25:
68:a4:37:f8:41:99:cf:73:c5:b2:bd:44:26:f9:80:f5:60:c6:
22:4e:e3:72:21:71:ea:21:aa:86:ad:1e:0b:f1:08:98:83:c5:
3a:04:d3:3b:00:26:af:7e:84:aa:fd:5c:9c:41:e9:67:f5:5b:
7f:96:4d:ce:fc:02:fe:11:af:6c:39:5a:1c:25:91:b0:fd:13:
9e:ca:8a:88:a3:de:35:55:83:03:1f:c6:ea:ce:9e:69:87:c9:
63:3b:be:40:d6:18:db:b0:2e:d6:82:67:4c:1d:b0:4c:e3:ba:
c6:6e:f1:71:0f:34:66:2e:e0:89:b5:4b:49:ec:1a:b7:f4:c3:
c6:91:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:41 2024 by rpki-client on console-fra.rpki-client.org