Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/PvMv5A7MoN56LPRUpCKHqaRUnSA.roa
File: PvMv5A7MoN56LPRUpCKHqaRUnSA.roa (raw, json)
Hash identifier: 8U5gWuyGgnr5okS3d3sgqmSGKOyNE9n2+H0b+C0PCh0=
Subject key identifier: 3E:F3:2F:E4:0E:CC:A0:DE:7A:2C:F4:54:A4:22:87:A9:A4:54:9D:20
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 1EAF0B
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/PvMv5A7MoN56LPRUpCKHqaRUnSA.roa
Signing time: Sat 01 Jan 2022 02:01:51 +0000
ROA not before: Sat 01 Jan 2022 02:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 185.21.0.0/22 maxlen: 22
37.1.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2010891 (0x1eaf0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Jan 1 02:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ef32fe40ecca0de7a2cf454a42287a9a4549d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:0c:91:85:02:ed:db:64:70:9c:5e:f1:ab:
e8:24:df:18:ad:3f:3d:87:12:a0:45:a3:e5:35:c1:
0c:86:28:97:06:dd:a9:40:6d:d3:e5:33:31:46:7a:
d4:2c:f1:02:01:72:b6:03:a3:b1:db:d4:6c:a2:71:
dc:e2:b6:62:0f:e8:60:cf:a1:d6:53:66:5f:ef:be:
a6:b1:e4:32:85:09:a4:59:ce:26:d1:61:b1:56:da:
f2:ff:f6:07:8c:31:5d:37:55:d8:5a:d0:ab:7b:65:
b2:a0:2f:e1:c4:05:09:4b:49:21:4b:82:1d:ab:2c:
4f:0a:ef:3d:ec:fe:e5:d8:8a:d5:54:40:8c:73:ca:
e4:40:ff:f4:4b:6d:73:6e:3d:66:53:db:5b:ce:20:
67:ce:31:c7:8d:52:fa:f8:a3:4f:dc:e7:b6:7e:46:
de:15:6b:69:6a:88:bd:7a:c0:a6:dc:01:98:df:76:
cc:45:16:80:94:ed:4f:b8:79:a5:10:2a:0b:36:62:
b2:f9:7d:e3:be:d6:33:2d:88:0a:c7:e5:90:11:6d:
78:cd:87:ad:07:06:15:89:99:20:32:29:9c:5a:4a:
35:89:f2:d4:06:6f:53:17:f7:f0:cb:8d:9d:ed:61:
44:5f:6d:cd:18:91:7e:f1:04:22:06:18:a5:1a:04:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:2F:E4:0E:CC:A0:DE:7A:2C:F4:54:A4:22:87:A9:A4:54:9D:20
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/PvMv5A7MoN56LPRUpCKHqaRUnSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.184.0/21
185.21.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:a0:1e:3f:9c:f1:f6:5c:c1:9e:a5:d7:aa:8e:62:a1:4a:ed:
41:97:ad:82:fa:12:12:60:56:d6:13:9f:57:dd:8e:03:20:d3:
2a:94:cc:31:44:3e:30:5f:d3:59:98:db:f8:c0:25:dd:3c:fb:
68:c1:47:cd:34:2d:72:16:04:fa:7b:c0:47:28:a6:b8:6e:3c:
e7:6e:cf:f9:68:21:6b:55:03:cd:48:ec:cf:44:cb:8c:f9:38:
e5:94:dd:9a:2c:74:a0:50:5c:11:ff:d0:e7:b2:a4:41:ea:d9:
c1:06:79:0c:85:0e:4b:59:d6:6f:c2:f2:40:83:28:20:cd:6e:
37:ad:ee:b5:0c:6c:b2:03:47:7f:4e:5b:af:16:43:6e:85:af:
60:15:5e:37:cb:f0:24:eb:46:5f:58:28:21:6e:99:4c:58:c5:
3f:3a:bc:d3:8c:b8:f8:c7:ca:36:f0:fe:f2:91:b1:5e:b1:56:
2d:58:89:9f:ec:d1:b1:3f:b0:3f:50:8d:f7:c9:04:c9:cf:24:
53:29:5c:81:e3:bd:00:0e:7b:78:60:51:5c:b1:1c:fa:df:45:
78:f2:66:8b:ed:ca:eb:df:e4:79:5a:72:79:df:6d:26:5e:20:
22:c9:48:82:8d:50:e0:f2:b4:33:0d:ae:df:e9:67:8e:18:1c:
29:a4:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-fra.rpki-client.org