Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PVDu1XNupeP_GOKgmEF8Aq92qgA.roa
File: PVDu1XNupeP_GOKgmEF8Aq92qgA.roa (raw, json)
Hash identifier: YCbit0cfyK7TGuR73Cx7Ng/+J3qplhJpnApRjGxX/a0=
Subject key identifier: 3D:50:EE:D5:73:6E:A5:E3:FF:18:E2:A0:98:41:7C:02:AF:76:AA:00
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018415363A0DED1C864A27A89AF4D2B8A644
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PVDu1XNupeP_GOKgmEF8Aq92qgA.roa
Signing time: Wed 26 Oct 2022 16:53:06 +0000
ROA not before: Wed 26 Oct 2022 16:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 188.255.206.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
109.233.184.0/23 maxlen: 24
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:36:3a:0d:ed:1c:86:4a:27:a8:9a:f4:d2:b8:a6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 26 16:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d50eed5736ea5e3ff18e2a098417c02af76aa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a1:5d:19:01:5c:d3:5a:c1:0b:ff:f5:f4:cb:
c7:a9:84:7f:ae:a4:49:ca:d5:ed:58:ca:77:49:8d:
af:e9:d4:9a:4a:4b:3b:96:d3:aa:15:e9:07:6f:54:
d8:91:87:b4:f2:3c:1b:05:21:30:1f:54:f4:f6:64:
91:89:84:b3:40:76:9d:12:64:d9:8e:32:c3:37:bb:
ec:5c:2c:10:f8:b1:f1:df:13:51:f1:57:eb:f9:c3:
f3:e3:fa:f5:6e:c0:15:2e:12:2b:1d:a6:9a:3c:94:
78:dd:2d:1c:d2:d6:44:f6:bf:57:42:b5:d2:0b:a0:
9d:71:c1:d7:0f:dd:c4:5c:f4:3e:11:f7:b2:58:b6:
cd:61:c1:f5:03:3c:ad:51:01:1f:ec:67:af:fa:ec:
17:71:87:3f:9c:9c:48:42:eb:2e:7a:12:2f:0b:80:
1b:1c:d7:cd:e8:78:68:bf:3a:cb:65:59:80:8d:1d:
4e:95:a1:98:dc:3b:aa:3a:3c:01:47:4c:e3:79:9a:
6c:fe:f8:ba:fe:d1:14:17:e1:d5:cb:96:32:8f:0d:
57:23:ba:06:bf:cc:1a:de:da:65:eb:e9:68:6f:00:
2f:69:f9:84:17:28:de:a5:f1:28:53:70:0a:dd:ab:
92:cf:58:9a:34:8d:f8:42:82:00:ba:8e:76:b1:f6:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:EE:D5:73:6E:A5:E3:FF:18:E2:A0:98:41:7C:02:AF:76:AA:00
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PVDu1XNupeP_GOKgmEF8Aq92qgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.233.184.0/23
178.253.237.0/24
185.47.91.0/24
188.255.134.0/24
188.255.206.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
40:57:1d:09:5c:87:dd:6c:96:42:e3:27:4e:b7:c2:6b:07:44:
30:f2:e8:67:d5:7f:ef:fa:77:43:83:a9:ed:95:55:5a:5c:05:
0f:8d:9c:0b:40:1b:b0:3d:b8:45:a1:c0:f1:3c:97:82:17:72:
87:31:04:98:92:3b:93:59:6d:ef:f4:c4:e5:48:03:e2:86:0c:
3e:9f:00:ae:89:56:65:b4:e3:35:b0:1f:da:72:e3:2a:95:9f:
39:66:b7:e8:44:6c:b4:ed:37:83:0e:51:89:ef:a6:f7:f4:16:
a7:55:57:6e:a9:a9:2e:bf:dc:98:27:62:80:15:bc:58:4d:3d:
f6:03:3a:9a:15:0d:72:1d:db:ad:8e:9c:6d:df:3e:c7:68:bd:
e7:c2:aa:77:c9:2b:e5:c3:ac:60:b9:cb:77:94:3f:a3:96:e9:
5e:cb:23:34:63:d3:13:ae:8a:3a:ee:c4:31:19:79:2f:0f:40:
78:fb:e3:e8:c2:78:26:48:95:a2:f8:ac:80:3e:ba:d3:ce:0b:
b1:4a:c0:65:89:6e:94:21:f3:3a:21:f4:b9:d8:0e:b5:71:50:
8a:a4:b1:d0:e9:c2:37:fc:c9:b4:12:c3:4b:98:70:c1:22:e8:
ca:1e:02:24:b6:cd:22:e3:cf:0f:df:7e:cc:db:5b:a7:78:76:
47:68:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org