Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/PGvWR7Hg5mt1hS5L_IMAthKDJCo.roa
File: PGvWR7Hg5mt1hS5L_IMAthKDJCo.roa (raw, json)
Hash identifier: tp7cqysTGs7iPHEiT6ZTWI3PQjHuMHg3AsxbOd0Q1W0=
Subject key identifier: 3C:6B:D6:47:B1:E0:E6:6B:75:85:2E:4B:FC:83:00:B6:12:83:24:2A
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 05474FDE
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/PGvWR7Hg5mt1hS5L_IMAthKDJCo.roa
Signing time: Sat 01 Jan 2022 12:03:50 +0000
ROA not before: Sat 01 Jan 2022 12:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 94.176.192.0/23 maxlen: 23
91.198.79.0/24 maxlen: 24
2a05:9040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88559582 (0x5474fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jan 1 12:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c6bd647b1e0e66b75852e4bfc8300b61283242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9d:bb:a1:37:38:cb:0e:3b:6d:9e:15:f6:42:
3d:f3:76:1c:8b:91:a1:8e:7e:5f:b6:98:1e:30:c7:
6e:c2:1b:7b:6e:60:c6:b9:16:e1:fe:2f:bb:3b:54:
67:cf:3d:ea:ff:99:f8:c2:49:da:d3:e0:bd:a9:21:
56:c0:c4:58:ee:cc:1e:86:a8:47:47:d8:6e:d1:38:
8c:86:7e:5e:49:a3:b5:32:35:14:fe:04:32:93:1f:
39:64:5a:3e:78:a1:1d:2d:34:97:10:35:e8:fc:81:
a2:98:bb:6c:45:56:f3:dc:a3:14:10:b5:62:5a:93:
fb:e4:dc:e5:2d:90:54:b5:a9:44:b7:40:31:c3:ef:
4d:e7:f7:d1:2a:73:bb:10:18:bd:44:de:76:3d:41:
0c:21:e4:49:bc:eb:0b:8c:08:fa:ae:ab:07:c9:26:
1b:69:9e:3f:38:ac:db:70:84:58:e5:8d:44:8e:01:
a1:0d:57:50:7d:23:71:ad:e2:06:ee:57:a7:71:b1:
e4:31:95:13:78:67:b2:9a:9a:65:95:4c:00:84:8e:
ba:d7:7b:ac:0a:5d:88:a6:f4:92:e1:a2:c2:1b:70:
5e:de:9c:2a:ad:8f:36:06:63:79:5c:c9:0d:e2:84:
19:5e:ea:10:53:f0:82:d1:03:37:9c:e5:bf:1d:b7:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6B:D6:47:B1:E0:E6:6B:75:85:2E:4B:FC:83:00:B6:12:83:24:2A
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/PGvWR7Hg5mt1hS5L_IMAthKDJCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.79.0/24
94.176.192.0/23
IPv6:
2a05:9040::/29
Signature Algorithm: sha256WithRSAEncryption
6d:ff:b2:0e:17:10:cb:c7:54:10:34:44:b4:d6:1e:12:59:86:
00:da:4d:e8:97:42:16:d6:1d:46:31:d7:b5:3d:d6:dc:b2:55:
03:6c:ef:10:65:80:a7:a8:e1:1e:f7:6b:68:97:0d:4d:7b:bd:
d7:29:f9:bd:9b:f3:d7:fa:eb:3d:de:3d:4b:15:06:1b:7c:85:
7d:ae:ec:39:88:6b:bb:ef:36:26:a8:4a:d5:cd:94:5a:ce:7c:
17:f2:b6:37:d5:3a:41:9e:59:21:5c:ef:22:cd:0a:51:c0:d9:
ff:29:c4:8a:7c:b5:63:0c:2b:f2:f1:ab:7b:81:83:34:7e:f1:
26:f1:b4:16:da:d8:47:83:70:4e:64:df:bb:7a:dd:3e:91:10:
a9:44:17:eb:5a:09:2f:9e:d5:8c:a7:fe:79:38:c1:c1:26:6c:
87:83:84:43:3b:99:4a:af:2d:da:28:a3:1d:79:36:8f:6c:d9:
e5:b9:e4:c7:b4:ff:2c:c8:02:f4:4b:be:61:44:78:99:9d:44:
ce:72:1f:72:ed:08:c7:b6:7d:e3:1a:05:87:eb:75:b4:08:75:
ca:3d:bf:22:57:7d:10:11:b6:28:8d:e3:b8:f1:c4:ee:35:34:
1e:93:d0:50:9d:19:6f:81:18:11:c0:05:7b:d4:de:c5:97:33:
22:82:30:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:03 2024 by rpki-client on console-ams.rpki-client.org