Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/PFJbbxv2BdvqNQKqwVtLIIsWhlE.roa
File: PFJbbxv2BdvqNQKqwVtLIIsWhlE.roa (raw, json)
Hash identifier: iC/Z0xzUz1+xjsho7npyEA4NmbyT8n2aaR2jNixo4Qk=
Subject key identifier: 3C:52:5B:6F:1B:F6:05:DB:EA:35:02:AA:C1:5B:4B:20:8B:16:86:51
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0184526129E2EC24BEDC317F6EA48D0C408C
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/PFJbbxv2BdvqNQKqwVtLIIsWhlE.roa
Signing time: Mon 07 Nov 2022 13:56:50 +0000
ROA not before: Mon 07 Nov 2022 13:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 109.203.160.0/22 maxlen: 24
109.203.164.0/22 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:61:29:e2:ec:24:be:dc:31:7f:6e:a4:8d:0c:40:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 7 13:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c525b6f1bf605dbea3502aac15b4b208b168651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c2:f4:41:54:0f:53:02:a2:71:dc:e7:14:cb:
10:f9:30:ec:da:7b:a3:92:32:7f:fa:c0:00:21:60:
3b:ab:29:77:0c:90:5b:41:f3:62:2d:ad:fd:72:5a:
3b:4f:86:30:98:e3:ba:be:fe:44:96:c8:e5:ea:28:
5d:dd:7d:e0:4e:9d:cc:c7:4e:47:01:69:01:ea:e1:
e3:cb:08:2c:8d:21:38:31:04:37:8f:b1:72:c1:36:
06:de:54:92:22:93:51:c2:d0:47:77:d7:20:8c:01:
75:31:7d:9e:42:d4:23:0f:83:f7:62:56:7b:2b:e2:
e5:2a:36:7f:07:13:db:ea:c1:b7:88:63:9d:d8:c3:
5f:5a:31:16:17:77:48:9b:a0:65:98:7d:e8:17:d6:
9e:4e:1c:a8:85:86:ad:88:40:a9:0e:be:f4:bc:6a:
ef:2c:e5:07:43:a1:4c:83:3b:c5:35:78:7b:81:56:
4b:27:ea:0f:98:79:af:ab:a4:25:17:e1:ff:5a:32:
cc:1f:6e:27:70:44:a8:9b:82:60:55:79:a2:3d:2c:
e4:0d:31:7e:db:2b:d7:0b:86:bc:b5:e1:08:2f:22:
70:23:a5:ea:6e:0a:8d:37:17:01:2a:dc:09:b3:a9:
c2:31:6e:4f:4e:0a:48:4b:db:1e:de:d3:53:81:b8:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:5B:6F:1B:F6:05:DB:EA:35:02:AA:C1:5B:4B:20:8B:16:86:51
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/PFJbbxv2BdvqNQKqwVtLIIsWhlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/21
109.203.160.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:b5:58:1f:cb:85:3d:2a:57:db:46:f5:ef:11:80:41:e7:12:
45:e3:26:81:19:a6:45:96:64:65:0a:d4:ff:ee:45:3a:ed:78:
9f:06:05:35:13:ab:e7:15:13:3e:39:c2:48:c1:ad:94:fe:f8:
79:86:9d:2f:6e:41:70:0b:88:28:34:70:4c:0f:d1:5b:8e:e4:
e7:a3:0c:8d:88:79:93:33:6f:f9:34:26:88:ca:b6:e6:c5:b7:
f4:e9:2c:a2:be:0c:c5:cc:b6:73:cf:8c:d5:36:45:28:3d:21:
51:c2:89:19:1b:81:86:96:e3:03:c5:87:07:55:fb:ac:c4:89:
a1:29:19:17:03:0d:87:54:a4:6b:5d:43:8e:03:41:3e:0d:5e:
9d:63:12:0f:86:23:56:b9:3f:28:f3:04:f1:8c:f5:77:58:72:
e2:98:ca:e7:7a:03:27:02:4e:2a:61:37:be:22:a5:fb:ad:72:
5f:0a:12:63:3b:88:5f:51:43:30:de:e8:56:d7:40:f8:b1:be:
14:3f:03:b7:54:a4:d2:2b:df:18:44:ab:59:18:8f:13:49:9a:
11:39:73:34:dc:5e:82:ed:ed:e9:3b:75:5a:df:47:89:3f:95:
9f:5d:b3:c5:81:be:81:ef:d5:7e:88:2b:35:b6:c1:59:b2:fd:
6d:6b:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:23 2025 by rpki-client