Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/PpYcUbAsrSfUNBErCVridDoSj3g.roa
File: PpYcUbAsrSfUNBErCVridDoSj3g.roa (raw, json)
Hash identifier: ZNQEBl7p+v9V0T2xGmrVr+QPQzJNMCa2l0wdmsmFZqs=
Subject key identifier: 3E:96:1C:51:B0:2C:AD:27:D4:34:11:2B:09:5A:E2:74:3A:12:8F:78
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0182F3A61020AE4D0692C89D3390521188E7
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/PpYcUbAsrSfUNBErCVridDoSj3g.roa
Signing time: Wed 31 Aug 2022 11:25:22 +0000
ROA not before: Wed 31 Aug 2022 11:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 176.103.121.0/24 maxlen: 24
91.234.120.0/24 maxlen: 24
91.234.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:a6:10:20:ae:4d:06:92:c8:9d:33:90:52:11:88:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Aug 31 11:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e961c51b02cad27d434112b095ae2743a128f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:69:7e:ef:ef:e5:87:88:d2:9e:22:d9:e8:
73:6b:b4:1d:fd:33:96:7c:90:7a:af:31:d5:45:92:
d5:65:cd:0b:ee:19:f9:c8:27:ad:fa:74:83:e0:c1:
4f:a0:89:06:f6:68:37:86:5e:d6:8b:95:44:2c:3a:
21:a9:77:45:ed:7f:28:b0:6c:4f:14:bb:e6:80:07:
b5:d6:f3:5f:b2:92:74:c1:e4:d0:8d:20:a7:1f:f5:
de:63:a1:c3:22:2a:7e:5c:fd:04:dd:2d:c4:3d:98:
d8:72:7a:92:31:00:40:af:94:08:51:38:05:06:33:
d5:66:64:1a:2f:f0:b0:8b:c3:9c:69:56:b5:93:a3:
5f:51:19:bb:3d:32:0b:79:cb:7b:a0:35:b1:8b:7b:
4f:af:42:d3:49:a5:41:ef:22:b8:c0:49:33:f1:58:
cd:0c:eb:52:db:5c:24:15:67:d3:78:51:79:51:4e:
5e:01:c7:60:c1:d7:8e:0d:e3:e2:74:93:e6:a5:4c:
a2:bf:f5:f4:85:b4:d9:fd:05:69:8e:7a:51:9f:76:
6b:8f:61:38:7c:09:b9:6b:67:3e:e7:9c:ca:b8:6d:
45:10:34:f4:30:50:3c:7d:aa:fd:07:bd:7e:32:7f:
ca:d3:18:61:02:8b:11:87:03:77:c7:a9:19:48:3e:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:96:1C:51:B0:2C:AD:27:D4:34:11:2B:09:5A:E2:74:3A:12:8F:78
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/PpYcUbAsrSfUNBErCVridDoSj3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.120.0/23
176.103.121.0/24
Signature Algorithm: sha256WithRSAEncryption
67:61:06:d8:e5:d8:3b:cd:ad:05:b7:ec:bf:9c:61:84:6a:e9:
c7:e3:bb:e7:5d:b4:58:2b:25:2e:e4:67:a5:02:10:ea:15:4f:
40:00:e6:17:e3:92:64:02:c0:88:08:8c:69:fe:7d:d8:d8:24:
a1:32:b0:ae:c6:06:6d:4d:f3:5d:3d:7e:29:39:7e:b2:c3:27:
9d:54:77:8c:79:b2:68:0f:2c:0a:87:f0:f0:af:dd:c3:1b:53:
87:16:d4:3c:4e:1b:27:01:19:03:05:80:8c:7a:94:31:64:3f:
e9:62:ac:aa:7f:f4:20:10:3e:9c:e8:dd:46:76:19:1a:41:f5:
9e:e5:cb:56:db:c1:7c:31:41:4c:f2:21:c2:01:18:14:ac:95:
a2:8f:ed:3a:76:ca:6f:15:73:5a:8d:fc:a5:7f:9c:a1:e5:80:
51:66:60:bc:27:b0:c6:fe:a5:41:53:76:8d:1b:74:0f:04:1a:
b1:01:38:ca:f7:4e:d0:98:d0:28:5b:cc:0e:eb:d8:cb:10:7c:
cb:bf:cf:24:e2:c6:78:32:e9:01:fc:80:0b:c8:30:c9:34:1e:
2f:f0:9a:83:f4:91:2b:77:c8:4a:56:d3:f8:de:3d:65:cb:34:
4b:d0:92:8e:b9:a3:fa:97:4d:dd:80:9a:fd:eb:ae:61:7b:fd:
62:b5:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org