Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/pIggcq2Jp2u6SnCAtI0t2fZ9OkM.roa
File: pIggcq2Jp2u6SnCAtI0t2fZ9OkM.roa (raw, json)
Hash identifier: Sq6AExAhN59TTuGKoGlzprqN7124c3cueYJR/9qKuGc=
Subject key identifier: A4:88:20:72:AD:89:A7:6B:BA:4A:70:80:B4:8D:2D:D9:F6:7D:3A:43
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 0182F028885C55D0F096682B4630F5E91307
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/pIggcq2Jp2u6SnCAtI0t2fZ9OkM.roa
Signing time: Tue 30 Aug 2022 19:09:24 +0000
ROA not before: Tue 30 Aug 2022 19:09:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44788
IP address blocks: 178.250.0.0/21 maxlen: 24
91.199.242.0/24 maxlen: 24
185.235.84.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
2a02:2638::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f0:28:88:5c:55:d0:f0:96:68:2b:46:30:f5:e9:13:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Aug 30 19:09:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4882072ad89a76bba4a7080b48d2dd9f67d3a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:ec:36:22:c5:0e:fc:4f:92:d8:05:d4:e6:
69:ac:00:34:a1:e3:f2:02:5d:91:87:c3:fb:f0:cc:
02:74:29:0a:a8:e0:be:37:a3:78:03:6d:0e:66:d8:
e4:be:c0:f5:44:7e:25:67:b8:62:5e:2a:65:44:93:
4c:a9:49:85:bf:8e:0d:d8:02:8e:01:b9:92:70:66:
48:e0:67:cb:65:9d:c8:78:dc:f4:8a:fb:b5:2b:26:
14:1a:c3:35:d4:54:0c:60:38:2b:6d:a7:db:dc:33:
13:a1:ac:2b:3c:e1:bf:9e:82:89:e3:c5:f6:9f:20:
a9:e1:b6:d4:9a:1a:d0:e9:e6:db:db:4c:90:fe:d5:
2d:36:d4:75:a6:21:8c:bb:38:6f:70:c0:2c:63:bc:
13:de:b1:01:69:32:d1:b0:83:e1:e2:af:3f:b2:aa:
aa:c5:9e:11:b2:12:4e:7f:7b:2f:7b:4f:b1:6f:48:
52:5e:be:4e:58:02:ef:6f:9d:93:d7:25:d9:03:56:
a9:11:76:97:37:19:a4:e1:08:a1:ef:4f:9d:d9:b2:
b3:3a:6b:4b:8a:29:96:22:72:71:a1:ad:65:4d:4f:
f5:b0:aa:41:0f:b7:bc:ac:5e:71:b2:1f:72:cc:e4:
6f:f7:64:34:68:0a:b5:39:98:44:23:02:c4:48:cd:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:20:72:AD:89:A7:6B:BA:4A:70:80:B4:8D:2D:D9:F6:7D:3A:43
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/pIggcq2Jp2u6SnCAtI0t2fZ9OkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
178.250.0.0/21
185.235.84.0/24
IPv6:
2a02:2638::/32
Signature Algorithm: sha256WithRSAEncryption
8d:d3:4c:e0:80:ec:95:c9:ec:0b:a0:f3:d3:05:a3:da:98:3d:
08:fd:1a:5e:bd:94:26:54:14:90:c3:0e:67:e6:38:1c:f0:dc:
9f:b1:9f:b9:c8:ce:cd:d6:da:ad:cc:8b:38:ef:7b:9d:b8:31:
ef:28:32:a7:8b:1e:d7:91:ba:c4:7a:68:f1:4d:7f:1c:55:21:
82:0b:77:17:00:53:f1:21:7d:85:10:94:68:cc:bb:41:28:cc:
50:71:63:42:9c:46:08:0c:22:83:1a:db:3b:bb:20:5c:58:ad:
57:74:55:ae:c9:87:94:d3:9a:b0:31:58:f4:71:b4:74:d3:7c:
17:0c:03:f0:e0:ad:4d:99:d8:0e:7c:ea:df:de:0f:d4:d2:8a:
b9:69:9a:35:67:50:fa:e6:29:ff:b6:21:25:4a:3b:95:df:ed:
15:65:c8:bf:ff:9d:e9:ac:1c:cb:49:66:ff:46:97:9f:d2:57:
c7:5d:28:83:dd:41:30:b0:ed:cc:c1:64:ba:a1:9e:dd:3a:b6:
86:23:af:7e:d8:4d:a6:26:6a:7e:bb:43:98:9e:ec:9c:0f:be:
c7:7b:bc:e2:50:41:7c:cd:3e:00:c4:a3:15:15:db:52:67:58:
69:b0:3c:6c:41:5f:61:ee:ed:fa:db:41:de:26:cd:a5:d9:14:
67:a3:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:49 2024 by rpki-client on console-ams.rpki-client.org