Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/Pgq6pdY-NO7tllHPYNDzEcsKB1I.roa
File: Pgq6pdY-NO7tllHPYNDzEcsKB1I.roa (raw, json)
Hash identifier: RkNohticFWWlDv8PRbVKmSxJuRBLKovVW1KUsuayxag=
Subject key identifier: 3E:0A:BA:A5:D6:3E:34:EE:ED:96:51:CF:60:D0:F3:11:CB:0A:07:52
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 06DA9D
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/Pgq6pdY-NO7tllHPYNDzEcsKB1I.roa
Signing time: Tue 01 Feb 2022 10:44:51 +0000
ROA not before: Tue 01 Feb 2022 10:44:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59645
IP address blocks: 195.191.196.0/24 maxlen: 24
2a06:d1c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449181 (0x6da9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Feb 1 10:44:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e0abaa5d63e34eeed9651cf60d0f311cb0a0752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:2f:04:45:9d:6f:76:9b:b7:f1:41:05:ee:
9e:44:25:de:0b:69:8b:67:46:ed:d6:d4:5b:f6:fc:
bd:13:ac:e5:df:f6:cd:f2:c3:80:54:4e:c7:b5:30:
eb:07:67:83:bf:1e:73:a6:1c:88:54:a7:ff:8e:be:
91:7a:d0:db:96:9f:9c:0f:ef:1b:04:8b:55:1b:3f:
10:75:81:24:37:49:d6:22:e8:cf:b6:8a:37:47:36:
ca:be:34:41:a2:5a:d9:f1:fd:86:9b:53:5e:14:d8:
aa:a4:db:fe:6b:52:ad:55:55:d4:c3:68:42:c8:2b:
7c:27:1b:01:c5:01:34:a8:21:35:51:69:04:4f:83:
f9:c9:31:0e:01:47:b7:1f:1c:e6:c8:b1:36:c2:09:
37:a3:c1:91:57:3e:4e:fa:85:b3:70:88:cd:67:b3:
d5:f3:a8:64:41:db:90:14:65:3e:ee:5e:b9:3b:b6:
b8:82:c4:b3:a4:36:b0:cb:ea:0d:a1:b0:6f:c7:a0:
f4:77:f3:d2:7f:12:89:83:99:ef:8f:25:13:60:c0:
30:91:00:5a:f4:5b:71:54:31:0f:f4:8c:de:38:fd:
19:f5:f3:69:60:ad:2d:79:8e:15:53:0d:cf:33:ea:
26:ee:c7:db:a3:76:f4:df:78:42:e1:b9:c0:cd:19:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0A:BA:A5:D6:3E:34:EE:ED:96:51:CF:60:D0:F3:11:CB:0A:07:52
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/Pgq6pdY-NO7tllHPYNDzEcsKB1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.196.0/24
IPv6:
2a06:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:8f:59:70:b2:f8:3f:02:66:d0:a5:88:ce:42:c2:51:0a:93:
18:2c:52:56:42:49:b0:31:a4:df:c2:e4:15:47:52:4c:75:4c:
76:be:54:b7:ea:20:d7:7e:44:88:90:49:32:96:4b:57:fb:97:
67:bf:df:19:8b:ed:d5:9b:5b:aa:0d:da:96:dc:9d:2c:d0:18:
73:1c:46:f9:66:17:dd:14:49:d6:18:3c:29:21:f5:5e:5d:59:
a8:da:e1:aa:81:2c:56:d9:53:0a:bc:2b:d7:e9:69:a3:86:ce:
80:ec:32:aa:e0:6d:0e:d8:36:a9:f4:2e:cd:a5:57:90:46:bf:
d0:9c:0a:68:31:69:b2:7f:26:2b:4a:e1:c1:16:e8:4b:d0:e0:
e9:4e:a5:d0:4a:34:4d:7a:57:76:7b:37:22:69:56:f3:e5:94:
63:ee:78:05:ef:7c:40:68:7b:90:de:7b:d8:e1:7f:92:7a:dd:
9a:f0:db:44:a5:c8:2f:8e:92:a9:39:13:cf:96:24:25:b7:5e:
91:85:a5:56:02:87:6b:ad:00:3d:d5:0c:88:96:14:c9:5c:c4:
a9:9e:d5:4e:3f:89:c7:c0:52:3b:ff:64:67:f2:c9:9e:98:06:
08:4c:de:cb:3c:f9:1c:78:08:7d:ba:34:ac:98:bf:e7:2c:c2:
97:b8:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:36 2024 by rpki-client on console-fra.rpki-client.org