Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/ps-d41gLiDd46A6ybBC-4YHmeUM.roa
File: ps-d41gLiDd46A6ybBC-4YHmeUM.roa (raw, json)
Hash identifier: tIK2dDKtoD3GKNXZNgNP9Hxtg6xAq5S4vziZmnc+Pbk=
Subject key identifier: A6:CF:9D:E3:58:0B:88:37:78:E8:0E:B2:6C:10:BE:E1:81:E6:79:43
Certificate issuer: /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Certificate serial: 02C7BB32
Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/ps-d41gLiDd46A6ybBC-4YHmeUM.roa
Signing time: Sat 01 Jan 2022 16:10:42 +0000
ROA not before: Sat 01 Jan 2022 16:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60558
IP address blocks: 185.56.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46644018 (0x2c7bb32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Validity
Not Before: Jan 1 16:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6cf9de3580b883778e80eb26c10bee181e67943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:b4:ca:c7:4e:62:59:47:13:27:89:83:54:
fc:fd:20:29:a0:1b:3b:72:08:ee:07:36:84:9c:ad:
9c:56:ee:5e:d8:5e:e6:c8:b1:1d:ef:84:6d:8f:57:
b9:18:e7:07:d9:95:20:b2:e0:fe:45:b3:76:9b:8e:
dd:4b:9f:11:10:dc:7f:bf:a5:e6:58:5f:5c:cb:00:
6c:af:fb:33:a3:80:d3:5d:8c:0e:79:a5:85:33:21:
98:6e:0b:48:5f:af:b8:ca:b2:64:39:f7:fa:9f:f2:
27:29:ba:16:08:2d:a3:be:58:19:84:bf:49:16:a0:
1e:56:5a:13:d5:14:c0:97:7e:3f:29:4d:8b:a6:a3:
bb:f9:a0:c4:69:09:ea:3e:df:8c:6c:bf:81:62:94:
2d:58:e0:28:93:b2:62:39:91:fb:c8:39:99:02:df:
2e:a7:98:a0:aa:fa:72:7b:c1:35:5a:b5:cd:1b:16:
79:5a:57:9f:3e:7a:56:29:c5:05:bc:ee:11:52:b1:
36:48:42:09:a1:52:15:99:fd:ba:73:ff:c1:d4:e0:
76:8d:d7:19:f0:e0:9c:40:b0:e2:a8:c7:13:09:e5:
48:e0:e9:e4:21:ed:3a:85:19:9b:9a:1e:6d:1d:29:
5d:46:f3:28:de:37:8d:55:4f:8c:91:f9:56:62:8a:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CF:9D:E3:58:0B:88:37:78:E8:0E:B2:6C:10:BE:E1:81:E6:79:43
X509v3 Authority Key Identifier:
keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/ps-d41gLiDd46A6ybBC-4YHmeUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.136.0/22
Signature Algorithm: sha256WithRSAEncryption
26:d5:37:f5:48:39:2a:6f:ed:6d:57:8e:43:62:12:9d:87:9e:
ce:b4:20:b2:27:cb:2a:20:4b:2a:d8:c4:a8:ea:2f:e2:15:88:
53:de:c1:02:c9:ee:81:57:a4:61:24:60:c3:47:1b:57:83:71:
fc:68:71:26:8d:20:94:ae:cb:cd:41:a6:81:43:54:2e:94:9b:
c2:62:76:ca:60:a2:3c:07:5c:26:9b:84:73:4e:a9:4a:2f:fb:
2d:6d:5a:a3:11:6c:5b:5c:8d:ab:a1:6f:e2:d0:61:2b:60:b8:
39:2c:d5:d6:c5:39:d1:19:98:1e:1c:f0:43:d6:01:c7:a2:01:
c0:ae:67:3a:77:8c:d1:59:3b:00:66:03:1c:ae:45:30:56:4c:
32:46:2c:63:b6:ae:f2:9c:1f:bb:fb:a5:cf:80:fb:9e:64:51:
5f:19:f6:4f:d0:5e:ab:5e:d1:e6:bc:b1:a7:a1:7e:f9:60:81:
c8:24:a4:17:c2:8b:8b:c2:84:9a:12:23:39:3d:2f:d5:cd:f0:
5c:e3:d4:12:67:06:20:2c:c5:1f:84:38:82:ac:dc:f5:13:bf:
99:8e:20:7c:3a:39:90:0b:6d:93:3d:59:9c:57:c2:b4:dc:9c:
d7:06:5c:46:f2:6f:4b:6e:20:ea:55:42:1c:16:06:18:d0:62:
53:c6:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:56 2024 by rpki-client on console-ams.rpki-client.org