Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/pjxSsnasNZTEQnq-VgJQ8ztgA9g.roa
File: pjxSsnasNZTEQnq-VgJQ8ztgA9g.roa (raw, json)
Hash identifier: vQ6JL7JwKtOS2ZPqPH5cD/1BwLmYHJpHZgFo6/9egFM=
Subject key identifier: A6:3C:52:B2:76:AC:35:94:C4:42:7A:BE:56:02:50:F3:3B:60:03:D8
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018466693AC1227A54656AFDA02D5A5334A1
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/pjxSsnasNZTEQnq-VgJQ8ztgA9g.roa
Signing time: Fri 11 Nov 2022 11:18:03 +0000
ROA not before: Fri 11 Nov 2022 11:18:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 212.116.226.0/23 maxlen: 24
91.147.116.0/22 maxlen: 24
91.147.124.0/23 maxlen: 24
91.147.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:69:3a:c1:22:7a:54:65:6a:fd:a0:2d:5a:53:34:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 11 11:18:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a63c52b276ac3594c4427abe560250f33b6003d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:25:88:4a:21:8e:ec:36:15:ab:75:07:51:
0e:47:d8:19:b7:ba:af:ca:10:97:73:4b:0a:80:d1:
6c:00:52:fb:98:3a:b3:de:51:10:a1:d7:b1:ca:7b:
29:6e:5e:bf:b3:cb:d3:9d:9c:13:f3:e7:3f:3b:a8:
57:2b:25:22:58:ce:4f:1b:20:a9:53:86:01:26:e6:
b9:ba:17:11:f4:61:54:a2:de:9a:a9:68:fa:00:4a:
ee:fa:ac:9c:e4:f2:f7:22:39:bd:38:48:55:61:4b:
1b:34:ae:ec:7f:42:51:d5:9a:65:70:a0:d3:08:7c:
b8:18:58:fd:9d:25:46:d8:a9:43:c4:d1:ba:3b:63:
0c:23:91:39:bf:98:9e:2a:3c:ab:3b:90:d3:ff:33:
d6:9e:fb:02:d4:e8:19:f2:78:13:d6:50:55:f7:a4:
ea:c9:8e:30:d4:c9:c8:79:17:1c:87:08:ca:19:53:
d4:55:c2:c3:79:f5:b3:27:8b:d6:48:bd:fe:4d:62:
5c:c4:ad:19:2c:9e:59:60:3e:1f:96:a0:76:6d:97:
54:6a:47:be:22:99:95:c5:0e:2f:6a:40:7d:bb:ac:
8d:b8:14:90:07:04:80:c4:a6:5f:de:e0:f8:10:a9:
97:21:a6:ae:ce:fb:bc:4b:f3:5e:dc:29:1a:a3:84:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3C:52:B2:76:AC:35:94:C4:42:7A:BE:56:02:50:F3:3B:60:03:D8
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/pjxSsnasNZTEQnq-VgJQ8ztgA9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0-91.147.125.255
212.116.226.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:56:5c:3f:62:36:9f:5b:32:9f:e8:d4:d3:69:e0:c6:19:82:
51:dc:2e:d5:f5:f6:98:fd:7d:fb:77:47:80:8c:33:32:6c:f8:
49:08:9e:4a:ee:0c:34:82:c9:7a:f2:69:8d:55:37:18:cd:ad:
0f:2d:db:a3:4d:ca:c0:fd:ab:fe:9c:4e:aa:8f:0b:a2:a3:6c:
c9:ce:f4:75:de:27:e8:cf:9c:31:74:c8:68:2e:de:fc:84:a6:
98:4b:92:a5:bf:42:d9:dd:e8:88:2b:5d:ec:aa:99:b7:47:3f:
5e:b9:07:06:3d:25:43:c9:69:a4:b6:3c:c4:05:73:40:e2:71:
72:55:68:1e:f5:be:1a:2f:fd:89:26:9a:c4:ad:cd:a5:05:56:
eb:44:cd:7a:0e:e0:9d:36:59:2a:ac:88:cf:1f:eb:58:82:a9:
e8:43:73:29:60:e3:71:e4:e8:0d:d4:22:cd:05:a7:fa:d7:40:
12:16:86:3f:25:29:08:86:f9:b6:95:34:eb:ec:ae:1c:06:3a:
b3:fc:c3:95:60:39:72:7c:52:73:0c:9b:55:77:9c:fc:a1:d0:
ec:72:eb:b2:9d:6b:51:79:9b:a8:94:39:0a:06:cd:a0:1a:4a:
a5:32:84:e0:43:ad:ab:f7:02:6b:71:7d:67:58:09:52:43:a3:
ab:9c:3e:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:50 2025 by rpki-client