Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/pvmPo_Sa05O1mMv9kxDoPDNShE0.roa
File: pvmPo_Sa05O1mMv9kxDoPDNShE0.roa (raw, json)
Hash identifier: dyi5BfwNXifZa/rBnlduLsgH8kWxusQFTZE+7ttAAFM=
Subject key identifier: A6:F9:8F:A3:F4:9A:D3:93:B5:98:CB:FD:93:10:E8:3C:33:52:84:4D
Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Certificate serial: 0D21C8DC
Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/pvmPo_Sa05O1mMv9kxDoPDNShE0.roa
Signing time: Sat 01 Jan 2022 12:55:21 +0000
ROA not before: Sat 01 Jan 2022 12:55:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 185.218.166.0/24 maxlen: 24
185.218.165.0/24 maxlen: 24
185.218.164.0/24 maxlen: 24
2a0b:d9c0:165::/48 maxlen: 48
2a0b:d9c0:166::/48 maxlen: 48
2a0b:d9c0:164::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220317916 (0xd21c8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Validity
Not Before: Jan 1 12:55:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6f98fa3f49ad393b598cbfd9310e83c3352844d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:7b:b5:fd:3a:64:21:c8:4e:87:29:21:0a:
75:2b:5d:e6:77:e7:b3:a1:ef:f4:40:23:14:b0:64:
2e:ee:cb:b0:0c:9a:34:f3:1c:84:fa:76:40:ff:46:
cc:28:3a:e1:69:99:6b:f1:c5:e5:13:09:75:69:36:
a4:be:60:72:cc:f3:51:ca:04:15:47:cd:68:dc:b4:
57:0d:11:f9:14:74:b8:9f:4e:6f:7e:49:9a:57:3f:
a0:6f:66:d9:73:de:38:09:06:5f:80:e0:7b:0a:48:
e3:9a:2a:17:85:1e:67:bc:6b:80:25:36:0b:d3:ee:
6f:30:e1:da:85:ac:41:4f:c5:d7:ff:bf:d4:27:fa:
3f:a6:ab:5f:3a:bd:07:6e:71:b8:39:ef:d7:2b:10:
40:bd:ad:1a:1e:11:82:e2:ec:0a:e0:73:8d:94:f6:
4f:10:d4:91:12:07:ce:01:a9:b7:86:a5:e6:43:b5:
61:0c:63:6f:c6:f8:92:be:f6:b6:11:ad:f1:e4:60:
4d:5d:8a:58:ed:3e:2e:ea:35:83:aa:76:0f:05:e3:
12:c6:9b:a7:e7:8f:be:33:5f:28:80:4b:fc:50:28:
6b:5d:28:6c:c3:df:cb:c1:93:36:d0:5d:39:4b:35:
a3:e9:98:e5:28:cd:87:e0:9b:55:76:af:8b:3a:c9:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F9:8F:A3:F4:9A:D3:93:B5:98:CB:FD:93:10:E8:3C:33:52:84:4D
X509v3 Authority Key Identifier:
keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/pvmPo_Sa05O1mMv9kxDoPDNShE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.164.0-185.218.166.255
IPv6:
2a0b:d9c0:164::-2a0b:d9c0:166:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:a6:36:30:d5:a1:c5:04:64:2b:02:2c:82:17:6f:68:bd:40:
ad:50:11:e7:ad:8c:14:56:cd:d8:08:4e:7b:3f:5b:7c:91:45:
33:cb:9a:25:78:00:aa:a8:be:24:39:a6:d8:87:73:25:99:eb:
16:1d:3e:b3:99:b1:8a:74:df:56:2d:40:a3:97:41:ae:1c:1e:
97:45:94:8c:3d:a2:37:7b:18:14:18:bc:6c:9a:d0:67:c2:86:
93:4a:06:ad:3b:10:48:76:e7:da:ab:7e:2e:c2:fb:67:6e:ff:
e7:72:ef:e6:a7:1a:0f:2b:5a:32:e0:86:a0:0b:78:f6:fe:30:
cb:38:aa:74:49:00:1a:a2:ec:35:f4:2c:1e:6f:fd:df:53:84:
5c:14:f7:32:36:d5:bf:91:f7:0e:0e:a2:33:08:e4:a4:b8:d1:
0c:80:7b:02:38:2d:e8:8e:c2:76:f4:a4:ef:f6:4d:bc:8f:32:
d3:fe:a8:64:f8:62:e4:f7:9f:20:1d:78:cc:24:7a:ab:28:b7:
0c:50:06:27:d6:13:d3:3c:d6:53:2d:45:02:a5:23:7d:c2:79:
aa:5a:05:e8:9a:c8:4b:24:20:5a:09:6b:70:04:a4:dd:82:f3:
e3:ef:58:53:4b:af:ea:73:42:d0:8d:74:82:64:dd:8e:92:a5:
c7:5c:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:19 2024 by rpki-client on console-ams.rpki-client.org