Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/PSsQJcjVmL5DcvXFh_PdJ9_tt_w.roa
File: PSsQJcjVmL5DcvXFh_PdJ9_tt_w.roa (raw, json)
Hash identifier: WMs72no+pvSVX6Sn3Eo2W33M8FDvXY/QjJmlBdeAfOI=
Subject key identifier: 3D:2B:10:25:C8:D5:98:BE:43:72:F5:C5:87:F3:DD:27:DF:ED:B7:FC
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 02D0EAD9
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/PSsQJcjVmL5DcvXFh_PdJ9_tt_w.roa
Signing time: Thu 17 Mar 2022 20:59:49 +0000
ROA not before: Thu 17 Mar 2022 20:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 81.199.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47246041 (0x2d0ead9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Mar 17 20:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d2b1025c8d598be4372f5c587f3dd27dfedb7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f5:30:7e:2f:19:8d:a5:8d:3c:b6:77:d4:52:
03:2f:7e:dc:63:db:a6:ac:31:57:42:5c:e6:85:f4:
3e:cf:6b:3e:4a:c8:22:3e:d6:e9:c9:10:76:ba:7b:
eb:18:43:be:9e:5c:08:dc:c5:fe:39:0d:24:ed:f9:
3f:aa:99:d0:20:99:2e:3b:d9:fa:11:79:8c:38:68:
01:b8:73:e3:02:65:cd:47:16:17:dd:cc:05:a4:fe:
19:f5:c0:a6:65:91:48:7b:0a:f9:a9:42:30:00:d3:
21:1a:7a:ca:05:cc:f5:8a:e9:40:35:1c:97:2a:4d:
c1:80:6e:ae:31:a1:b2:d4:92:7c:0a:57:c1:5a:61:
2b:a5:3f:2b:b5:2e:db:b1:6f:6c:6a:0b:05:46:da:
1b:51:27:8a:92:20:c3:93:c1:08:8e:01:ff:ca:30:
7c:dc:e2:20:0f:97:16:4e:4c:1b:8d:c3:6a:68:4b:
ad:ce:6c:ee:ca:a6:dd:01:5e:89:50:fa:83:f6:37:
1b:1f:27:bb:df:78:3e:23:28:d9:ca:72:43:20:10:
5d:d8:eb:19:af:66:4d:a4:32:2e:a1:3b:0f:b9:61:
22:e8:2a:71:7e:a9:95:db:ac:4e:d7:15:1f:73:48:
bb:0d:31:78:3e:9a:5e:c0:04:ea:7e:33:cc:8f:ea:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2B:10:25:C8:D5:98:BE:43:72:F5:C5:87:F3:DD:27:DF:ED:B7:FC
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/PSsQJcjVmL5DcvXFh_PdJ9_tt_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ec:35:07:d5:7c:48:83:61:1f:c9:97:c6:21:37:e1:7c:e8:
5d:ef:fb:66:cb:a7:0e:d9:31:88:84:82:09:7d:fc:1b:75:a3:
5a:eb:d6:4e:92:70:76:1c:b8:94:39:72:b1:0e:31:75:9b:ee:
52:38:83:5d:31:ca:a5:b2:a9:fd:d2:b1:d4:bc:a7:f7:1b:1d:
da:eb:21:56:05:02:b2:fa:8c:0a:2c:27:6e:92:d3:99:ff:fe:
b3:2b:45:8d:d4:59:46:cb:4a:45:af:3c:48:b5:1f:91:05:ed:
0b:aa:be:8a:f4:2c:0b:48:b8:cc:06:37:15:d7:1a:1f:dd:50:
7a:53:ec:d6:66:7f:af:7d:6e:40:ae:b5:86:de:66:f3:03:f0:
99:07:bc:0a:3d:0c:fb:05:0b:13:ad:73:1c:8e:d0:21:56:42:
2c:14:f5:ed:62:4f:f2:59:82:67:ce:58:03:71:fa:5a:6e:60:
d5:55:9d:52:47:e4:cf:1b:e4:d9:70:52:8a:3b:8a:9f:62:96:
57:a5:67:77:87:4e:50:84:d4:4e:b6:7d:96:c3:e5:b1:41:63:
5d:bc:f4:91:5e:7e:72:91:75:44:a0:c7:d7:47:f3:76:a3:1a:
c1:60:24:7f:bf:c2:81:03:e6:38:80:bf:a2:84:c0:03:67:a4:
d9:95:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org