Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/PNUsIKCT-pwCbqUkpirPH-wWF5U.roa
File: PNUsIKCT-pwCbqUkpirPH-wWF5U.roa (raw, json)
Hash identifier: Kpo7NTL+4SYik0PzGRUgZzq0yoln7sXjjVaLphftF6c=
Subject key identifier: 3C:D5:2C:20:A0:93:FA:9C:02:6E:A5:24:A6:2A:CF:1F:EC:16:17:95
Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial: 08235FA1
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/PNUsIKCT-pwCbqUkpirPH-wWF5U.roa
Signing time: Sat 01 Jan 2022 04:01:15 +0000
ROA not before: Sat 01 Jan 2022 04:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24806
IP address blocks: 193.105.158.0/23 maxlen: 32
193.105.157.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136535969 (0x8235fa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
Validity
Not Before: Jan 1 04:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cd52c20a093fa9c026ea524a62acf1fec161795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:62:6c:0b:6b:40:2c:18:e8:dd:65:8d:ce:
76:78:8b:ae:8a:ac:46:64:e6:13:bf:1c:8a:95:d1:
eb:f5:90:97:a5:6f:06:a1:04:b8:fe:09:60:44:e1:
aa:4e:4b:86:75:a0:03:f2:0c:65:01:52:a8:38:53:
57:fe:24:ef:6d:3b:88:44:b1:1b:db:df:37:cb:b9:
c8:b6:d2:1c:b6:47:ce:48:d8:1a:ac:7f:99:71:25:
40:d2:27:63:30:71:9b:95:96:96:d2:aa:ac:4f:1b:
2a:ac:af:72:20:8f:cb:65:50:cb:cc:25:a8:5f:cb:
0f:e5:2a:4c:9b:06:10:49:9e:27:ab:d0:83:d8:06:
31:24:98:be:24:55:2c:5e:04:66:d7:fc:df:24:e2:
75:e4:83:11:1d:50:8e:77:24:37:e6:e8:c7:34:1a:
79:49:a7:d5:b8:12:fb:21:e5:18:0c:45:e0:c9:d7:
3c:bd:41:d8:46:1b:fe:43:65:2c:38:43:73:60:4c:
fd:03:62:04:25:3f:15:fe:0c:aa:95:d5:10:b3:29:
55:3c:ae:ce:b5:25:47:ef:5e:a5:dd:3e:da:3f:4a:
1e:76:64:23:dd:1b:cb:df:f3:31:9f:98:80:c2:03:
56:00:66:96:eb:5a:9b:c2:6c:e5:f2:ad:ac:66:0b:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D5:2C:20:A0:93:FA:9C:02:6E:A5:24:A6:2A:CF:1F:EC:16:17:95
X509v3 Authority Key Identifier:
keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/PNUsIKCT-pwCbqUkpirPH-wWF5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.157.0-193.105.159.255
Signature Algorithm: sha256WithRSAEncryption
88:3c:49:64:0f:1e:9e:07:96:da:8b:1f:2e:ea:2e:7b:19:bf:
f7:d4:26:a6:32:22:64:46:eb:23:0a:4a:24:0e:bb:35:ef:7d:
e0:61:f5:87:cf:07:6b:d6:6b:5c:e3:b0:11:cc:db:bc:95:58:
2e:ff:aa:32:28:a0:2e:e1:f1:89:9c:87:8e:61:8c:07:27:ce:
09:a8:f9:82:a2:bf:6f:ae:8d:00:8b:c6:37:aa:c0:87:36:3f:
ff:88:86:75:57:9d:d8:c8:56:58:3a:08:00:11:04:39:27:5d:
85:fe:c0:89:d7:5a:ca:7a:35:89:e7:19:80:91:90:38:ba:87:
f6:c2:74:e0:6e:a9:fa:0f:b0:25:1b:2e:0f:74:63:59:51:91:
ac:e3:af:9a:ec:02:d8:70:19:ec:77:db:33:63:c6:43:94:0d:
c1:2e:f7:94:51:55:e4:55:33:0d:80:4a:f0:39:d5:ec:d1:9c:
99:d1:60:38:fc:da:6f:3d:64:3a:19:1c:1c:27:40:3d:10:61:
e0:51:3e:ce:52:67:e1:d2:36:2b:a2:02:59:c5:5c:c7:93:00:
b3:5a:dd:80:6e:d7:0b:af:1d:74:bd:eb:2a:aa:f9:22:45:02:
86:7b:d9:14:ef:a9:01:53:bd:90:ed:f0:52:ad:79:68:73:0d:
23:de:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:57 2024 by rpki-client on console-fra.rpki-client.org