Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/pgJefTiVWOrzxTDIMsZoITIU_XY.roa
File: pgJefTiVWOrzxTDIMsZoITIU_XY.roa (raw, json)
Hash identifier: NdvCfoufWPhgh9jdFfmvVDdLn+SHtsrJSNGv2IupS0o=
Subject key identifier: A6:02:5E:7D:38:95:58:EA:F3:C5:30:C8:32:C6:68:21:32:14:FD:76
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 08F96A9A
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/pgJefTiVWOrzxTDIMsZoITIU_XY.roa
Signing time: Sat 01 Jan 2022 16:00:20 +0000
ROA not before: Sat 01 Jan 2022 16:00:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 89.190.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150563482 (0x8f96a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6025e7d389558eaf3c530c832c668213214fd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:fe:36:8c:8e:89:e9:92:00:d1:3b:c4:98:
0d:4c:57:01:46:ff:57:72:a4:11:26:54:9c:05:bc:
b8:5b:8f:cc:3e:4f:fb:89:c0:7b:85:90:37:1f:97:
d3:53:8e:35:09:7e:3e:b3:dd:57:c0:b0:06:ff:3d:
7c:d9:a4:66:80:32:0f:97:53:38:13:83:fb:bf:5a:
c8:d9:45:ee:1a:79:bb:08:0c:58:8b:66:99:16:53:
1c:ce:e5:fd:81:93:50:1e:bc:77:d3:cb:34:23:d2:
da:09:e8:f6:69:cb:41:2c:4d:7c:80:84:c8:3d:87:
88:8d:ff:06:55:f3:04:5b:e3:9b:12:5f:4f:36:54:
b3:d3:e6:78:25:92:46:84:23:80:b1:d2:dc:19:f3:
b6:f1:91:fc:c6:9f:85:8f:ad:66:4d:20:4d:cd:b1:
f1:ca:4c:a8:be:2e:80:80:d5:be:5e:11:a6:fa:3a:
a0:2d:62:0a:be:1f:ff:ef:c4:10:a1:ba:f6:93:7f:
5d:50:43:8c:a2:e3:21:53:7f:14:ef:6f:7e:e1:0a:
40:5c:10:45:3d:b4:d7:4e:c8:ac:56:89:6a:3e:a8:
c8:9b:3b:5e:67:f5:6b:a8:8c:84:3b:89:72:aa:b9:
98:e1:bb:fa:90:4a:83:1e:27:49:d2:5b:59:1d:8a:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:02:5E:7D:38:95:58:EA:F3:C5:30:C8:32:C6:68:21:32:14:FD:76
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/pgJefTiVWOrzxTDIMsZoITIU_XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.157.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:49:4c:5d:20:b4:5f:16:ca:d7:42:67:13:60:37:3e:87:47:
47:fc:33:03:36:2d:d4:7c:a4:28:f9:51:bf:ea:f6:0e:3a:72:
14:d4:70:b9:ee:44:a9:40:ba:c1:dd:c6:66:6f:e2:f4:5e:86:
20:17:ad:9a:06:99:92:70:93:32:ab:3f:39:88:ed:fa:d6:52:
c6:22:51:dd:20:1a:eb:07:cb:8e:21:79:b2:d6:59:9b:f2:9a:
2a:5d:3b:64:81:4e:45:1d:80:27:78:98:f4:7e:42:a9:1c:07:
b3:0f:e0:9e:5d:04:6e:5d:41:2e:fd:cd:a4:f0:6d:28:f6:f7:
f0:79:76:1e:91:1c:97:a3:10:98:97:1b:62:9b:35:8a:03:9d:
97:f4:2a:89:32:e7:90:5a:30:3a:4c:1f:be:85:c1:8a:c5:fd:
9f:48:d3:a7:f5:db:e8:62:65:3b:d2:17:10:ac:9f:ed:38:cf:
80:40:31:c2:cb:6c:63:ad:54:ec:1f:17:74:74:af:d1:ff:af:
40:59:63:07:d3:ba:17:64:1d:b7:4f:7a:9c:f3:da:78:2c:48:
a7:03:3b:23:78:7f:ce:5d:05:30:61:8f:96:78:e1:a4:01:ff:
40:92:1d:46:08:a1:68:dd:d5:f9:72:fa:a4:b3:38:6d:48:6f:
2e:00:c8:be
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECPlqmjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MB4XDTIyMDEw
MTE2MDAyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTYwMjVlN2QzODk1
NThlYWYzYzUzMGM4MzJjNjY4MjEzMjE0ZmQ3NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKSI/jaMjonpkgDRO8SYDUxXAUb/V3KkESZUnAW8uFuPzD5P
+4nAe4WQNx+X01OONQl+PrPdV8CwBv89fNmkZoAyD5dTOBOD+79ayNlF7hp5uwgM
WItmmRZTHM7l/YGTUB68d9PLNCPS2gno9mnLQSxNfICEyD2HiI3/BlXzBFvjmxJf
TzZUs9PmeCWSRoQjgLHS3BnztvGR/MafhY+tZk0gTc2x8cpMqL4ugIDVvl4Rpvo6
oC1iCr4f/+/EEKG69pN/XVBDjKLjIVN/FO9vfuEKQFwQRT20107IrFaJaj6oyJs7
Xmf1a6iMhDuJcqq5mOG7+pBKgx4nSdJbWR2Kt1MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSmAl59OJVY6vPFMMgyxmghMhT9djAfBgNVHSMEGDAWgBSxp7DY3oJR0218
g/r2vH7+xztQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8x
L3BnSmVmVGlWV09yenhURElNc1pvSVRJVV9YWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWRO
dGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm+nTANBgkqhkiG9w0BAQsFAAOC
AQEArElMXSC0XxbK10JnE2A3PodHR/wzAzYt1HykKPlRv+r2DjpyFNRwue5EqUC6
wd3GZm/i9F6GIBetmgaZknCTMqs/OYjt+tZSxiJR3SAa6wfLjiF5stZZm/KaKl07
ZIFORR2AJ3iY9H5CqRwHsw/gnl0Ebl1BLv3NpPBtKPb38Hl2HpEcl6MQmJcbYps1
igOdl/QqiTLnkFowOkwfvoXBisX9n0jTp/Xb6GJlO9IXEKyf7TjPgEAxwstsY61U
7B8XdHSv0f+vQFljB9O6F2Qdt096nPPaeCxIpwM7I3h/zl0FMGGPlnjhpAH/QJId
RgihaN3V+XL6pLM4bUhvLgDIvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org