Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/PgUPVsWoAEEatnuSOh3WE32e7N0.roa
File: PgUPVsWoAEEatnuSOh3WE32e7N0.roa (raw, json)
Hash identifier: GA3fnoNHh/l2wP3ggXlB+j2/vhLi1JnUhOTnSVG1pZM=
Subject key identifier: 3E:05:0F:56:C5:A8:00:41:1A:B6:7B:92:3A:1D:D6:13:7D:9E:EC:DD
Certificate issuer: /CN=e99125e9ea822e034667c821a85ca5ab14ec0ad8
Certificate serial: 06B801FF
Authority key identifier: E9:91:25:E9:EA:82:2E:03:46:67:C8:21:A8:5C:A5:AB:14:EC:0A:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/PgUPVsWoAEEatnuSOh3WE32e7N0.roa
Signing time: Sat 01 Jan 2022 05:02:14 +0000
ROA not before: Sat 01 Jan 2022 05:02:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59571
IP address blocks: 91.243.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112722431 (0x6b801ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99125e9ea822e034667c821a85ca5ab14ec0ad8
Validity
Not Before: Jan 1 05:02:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e050f56c5a800411ab67b923a1dd6137d9eecdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:d8:5e:35:4b:fc:15:80:2d:3d:8e:9e:47:
ec:57:03:db:a6:17:83:a2:29:2d:1a:7b:08:43:a0:
de:18:42:d2:d2:d7:fe:77:35:78:aa:7c:f3:16:ca:
b0:c2:2f:de:6e:f4:1c:0c:6a:1c:56:26:44:9f:ce:
c2:b3:52:ff:86:c5:3f:4d:eb:39:9b:f3:79:af:05:
d4:74:61:6a:1c:f9:fe:ae:40:ec:d3:a3:a1:00:64:
37:08:5f:31:38:d2:ec:13:02:7f:ed:d6:e7:f8:2d:
50:5f:69:d9:c4:55:36:d1:b2:3c:6e:8c:92:5e:4d:
4e:96:49:45:e3:5d:3b:d5:6e:a2:cb:e6:5c:56:c6:
51:3e:02:ba:84:5b:9a:7c:25:22:5a:af:04:55:f3:
7e:ba:1c:a2:86:1c:bb:0a:41:5c:7a:a8:83:1a:4d:
ea:56:c5:0a:84:b5:67:14:e1:92:8b:5c:ec:e3:14:
d5:2c:8b:93:0c:54:f8:ec:73:70:96:69:bd:b6:38:
49:59:ff:06:29:a1:c7:3c:fe:b0:13:ab:b2:90:e8:
cb:30:b4:55:0b:29:d8:d7:d6:02:01:9e:c8:c5:31:
ad:67:69:ca:8e:2a:6d:b5:1d:d2:c4:a2:57:e3:13:
ed:f8:03:a0:3a:65:b0:7c:f4:bd:69:1f:61:4b:b5:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:0F:56:C5:A8:00:41:1A:B6:7B:92:3A:1D:D6:13:7D:9E:EC:DD
X509v3 Authority Key Identifier:
keyid:E9:91:25:E9:EA:82:2E:03:46:67:C8:21:A8:5C:A5:AB:14:EC:0A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/PgUPVsWoAEEatnuSOh3WE32e7N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.68.0/24
Signature Algorithm: sha256WithRSAEncryption
48:3d:40:23:0a:4f:f1:03:54:60:fd:ec:f8:23:df:5a:09:22:
6b:88:ed:68:d5:f9:ae:f9:a5:d1:c4:f9:40:e8:48:46:eb:89:
34:7d:34:88:b4:b0:08:5d:32:47:f8:34:ed:f4:0e:5a:0d:aa:
66:98:1f:72:ae:28:d3:c7:68:70:1f:39:fd:69:f1:b7:20:46:
d2:dd:f6:ac:ad:b9:b2:f9:1f:5e:c6:eb:75:31:b4:0b:60:91:
fe:52:b5:cd:90:f3:03:e5:51:3d:99:59:3c:be:66:ac:18:1b:
4a:51:a2:25:b1:80:33:53:23:1c:e5:50:16:47:63:4c:2d:7d:
5e:a7:6e:49:02:6c:0c:ed:83:f2:56:a8:45:84:42:32:12:c0:
af:a0:52:1d:81:38:5f:4f:0d:77:0e:a2:9d:90:63:fc:4d:54:
0e:d9:d7:79:b6:b7:c7:41:ce:4e:89:9e:91:e4:59:ae:e0:2d:
36:1a:4d:1b:fb:50:3f:51:78:ca:43:61:91:47:3a:a7:b3:38:
a3:f5:c9:ce:19:1c:97:36:3b:d6:6f:dc:52:d7:7b:73:9d:e9:
66:42:50:66:4d:9d:f0:e4:ac:09:8b:ce:c1:ff:20:d0:e0:b4:
66:33:97:51:d8:41:71:78:12:5b:30:46:83:7d:85:4f:bd:81:
5f:e2:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:24 2023 by rpki-client on console-ams.rpki-client.org