Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/PmDtvcLCbVJcu1X44g2fIQSvaog.roa
File: PmDtvcLCbVJcu1X44g2fIQSvaog.roa (raw, json)
Hash identifier: AKnwrKd+639OInuaq5xQ4l7chdadkcaTyFDnW7wfEek=
Subject key identifier: 3E:60:ED:BD:C2:C2:6D:52:5C:BB:55:F8:E2:0D:9F:21:04:AF:6A:88
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 07BC5A52
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/PmDtvcLCbVJcu1X44g2fIQSvaog.roa
Signing time: Tue 12 Apr 2022 11:30:34 +0000
ROA not before: Tue 12 Apr 2022 11:30:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12540
IP address blocks: 212.64.160.0/19 maxlen: 19
2a0d:fc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129784402 (0x7bc5a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Apr 12 11:30:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e60edbdc2c26d525cbb55f8e20d9f2104af6a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:04:5e:62:ff:a2:1c:31:65:90:bd:3f:55:
01:a6:88:06:e0:8d:d8:15:3d:77:51:ea:a1:28:af:
35:1b:86:20:ce:38:78:38:f3:1a:ee:70:2a:2a:1a:
61:11:3f:d9:36:9a:11:cb:05:89:e5:8d:02:13:f1:
e6:45:42:ac:ed:92:54:c8:a4:20:a5:c5:f0:f6:16:
96:10:75:b5:ad:99:d3:37:69:54:d1:0a:41:07:d8:
bb:36:94:eb:ff:f6:8e:8b:f9:ea:4f:cb:f5:a4:80:
2b:d6:14:7d:0d:96:59:38:ec:c7:93:18:f7:83:c9:
56:89:05:23:e8:11:0f:39:f1:ef:eb:78:2f:c2:11:
3f:81:b7:95:93:fa:b8:6c:66:9a:75:74:41:89:63:
bb:4d:27:19:8f:4b:b5:cf:82:63:54:cf:cd:16:16:
d3:86:88:63:36:9f:05:0c:12:ac:87:22:5b:6b:cd:
9e:7f:9c:74:f8:08:cc:35:29:2a:28:bb:94:43:79:
58:12:57:88:c6:a1:2e:e8:38:41:df:16:96:f7:f4:
5e:2f:27:5d:4b:3b:2e:43:8e:c9:aa:1a:8f:20:69:
3e:79:40:6a:9a:fb:2b:06:99:9c:a5:86:1f:69:24:
6b:49:24:03:bb:a3:5e:5d:97:ad:b6:56:31:a3:65:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:ED:BD:C2:C2:6D:52:5C:BB:55:F8:E2:0D:9F:21:04:AF:6A:88
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/PmDtvcLCbVJcu1X44g2fIQSvaog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.160.0/19
IPv6:
2a0d:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
69:87:9f:e0:4a:1b:0a:25:3b:33:e4:ea:96:02:34:27:5c:f1:
ac:3e:5f:d4:fa:45:6b:4d:22:f0:43:07:c8:7e:e2:0b:f7:cd:
3f:3b:79:cf:7b:2c:ad:a3:32:fc:3f:67:ea:8b:8b:c4:8a:7e:
4c:54:5c:62:13:12:9f:47:1a:65:96:2b:a4:0f:22:11:92:9e:
61:35:28:1f:b3:d5:d2:11:2b:86:a4:ab:58:c3:ae:ac:ec:b5:
c0:5b:c2:1e:84:36:7e:58:7e:a5:13:5f:5b:59:25:af:72:4a:
e0:8c:09:37:fb:b6:b8:5d:f1:14:ce:30:45:58:df:f9:6c:16:
9c:1f:02:6d:88:ba:78:5c:68:14:05:dd:fb:b1:c6:bd:d7:af:
39:f6:7c:44:7c:e5:82:7e:04:9c:d9:3d:d8:c6:70:d3:2b:81:
76:58:cb:b8:e7:c5:11:2e:7e:9a:c4:2f:c3:1e:3a:4b:43:ac:
6a:f9:ea:75:76:68:1b:c6:6e:cc:1e:34:f4:49:2f:05:35:08:
7c:72:91:47:3c:88:fe:d3:6d:6c:77:70:11:f3:85:05:74:8d:
1e:34:01:e2:9d:f9:53:b5:4d:83:cb:50:40:8b:1f:67:0c:6b:
d6:7b:7b:61:74:cd:ea:78:c6:0e:94:1f:af:15:b5:18:03:b3:
93:a0:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:41 2024 by rpki-client on console-ams.rpki-client.org