Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/PpFD7QPNjlXri33PbwgTMR86d8s.roa
File: PpFD7QPNjlXri33PbwgTMR86d8s.roa (raw, json)
Hash identifier: UFr7awkYU37ZZxAEUCLMIJIjS7oij9fS3tA1C44uv7Y=
Subject key identifier: 3E:91:43:ED:03:CD:8E:55:EB:8B:7D:CF:6F:08:13:31:1F:3A:77:CB
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1C9A94F2
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/PpFD7QPNjlXri33PbwgTMR86d8s.roa
Signing time: Wed 23 Mar 2022 10:22:22 +0000
ROA not before: Wed 23 Mar 2022 10:22:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203464
IP address blocks: 176.116.230.0/23 maxlen: 24
91.233.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479892722 (0x1c9a94f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Mar 23 10:22:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e9143ed03cd8e55eb8b7dcf6f0813311f3a77cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:ad:13:3f:e4:6e:6d:ce:5d:ac:0b:47:5c:
80:9b:d8:74:5a:69:35:18:c2:97:c7:c6:2f:41:d3:
38:2f:0c:44:71:61:7d:c7:68:3e:41:07:8d:2d:5f:
5b:8e:2d:4f:dc:9a:f0:ec:3e:93:a3:dd:ad:80:68:
f1:24:45:38:0c:5e:b2:3f:f9:e7:4c:ec:c3:2c:f7:
87:a1:98:5d:5a:f4:c7:b3:cf:cf:d6:2f:c7:b2:af:
6d:ae:ab:8d:d1:68:0c:1e:eb:f8:6c:23:50:23:03:
9f:96:92:a9:ad:35:10:01:3c:0d:71:c2:84:1b:af:
4f:74:ae:67:2e:88:3c:0a:32:80:ca:4b:e5:a7:33:
c0:60:02:dd:4f:1e:ea:00:a8:25:82:9e:8b:58:8d:
4d:aa:c0:2f:fb:1a:5b:66:d3:22:d0:b3:44:e5:d3:
6e:62:41:ad:2d:d3:b2:57:db:d4:c6:15:f4:26:0f:
71:91:bb:e1:b4:91:ae:f1:47:8d:8d:1d:39:c6:a7:
ae:08:02:6a:3f:e3:1f:36:a0:8b:b6:6a:78:78:13:
6e:01:18:4b:78:a2:81:8d:15:fe:a1:c1:ca:79:d9:
34:af:6f:63:1b:3e:0e:73:fe:da:33:50:21:2b:72:
ea:60:3e:bb:c9:f2:3a:94:f5:6d:a4:da:0b:6f:02:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:43:ED:03:CD:8E:55:EB:8B:7D:CF:6F:08:13:31:1F:3A:77:CB
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/PpFD7QPNjlXri33PbwgTMR86d8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.201.0/24
176.116.230.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:3e:d2:f4:6e:94:71:70:a5:35:2d:79:dd:aa:0b:41:bf:db:
ac:eb:30:3e:cb:2d:28:0e:79:a9:27:6a:ea:76:cf:bf:71:a8:
ff:e1:01:b7:38:22:dd:22:a0:da:ef:e4:a6:08:32:0b:3a:a8:
93:82:89:6c:9e:27:e2:ba:27:f7:46:a8:e2:e1:aa:31:6e:ad:
d2:23:7a:f2:5d:fe:89:66:3b:f9:62:74:6a:5e:e6:69:23:89:
3b:58:0c:e9:17:91:99:b2:0f:58:76:f7:92:b7:7f:08:33:ee:
38:b3:b1:ce:62:6a:de:5d:0d:ba:70:08:a3:dc:7a:a3:1d:00:
d9:d7:cf:ac:1b:bd:e0:1f:ec:76:ff:f2:41:ee:71:f6:ea:24:
c0:a4:c8:01:b5:df:4d:b4:a3:cc:e0:f4:bd:4b:91:0c:93:27:
08:90:4a:83:22:bf:ea:23:3e:d6:a6:cd:9a:83:b8:00:5c:4a:
f5:cc:79:81:a4:ce:77:f4:05:89:49:3a:a2:15:33:00:76:09:
1a:1e:77:bb:6e:0e:a5:17:9f:68:f0:57:3e:84:9d:80:b3:c5:
97:d0:6a:5d:5e:86:65:64:01:63:66:73:2a:8e:d3:b6:b4:0c:
5a:5e:01:de:e9:79:46:d8:01:e8:11:aa:a8:3d:52:29:1e:bd:
a1:68:9f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org