Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PDbwOw360O5cXkg6Om1mWPT730U.roa
File: PDbwOw360O5cXkg6Om1mWPT730U.roa (raw, json)
Hash identifier: GaCZu2zgTXfvnNJMveZcYCTwAgi/ssOjm2LMFlZ/UJ8=
Subject key identifier: 3C:36:F0:3B:0D:FA:D0:EE:5C:5E:48:3A:3A:6D:66:58:F4:FB:DF:45
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01821180BF5D68611C2C42059695B1B3B996
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PDbwOw360O5cXkg6Om1mWPT730U.roa
Signing time: Mon 18 Jul 2022 13:30:26 +0000
ROA not before: Mon 18 Jul 2022 13:30:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 212.69.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:80:bf:5d:68:61:1c:2c:42:05:96:95:b1:b3:b9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 18 13:30:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c36f03b0dfad0ee5c5e483a3a6d6658f4fbdf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:c3:6b:da:38:28:24:04:8d:fb:b6:45:ba:
28:5f:45:aa:f6:44:f4:a3:d1:4f:ac:e7:41:39:95:
49:b7:4c:7c:38:24:00:fc:ec:50:ef:e3:4e:ed:0e:
b5:55:5f:73:d7:d6:c3:5e:ca:cb:a9:f5:5a:f6:ea:
4e:8f:e7:39:af:65:1c:cb:a1:1a:ec:2b:07:c0:6e:
35:d0:c2:b6:4c:52:25:79:d9:09:f4:77:fb:dc:9d:
f4:56:09:7a:8c:f5:7c:4b:26:9a:87:08:21:43:6a:
2f:e5:0a:23:a5:15:b6:d2:83:79:98:82:96:7b:ca:
f7:8b:e5:82:c7:79:be:86:a3:5d:1d:03:77:b6:f3:
55:69:51:4d:e9:56:f3:e5:45:42:5f:98:ae:9b:c2:
b3:3a:d9:5e:88:cd:82:56:8a:22:93:31:c8:77:0b:
07:c4:91:3d:da:3f:87:96:ed:06:21:d4:6a:a7:4b:
ab:e4:53:1f:0e:6f:9e:47:95:e6:a9:fc:5f:56:6b:
03:02:59:d8:1c:1d:ac:46:a8:b9:6d:3d:de:c5:cd:
19:2b:bf:59:7a:05:70:d1:7f:73:33:4c:56:4d:5b:
ce:6c:8c:e0:3f:01:f6:2f:68:76:ca:ef:57:2a:9e:
fb:6b:2b:a1:ae:cd:a6:3c:b8:52:26:c4:e1:d0:b9:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:36:F0:3B:0D:FA:D0:EE:5C:5E:48:3A:3A:6D:66:58:F4:FB:DF:45
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PDbwOw360O5cXkg6Om1mWPT730U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
01:aa:94:eb:c5:33:0e:7e:13:b9:3d:3b:ff:d8:a5:0a:5e:3e:
f4:2d:b1:89:df:a8:64:ff:03:ce:60:74:c5:ae:1f:07:19:a8:
96:2e:7f:fe:fa:e9:98:e3:a7:3d:71:0c:99:0d:da:6d:d4:8b:
e9:fa:51:ee:a9:b8:55:96:a5:15:4d:fb:ad:41:1c:f2:2d:ca:
f2:ff:6a:76:44:f2:76:c1:d1:18:f3:8d:b1:08:60:e2:fc:a6:
fc:76:31:63:0c:6b:ac:0e:b8:36:26:d0:a8:b3:2d:06:73:e6:
1f:51:7b:ef:70:3d:38:73:91:fa:69:1c:1c:e4:45:15:bb:43:
0f:23:8c:37:65:d0:fd:9b:1e:17:ad:64:ba:ed:cc:45:f6:c5:
61:66:48:72:8b:66:d8:9a:b5:75:70:04:a5:52:b0:74:39:4c:
f8:e9:8c:40:b7:f6:d0:d8:5b:2b:82:f9:c0:09:82:fa:f0:0a:
87:56:78:bc:da:1f:3c:ac:94:89:8d:76:80:33:42:82:a5:d3:
88:31:a8:5c:fc:b2:37:8a:db:f5:d3:35:c5:70:aa:e7:4e:4b:
df:31:13:37:3c:fc:68:ff:0e:39:72:ce:7f:8d:53:3b:d8:d4:
6f:71:c1:78:a2:50:d1:b9:1b:9a:f0:90:40:7b:ca:c8:eb:21:
fa:8e:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org