Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Ppszt4YeeRQfMkvissv1l-QvmII.roa
File: Ppszt4YeeRQfMkvissv1l-QvmII.roa (raw, json)
Hash identifier: wPUydDgRoUaREmp/73ZG7/4Egc/x4yFosJgEfPtx4ZE=
Subject key identifier: 3E:9B:33:B7:86:1E:79:14:1F:32:4B:E2:B2:CB:F5:97:E4:2F:98:82
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 143E5CD4
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Ppszt4YeeRQfMkvissv1l-QvmII.roa
Signing time: Tue 25 Jan 2022 13:07:35 +0000
ROA not before: Tue 25 Jan 2022 13:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 213.238.166.0/24 maxlen: 24
213.238.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339631316 (0x143e5cd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 25 13:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e9b33b7861e79141f324be2b2cbf597e42f9882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:b9:e2:61:c6:da:9f:e9:c8:b3:ce:a1:a5:
95:f8:65:33:55:0a:5e:4c:1c:94:66:b1:0c:2d:72:
ff:3f:ac:49:b5:a6:00:c1:29:2c:01:ce:7e:be:47:
e9:ce:cb:19:e7:28:c5:d1:09:88:23:be:c5:1d:6c:
d9:bc:08:2f:3d:b1:d6:e0:98:60:77:e2:39:1d:b8:
13:b7:42:cb:1d:43:f0:33:22:79:62:68:a3:29:9c:
92:de:18:ef:72:83:6e:7b:b3:ac:db:a3:48:7d:35:
36:17:5d:2f:02:6d:05:e6:a7:2f:1f:88:d5:e7:ca:
d3:f9:69:ae:49:44:36:fc:56:bf:60:fb:8c:af:f3:
f6:64:27:3c:ea:b7:78:58:1b:69:20:cf:e3:1c:c5:
95:67:6c:82:18:ba:87:4f:82:c3:a7:a3:51:ef:f2:
53:69:88:4c:01:78:48:bd:a2:4b:f7:72:14:7d:a0:
6f:46:5a:01:56:72:52:99:f6:94:b5:6a:84:86:3b:
7a:13:16:8f:58:9c:0f:4c:a8:e6:b1:8d:9a:11:69:
83:11:30:05:a1:c7:a9:14:bf:de:67:ec:0f:fc:c4:
2b:e4:97:27:91:df:d0:1b:f3:c0:90:4b:db:90:0b:
87:9e:47:92:f8:8d:28:b3:bf:eb:f1:23:08:86:59:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9B:33:B7:86:1E:79:14:1F:32:4B:E2:B2:CB:F5:97:E4:2F:98:82
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Ppszt4YeeRQfMkvissv1l-QvmII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.166.0/24
213.238.171.0/24
Signature Algorithm: sha256WithRSAEncryption
20:09:8c:c3:32:45:7c:b3:6c:27:8d:c1:b6:6f:76:8d:c9:44:
20:8c:4c:84:8c:91:93:1e:90:77:4b:60:55:30:9d:10:21:e6:
16:7b:e7:0c:57:1e:da:82:e7:aa:a4:00:e5:d8:2f:81:10:38:
ad:c2:f7:39:04:28:60:f2:53:e6:cc:73:f5:c1:33:e1:44:38:
1b:9f:4a:52:85:24:cc:11:80:3a:05:d9:84:f4:6d:3a:a0:21:
28:dd:08:8d:72:04:59:93:d6:e5:1d:4f:71:4d:4c:66:cb:88:
34:4f:33:65:09:d7:8d:7d:39:56:e5:76:eb:56:17:aa:3f:56:
18:02:fb:95:b4:52:09:a0:5c:c9:d7:39:aa:f7:92:c3:d4:60:
fa:fd:7e:53:eb:19:b8:ff:76:b7:4b:de:0a:9f:57:96:c2:8e:
df:6a:40:ce:d0:51:70:75:f5:3a:e9:df:fd:53:86:18:45:41:
0d:89:c1:5d:b6:96:93:42:85:ee:06:35:17:29:a3:03:45:86:
a9:69:88:68:3e:55:c4:9d:90:5a:cf:c7:79:5f:c3:92:7e:90:
fb:58:5e:db:73:ab:28:5c:73:53:e0:d1:73:48:fc:fa:25:9f:
15:17:c6:c5:0a:33:12:b1:dc:7a:f3:58:f3:7c:ad:fc:ee:0b:
c5:9b:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org