Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/PVJtei7zb5l57cyK9XVYrW_pt5o.roa
File: PVJtei7zb5l57cyK9XVYrW_pt5o.roa (raw, json)
Hash identifier: EMGk/m3qoyYi01EPPk8ke/ryyOQfc/FOaV0PJkbjcqE=
Subject key identifier: 3D:52:6D:7A:2E:F3:6F:99:79:ED:CC:8A:F5:75:58:AD:6F:E9:B7:9A
Certificate issuer: /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial: 06157D96
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/PVJtei7zb5l57cyK9XVYrW_pt5o.roa
Signing time: Sat 01 Jan 2022 16:05:41 +0000
ROA not before: Sat 01 Jan 2022 16:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207442
IP address blocks: 185.89.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102071702 (0x6157d96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Validity
Not Before: Jan 1 16:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d526d7a2ef36f9979edcc8af57558ad6fe9b79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:a3:82:db:a4:05:86:a3:14:4c:29:1f:83:
2e:f7:f9:66:1a:78:78:5a:83:fc:88:16:9b:04:b7:
1b:98:0a:38:63:a7:da:cf:b9:89:d1:3a:65:8b:42:
6a:22:13:f3:21:1d:99:a0:c2:5e:50:25:db:ca:f7:
92:81:85:6d:38:80:7c:75:b3:24:6e:a7:5c:e6:fb:
c8:38:0a:f2:f1:ee:36:8c:13:e6:65:c0:7f:e8:e1:
0a:75:70:e7:ea:5b:1d:d0:d1:dd:90:31:df:34:90:
d8:35:0c:41:d9:ca:7f:95:67:8a:16:88:b6:c5:4b:
2b:9a:2b:51:6b:3e:db:3e:48:27:36:81:35:da:98:
db:9f:6d:9e:ec:a1:fb:57:81:2e:41:f7:89:b0:b5:
30:78:f6:98:2c:cb:41:f2:3d:12:1b:1e:20:92:04:
a9:8d:a5:bb:3e:f9:70:ed:5d:34:ca:59:b5:cd:96:
1b:3d:d2:87:1a:86:52:00:4e:c8:0d:ba:a4:43:b9:
77:c0:ec:2e:bb:18:39:fe:62:c7:88:39:e0:49:87:
31:5e:01:8b:ff:58:17:83:f1:4d:7f:36:31:0e:f1:
59:80:02:0f:72:3b:ed:29:cb:e1:8e:27:37:9d:ea:
88:b7:3f:af:22:fe:a5:84:3f:01:a2:d2:7c:8e:c0:
74:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:6D:7A:2E:F3:6F:99:79:ED:CC:8A:F5:75:58:AD:6F:E9:B7:9A
X509v3 Authority Key Identifier:
keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/PVJtei7zb5l57cyK9XVYrW_pt5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.98.0/24
Signature Algorithm: sha256WithRSAEncryption
24:fb:34:0b:e1:b0:12:97:92:33:41:f0:2e:a5:5a:d8:ff:2a:
2b:a0:fa:b9:8e:29:d0:a7:33:ef:76:98:e7:39:2e:33:7a:70:
d5:30:db:ad:84:dc:20:06:2d:cc:ec:ad:6a:71:75:58:69:6f:
4e:51:58:1f:15:0b:12:b5:47:71:86:6e:89:8f:11:6a:51:f9:
c4:6b:ae:af:45:20:9b:2d:e8:ac:05:fa:46:19:58:e9:02:8a:
f7:e1:b1:f6:31:44:f3:8d:40:cf:1b:00:f5:20:5e:f6:40:0f:
42:78:72:30:76:1a:77:2e:29:44:5c:5a:ae:1c:3e:18:b1:f3:
36:a1:20:4b:f3:6b:b0:71:fb:1e:74:c6:8b:50:f4:e2:2b:e7:
54:19:11:0b:e5:43:9c:e3:7e:b8:5f:f0:68:6c:fd:d1:55:a2:
ab:28:32:01:12:61:81:7f:e5:5f:76:65:da:0d:2f:15:16:6f:
44:e5:f0:0b:fd:04:5f:b0:47:cd:92:3b:49:32:3c:1b:e1:f7:
ae:db:ad:81:02:f7:10:bb:d3:96:3c:b4:1a:44:1d:89:51:c5:
7c:85:71:7e:21:46:e1:1b:81:a1:20:21:da:97:79:f6:e1:39:
0a:ff:9c:3e:11:1d:fc:46:46:d3:23:ef:99:ee:26:87:13:5c:
af:ad:e8:69
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBhV9ljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ODI2YjYwNGY2ZjhjMDNmZTlkZjZjOThlNjFmMzllYWVkNzU1NWE1MB4XDTIyMDEw
MTE2MDU0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Q1MjZkN2EyZWYz
NmY5OTc5ZWRjYzhhZjU3NTU4YWQ2ZmU5Yjc5YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMNro4LbpAWGoxRMKR+DLvf5Zhp4eFqD/IgWmwS3G5gKOGOn
2s+5idE6ZYtCaiIT8yEdmaDCXlAl28r3koGFbTiAfHWzJG6nXOb7yDgK8vHuNowT
5mXAf+jhCnVw5+pbHdDR3ZAx3zSQ2DUMQdnKf5VnihaItsVLK5orUWs+2z5IJzaB
NdqY259tnuyh+1eBLkH3ibC1MHj2mCzLQfI9EhseIJIEqY2luz75cO1dNMpZtc2W
Gz3ShxqGUgBOyA26pEO5d8DsLrsYOf5ix4g54EmHMV4Bi/9YF4PxTX82MQ7xWYAC
D3I77SnL4Y4nN53qiLc/ryL+pYQ/AaLSfI7AdOsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ9Um16LvNvmXntzIr1dVitb+m3mjAfBgNVHSMEGDAWgBR4JrYE9vjAP+nf
bJjmHznq7XVVpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VDYTJCUGI0d0RfcDMyeVk1aDg1NnUxMVZhVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvYzk0YzY1LWVhMDItNDA1YS1iYmE3LWNhMDQ3NGFkZjM3My8x
L1BWSnRlaTd6YjVsNTdjeUs5WFZZcldfcHQ1by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
Yzk0YzY1LWVhMDItNDA1YS1iYmE3LWNhMDQ3NGFkZjM3My8xL2VDYTJCUGI0d0Rf
cDMyeVk1aDg1NnUxMVZhVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlZYjANBgkqhkiG9w0BAQsFAAOC
AQEAJPs0C+GwEpeSM0HwLqVa2P8qK6D6uY4p0Kcz73aY5zkuM3pw1TDbrYTcIAYt
zOytanF1WGlvTlFYHxULErVHcYZuiY8RalH5xGuur0Ugmy3orAX6RhlY6QKK9+Gx
9jFE841AzxsA9SBe9kAPQnhyMHYady4pRFxarhw+GLHzNqEgS/NrsHH7HnTGi1D0
4ivnVBkRC+VDnON+uF/waGz90VWiqygyARJhgX/lX3Zl2g0vFRZvROXwC/0EX7BH
zZI7STI8G+H3rtutgQL3ELvTljy0GkQdiVHFfIVxfiFG4RuBoSAh2pd59uE5Cv+c
PhEd/EZG0yPvme4mhxNcr63oaQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:38 2023 by rpki-client on console-fra.rpki-client.org