Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/Pc-HemMCG-zIIox7qX5E_MqvWQw.roa
File: Pc-HemMCG-zIIox7qX5E_MqvWQw.roa (raw, json)
Hash identifier: DJ66LX1fNqdpSlKYD3esvgnK4/2u6cA1FC0gPq79eGY=
Subject key identifier: 3D:CF:87:7A:63:02:1B:EC:C8:22:8C:7B:A9:7E:44:FC:CA:AF:59:0C
Certificate issuer: /CN=139ca3799553b9e180d334442323003513485e2d
Certificate serial: 05D290DA
Authority key identifier: 13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/Pc-HemMCG-zIIox7qX5E_MqvWQw.roa
Signing time: Sat 01 Jan 2022 02:57:47 +0000
ROA not before: Sat 01 Jan 2022 02:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8823
IP address blocks: 45.141.188.0/22 maxlen: 22
2a0e:cf40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97685722 (0x5d290da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139ca3799553b9e180d334442323003513485e2d
Validity
Not Before: Jan 1 02:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dcf877a63021becc8228c7ba97e44fccaaf590c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:ae:93:3f:2e:4c:95:7f:1a:f3:b7:c8:cd:
aa:79:6a:44:c2:19:9f:a8:71:41:c1:e8:f9:75:f8:
8f:e8:a0:c3:0b:3b:23:e8:41:b2:c5:e1:63:2e:98:
fb:9b:c4:81:2e:75:56:e8:08:09:7a:39:00:79:b9:
84:95:c4:68:f7:46:38:17:48:62:d8:45:0e:9c:92:
5f:3e:ed:fb:73:1c:53:b0:33:91:c2:80:85:e5:f5:
1b:4e:9c:d8:aa:83:a5:3f:25:f3:bd:74:4d:a1:14:
79:19:31:37:07:1e:db:12:94:85:91:1c:5d:82:05:
46:c7:2c:ac:6d:20:86:e8:b1:38:45:43:a4:4c:ab:
c5:f6:a4:1d:9f:2e:dc:57:32:05:2d:32:50:d8:50:
76:98:8d:5f:0d:98:f3:e5:a3:e0:6c:93:cc:43:16:
79:03:f0:92:e8:1f:32:45:ca:24:4f:d3:6d:73:2c:
e4:ec:d5:ec:e8:ac:4f:ac:e6:fe:64:95:bb:6e:57:
3a:25:31:88:f3:4f:d2:e5:b1:2d:4f:fc:1d:b8:fe:
72:88:88:b0:aa:e0:32:a0:23:a9:1f:3c:b4:7c:72:
1f:d8:14:55:64:73:23:57:ff:31:97:3c:0c:93:75:
a4:29:df:5d:fc:33:b8:f7:d2:54:0f:7f:08:eb:06:
89:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CF:87:7A:63:02:1B:EC:C8:22:8C:7B:A9:7E:44:FC:CA:AF:59:0C
X509v3 Authority Key Identifier:
keyid:13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/Pc-HemMCG-zIIox7qX5E_MqvWQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.188.0/22
IPv6:
2a0e:cf40::/29
Signature Algorithm: sha256WithRSAEncryption
00:36:81:2f:e0:bc:17:59:9a:69:d4:b4:16:77:bf:7c:4c:0e:
8d:b9:7e:ee:b7:39:ad:9a:24:b4:03:45:52:8c:64:0c:1f:80:
79:ba:34:1f:2b:7f:9d:40:db:b0:9b:e9:b2:b0:04:3a:22:01:
53:32:b6:d9:0a:92:7d:0e:b5:8c:17:54:c5:8e:b8:5d:61:d6:
76:dc:7b:14:29:8f:ad:83:93:75:2e:2d:c6:2f:ff:01:2a:d0:
52:b2:e9:99:b5:ab:e9:8a:bb:e0:5a:be:77:f0:87:85:e5:de:
b5:1b:2b:70:0b:35:80:ee:cd:48:74:d3:2c:ed:18:94:ae:43:
48:3a:46:2b:f4:f0:88:e5:ef:25:4e:3f:86:2d:4d:d3:33:d7:
9f:ba:af:2d:00:8d:41:23:6b:30:1f:64:01:e9:cf:12:3f:be:
c9:e1:1f:9d:e6:75:f1:d3:41:f3:c0:af:3a:77:e0:c4:ba:e4:
f6:45:ec:e9:7f:b0:e9:f7:81:12:05:91:de:b6:39:10:f3:24:
71:e1:e0:24:05:94:c5:43:f1:6a:c4:4d:78:95:da:8f:3a:0d:
3b:e8:61:a9:3b:d7:3c:2c:af:10:5e:1b:c9:5b:51:dd:65:df:
f0:b6:ac:8f:11:cb:38:40:7e:06:e5:bd:14:66:94:71:77:7b:
74:09:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-fra.rpki-client.org