Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/PgyS_rbbxoC-k3SeSTE6obEG3ZQ.roa
File: PgyS_rbbxoC-k3SeSTE6obEG3ZQ.roa (raw, json)
Hash identifier: dxVv1wjhyICaq1nNQvzIFzLPoHlPtw0jvMOg2UNjzMo=
Subject key identifier: 3E:0C:92:FE:B6:DB:C6:80:BE:93:74:9E:49:31:3A:A1:B1:06:DD:94
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 051E66F9
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/PgyS_rbbxoC-k3SeSTE6obEG3ZQ.roa
Signing time: Sat 01 Jan 2022 15:05:27 +0000
ROA not before: Sat 01 Jan 2022 15:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21056
IP address blocks: 185.241.20.0/22 maxlen: 32
185.224.60.0/22 maxlen: 32
87.247.232.0/21 maxlen: 32
213.182.64.0/19 maxlen: 32
45.84.140.0/22 maxlen: 32
185.224.104.0/22 maxlen: 32
79.135.32.0/19 maxlen: 32
185.230.192.0/22 maxlen: 32
80.93.128.0/20 maxlen: 32
185.170.36.0/22 maxlen: 32
185.231.160.0/22 maxlen: 32
46.44.192.0/18 maxlen: 32
185.158.116.0/22 maxlen: 32
185.230.232.0/22 maxlen: 32
78.152.96.0/19 maxlen: 32
45.143.36.0/22 maxlen: 32
185.230.92.0/22 maxlen: 32
45.151.64.0/22 maxlen: 32
185.234.164.0/22 maxlen: 32
94.138.160.0/19 maxlen: 32
91.143.192.0/20 maxlen: 32
2a00:14f8::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85878521 (0x51e66f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Jan 1 15:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e0c92feb6dbc680be93749e49313aa1b106dd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:20:b8:8e:bf:50:e3:05:73:02:a6:1a:57:
01:bc:3b:8b:2e:66:a6:e3:13:56:28:32:a3:f8:69:
5e:c2:17:60:e1:88:41:7e:fd:34:2f:04:9e:28:0d:
13:42:94:9d:84:3c:87:5b:83:60:f3:b5:e1:a6:42:
cc:7e:5a:3c:9e:97:2c:10:a5:31:5f:17:81:60:37:
78:8a:b5:ac:fa:56:01:b8:e9:62:90:7d:2a:37:1b:
8f:42:81:96:3e:eb:a4:40:55:46:f3:d3:8f:e3:19:
35:95:11:7b:a6:26:80:f7:f7:cb:d7:bb:73:6d:a1:
83:58:89:96:1e:f9:19:90:56:54:40:a8:65:27:5f:
b4:00:b8:fe:c4:43:d9:74:41:c2:cf:a6:de:cc:72:
0d:ab:b7:83:9d:d9:07:e5:e9:1c:36:b8:fa:45:a2:
89:40:31:4f:6f:5d:5b:f3:7d:68:f5:d0:70:a6:a8:
b1:96:c4:bf:ef:24:22:68:6f:0b:29:80:3d:24:a4:
5d:e4:08:b9:7f:36:3e:da:cf:e6:b2:4c:bd:c8:61:
d4:76:3f:4b:85:64:4c:b0:00:c7:9a:83:d1:fd:e8:
91:54:8b:43:d7:96:42:de:e4:69:d3:2b:51:ab:f1:
23:06:c9:eb:b1:4b:4e:d0:3a:12:64:b3:cd:07:f3:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:92:FE:B6:DB:C6:80:BE:93:74:9E:49:31:3A:A1:B1:06:DD:94
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/PgyS_rbbxoC-k3SeSTE6obEG3ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.140.0/22
45.143.36.0/22
45.151.64.0/22
46.44.192.0/18
78.152.96.0/19
79.135.32.0/19
80.93.128.0/20
87.247.232.0/21
91.143.192.0/20
94.138.160.0/19
185.158.116.0/22
185.170.36.0/22
185.224.60.0/22
185.224.104.0/22
185.230.92.0/22
185.230.192.0/22
185.230.232.0/22
185.231.160.0/22
185.234.164.0/22
185.241.20.0/22
213.182.64.0/19
IPv6:
2a00:14f8::/32
Signature Algorithm: sha256WithRSAEncryption
13:26:aa:3c:b9:84:b1:86:ff:5d:51:fa:c2:b9:74:b2:b6:ef:
45:71:e2:9e:89:a4:ba:71:47:b9:45:89:a3:11:ba:1e:4d:eb:
72:91:d3:08:a9:44:78:61:b2:21:46:16:ff:c3:bc:23:5d:ca:
e5:de:9a:d5:10:b3:bc:eb:71:4e:38:d4:e4:f6:ca:e1:e3:3a:
83:aa:0e:b7:6c:b6:56:e5:3e:3a:39:60:52:ac:43:b9:97:a2:
ba:a5:1a:65:c5:96:23:c0:1a:3c:f8:7a:6a:74:f9:23:9b:b2:
69:3d:4b:e6:3c:46:3c:d2:0f:ea:7c:27:05:99:58:bd:d6:bd:
20:5c:04:cb:86:2c:81:c0:87:79:8e:07:08:4c:76:1f:bf:fa:
a5:7d:5c:b5:2d:fd:93:6e:9a:51:b3:c5:ef:43:7c:f1:82:a7:
0e:d8:86:65:2c:7e:ec:2f:5c:25:4a:61:05:f6:c5:a3:f3:ac:
2c:2b:0a:d6:03:14:a1:ae:9d:ac:7e:f7:15:55:dc:c1:6a:06:
83:ea:b2:64:f8:b1:22:83:4b:34:7d:5f:fb:62:e6:b0:e0:bb:
f3:d0:4e:da:a2:87:55:c1:13:6a:49:75:8f:03:b2:d6:f8:8a:
f2:db:08:e6:ba:01:dd:f5:2e:5b:06:d7:25:bc:48:06:03:f3:
de:0e:ca:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:43 2024 by rpki-client on console-fra.rpki-client.org