Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/PYvkuE3n4Cmo-BsAa_en5lsPYDw.roa
File: PYvkuE3n4Cmo-BsAa_en5lsPYDw.roa (raw, json)
Hash identifier: MuKs3VAHlvHXiD414B/w6GeVLXQjovfPjPjWgIfj6VI=
Subject key identifier: 3D:8B:E4:B8:4D:E7:E0:29:A8:F8:1B:00:6B:F7:A7:E6:5B:0F:60:3C
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 02F8B6AE
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/PYvkuE3n4Cmo-BsAa_en5lsPYDw.roa
Signing time: Wed 08 Jun 2022 14:17:03 +0000
ROA not before: Wed 08 Jun 2022 14:17:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 185.238.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49854126 (0x2f8b6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jun 8 14:17:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d8be4b84de7e029a8f81b006bf7a7e65b0f603c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:e4:de:67:82:07:5a:fa:6a:1d:55:94:d7:
b2:35:92:b7:3c:cd:65:aa:bd:49:06:a1:3d:5d:62:
f3:79:04:2c:6f:49:ea:81:e7:0c:33:23:3c:2e:a8:
4b:0c:4b:f0:5f:95:ab:96:b0:5d:83:ae:7a:ff:8f:
58:9c:eb:b5:c8:d4:2c:53:86:7c:7f:b4:b8:20:13:
43:34:c3:21:81:9c:53:53:91:f3:43:66:92:1e:76:
f4:29:79:ac:83:54:1d:d1:68:5a:0e:6d:f3:fd:23:
5f:8b:93:d4:c8:1d:dd:2a:6b:2f:eb:83:ac:af:73:
4f:eb:16:d9:75:a3:cc:1b:05:9e:98:d4:d1:fd:08:
c3:78:70:d8:4f:fd:f8:ca:ea:6e:0a:8e:38:d1:ae:
43:f9:96:01:a6:2e:9d:38:99:67:6e:86:61:62:99:
3a:62:b6:81:c8:4f:33:6f:cf:38:ac:9b:a4:39:a1:
b4:18:3e:69:c8:9d:2a:ff:2b:14:39:b9:68:29:ec:
df:04:b1:43:b0:6f:58:88:a9:f5:57:cc:fa:34:35:
54:98:3c:06:84:e8:42:c1:e8:fe:73:b5:ed:08:68:
a1:a8:9e:a8:9b:98:07:19:fb:c8:e6:41:66:81:db:
4f:4a:90:00:ce:35:b1:68:69:1d:2e:af:e9:83:79:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8B:E4:B8:4D:E7:E0:29:A8:F8:1B:00:6B:F7:A7:E6:5B:0F:60:3C
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/PYvkuE3n4Cmo-BsAa_en5lsPYDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.88.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:f8:08:ee:22:83:19:7a:57:78:28:25:e9:ee:33:e1:6c:00:
fd:55:6e:7c:da:b7:dd:20:c3:02:5f:94:de:7c:fb:14:4c:48:
26:24:7c:84:f8:46:51:fc:dc:1d:b9:ad:2f:5a:b9:f0:04:1e:
22:d4:bd:56:fb:1e:aa:66:88:97:a8:46:2f:ce:31:f4:de:5a:
df:0d:cf:b7:87:16:54:b4:20:25:b6:09:cc:b1:6b:04:f7:f9:
4a:96:06:81:89:b5:72:f7:f2:43:66:61:0d:d2:52:8b:78:39:
b1:25:3a:45:61:3e:06:97:73:d9:8c:d1:48:87:62:9b:fd:4d:
1b:86:65:1a:fe:65:c8:8e:9a:1b:ec:25:51:b3:90:cb:3a:67:
fa:97:c2:4d:2d:11:b6:d5:c8:52:ee:08:83:29:55:6e:69:c5:
c4:15:ea:6a:5f:4b:d4:e4:f5:83:bd:a7:e9:68:f9:a4:10:ad:
c6:50:e5:8b:e5:c1:0e:23:fb:cd:ee:e5:0c:2e:e5:a5:0e:7d:
c5:7c:0d:90:02:f6:ea:18:bf:84:68:2c:0e:83:2e:45:e2:53:
b1:7b:e9:30:a8:26:c9:6a:18:e0:d0:73:f2:5c:94:77:6d:c0:
ce:41:36:64:6e:c2:f7:8a:26:0f:6b:f1:ad:1d:92:89:09:fa:
83:45:c9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:18 2024 by rpki-client on console-ams.rpki-client.org