Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/Pe_PMdH_74CGFXJdRW2-elXpVEw.roa
File: Pe_PMdH_74CGFXJdRW2-elXpVEw.roa (raw, json)
Hash identifier: WnybvgInJx+OtqN73hTLS/hDOT6qoJIHeIh/bt2gQNU=
Subject key identifier: 3D:EF:CF:31:D1:FF:EF:80:86:15:72:5D:45:6D:BE:7A:55:E9:54:4C
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 09BE25A8
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/Pe_PMdH_74CGFXJdRW2-elXpVEw.roa
Signing time: Sat 01 Jan 2022 13:55:25 +0000
ROA not before: Sat 01 Jan 2022 13:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4201
IP address blocks: 87.199.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163456424 (0x9be25a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Jan 1 13:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3defcf31d1ffef808615725d456dbe7a55e9544c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:76:d7:24:c0:15:ec:c6:2c:10:af:13:f3:
1e:a8:3b:37:d7:e2:ee:71:c3:76:49:7b:f0:e8:14:
19:04:aa:94:a3:9c:20:da:ff:15:22:8b:e1:29:d9:
44:15:b3:6d:a9:05:5f:ed:4a:73:f3:34:78:c4:d2:
e4:83:20:92:53:95:5a:96:a3:2b:70:9a:93:b1:ce:
91:d7:91:37:11:df:93:b8:a7:05:56:88:2f:f4:b0:
7d:c0:e2:8a:cb:e2:f2:bb:b9:59:b9:93:2c:58:da:
14:65:0b:9f:97:5f:69:95:c4:29:9b:90:37:5b:72:
c8:6b:ae:6c:9c:aa:3d:c8:98:24:06:b8:41:8b:db:
21:0d:c8:8f:ed:25:3e:84:92:fa:d2:b9:e2:e8:f8:
74:68:0c:e6:72:5a:e0:7a:97:14:50:c9:07:1b:43:
a3:b5:d5:7e:5c:c2:23:9c:8b:f3:64:20:db:74:db:
0c:17:c1:f5:e1:c5:18:d8:e2:7c:dd:e0:41:5d:41:
57:d5:c1:af:28:c9:f3:f0:35:c5:ac:05:8c:f5:60:
2d:7f:29:a7:1b:58:9e:65:2d:21:04:d2:80:7e:09:
6e:5f:b5:db:c1:c3:6f:b4:74:e0:ef:08:f2:cf:17:
d9:bf:f5:97:3a:5c:f9:e5:7c:ab:40:3e:62:ac:c4:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EF:CF:31:D1:FF:EF:80:86:15:72:5D:45:6D:BE:7A:55:E9:54:4C
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/Pe_PMdH_74CGFXJdRW2-elXpVEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.2.0/24
Signature Algorithm: sha256WithRSAEncryption
90:65:e8:d4:d7:1d:35:7b:dc:25:cc:ec:cf:7a:0f:19:48:76:
96:9b:de:9b:c3:8f:23:ad:80:61:9a:e6:0e:96:92:6e:42:16:
f3:ce:4d:c6:7a:61:91:fd:87:c5:08:16:ad:c7:02:d2:a2:3b:
1c:a6:b6:8d:42:4c:92:ca:9f:31:9a:f3:62:75:d9:43:1e:96:
f1:dd:ee:57:ad:d0:70:92:b2:c4:bb:2c:10:ef:6a:f4:2f:84:
ba:06:6d:fa:68:18:a7:3f:da:c1:98:7b:7d:c8:28:cc:73:7a:
2f:51:2d:b0:3f:8a:e3:03:6c:82:5b:40:50:d9:a5:60:ba:32:
c0:ae:e6:22:9b:92:0a:e6:87:b7:ad:54:b2:ea:a0:17:1d:83:
38:83:82:d5:27:a9:28:83:53:e1:f9:7e:a6:65:db:0d:dd:60:
12:71:e1:f6:8c:5b:c6:c1:54:84:ff:a7:88:26:a5:cc:f7:5f:
af:3f:51:0b:8d:26:21:21:22:89:2c:70:59:90:e8:71:96:34:
c4:e4:55:f5:98:4e:80:3f:43:d6:5e:63:17:dd:73:56:f4:7e:
c8:a6:fe:d2:3f:d4:6f:18:7d:13:6d:7f:39:6a:39:08:04:e4:
0f:6b:c2:4b:37:51:09:ec:a2:e0:2c:b6:4f:aa:a2:dd:25:c3:
fa:b1:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:06 2024 by rpki-client on console-fra.rpki-client.org