Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/Pi2TLKa9DFwswSRSPUcqfRgPq5c.roa
File: Pi2TLKa9DFwswSRSPUcqfRgPq5c.roa (raw, json)
Hash identifier: a7BvCtGrtK1dK2cXcEIGvPQB5FROwf2Y5SfeEHl5xgs=
Subject key identifier: 3E:2D:93:2C:A6:BD:0C:5C:2C:C1:24:52:3D:47:2A:7D:18:0F:AB:97
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 0D504560
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/Pi2TLKa9DFwswSRSPUcqfRgPq5c.roa
Signing time: Wed 05 Jan 2022 15:54:51 +0000
ROA not before: Wed 05 Jan 2022 15:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62406
IP address blocks: 185.235.82.0/24 maxlen: 24
185.235.83.0/24 maxlen: 24
2a0d:4d00:82::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223364448 (0xd504560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Jan 5 15:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e2d932ca6bd0c5c2cc124523d472a7d180fab97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:90:e5:6d:9d:42:4b:cf:4b:2c:d8:7a:3b:
b6:5b:dd:f7:b8:2b:ba:b5:3b:0f:0b:9b:0c:47:56:
9a:f0:68:7c:f6:5b:b2:03:6d:54:91:bb:c8:6e:16:
2c:b6:7a:56:2a:bf:9e:91:a3:83:f3:05:e0:42:03:
87:95:f4:bd:0c:94:df:e2:cd:1c:21:81:fc:b5:8d:
d0:70:c8:1b:76:45:35:2c:62:50:7b:8a:21:e9:45:
29:c4:ae:48:b4:d9:d3:ec:e4:4c:e2:38:07:48:79:
14:cb:e5:41:97:51:cd:1f:f3:9c:88:e3:2b:fc:11:
ee:8a:a9:18:29:c8:73:d6:f7:97:11:b3:d4:60:3d:
39:06:cb:d4:49:37:76:f1:11:a9:27:ae:63:78:b9:
9e:6d:1e:7e:7e:0c:ad:4d:1a:ed:1a:e9:fe:74:7f:
f2:f1:e9:0e:2d:00:b9:bc:51:a2:c7:71:b9:f6:7c:
b9:35:ba:a4:b4:bf:66:03:f2:90:04:17:97:09:6d:
9a:82:a8:6a:58:06:c9:70:8d:38:f4:e8:ee:ac:31:
e7:fc:1e:ec:61:88:75:f5:1c:ca:ce:66:11:59:46:
47:d0:ed:15:c8:d4:73:1f:e3:3f:b0:19:43:f4:0a:
47:00:2e:ea:5a:32:d1:00:ec:54:b0:73:52:f2:a8:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2D:93:2C:A6:BD:0C:5C:2C:C1:24:52:3D:47:2A:7D:18:0F:AB:97
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/Pi2TLKa9DFwswSRSPUcqfRgPq5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.82.0/23
IPv6:
2a0d:4d00:82::/48
Signature Algorithm: sha256WithRSAEncryption
47:98:d3:cb:d7:79:50:b2:54:cc:ba:e2:14:c8:eb:46:2e:fd:
1c:e9:ca:c0:4e:49:c0:76:84:56:0d:80:64:35:cc:bb:de:00:
27:93:7e:39:f3:aa:c4:01:7c:3c:81:79:cc:c0:81:fb:22:d9:
9a:b6:a3:38:b3:ed:80:f2:57:c9:7c:23:f9:ec:31:3c:8a:45:
f9:72:cd:ff:0e:65:68:43:5b:b4:06:45:d8:fd:9b:ca:d1:5a:
c2:93:1c:5f:6f:9e:c3:8e:78:33:aa:26:7a:e5:a4:1c:28:a9:
d1:60:0e:d1:0b:cb:45:b8:e2:11:84:da:80:d4:bf:e0:3f:67:
e6:df:53:5b:45:2f:32:37:d2:b8:4f:00:d9:5c:14:60:cb:2a:
71:ec:a7:13:49:0a:be:5e:ff:40:0e:42:f3:5d:37:85:f5:48:
49:64:ce:a1:9f:16:ed:a4:e4:c9:28:ab:2d:da:81:87:4e:97:
64:69:56:6a:0d:14:24:c2:4b:87:43:cd:91:8a:3a:b6:3e:70:
24:01:5d:c3:80:ba:55:5e:a7:27:7d:60:42:10:83:86:2f:17:
d1:97:32:7e:51:26:19:60:2d:de:ca:54:b0:39:3e:3e:90:8f:
c8:27:bb:44:6e:85:7f:98:6b:58:64:1b:35:39:3f:e3:1c:cf:
4c:a1:e4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:42 2023 by rpki-client on console-ams.rpki-client.org