Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/Pdvd5r4FflduoCmjXhSATMdt9OI.roa
File: Pdvd5r4FflduoCmjXhSATMdt9OI.roa (raw, json)
Hash identifier: q2fhr36qWNiwggbS4yn/EAVnVeYyGY3Q8xfQRMFQJEo=
Subject key identifier: 3D:DB:DD:E6:BE:05:7E:57:6E:A0:29:A3:5E:14:80:4C:C7:6D:F4:E2
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 1B5C8299
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/Pdvd5r4FflduoCmjXhSATMdt9OI.roa
Signing time: Sat 01 Jan 2022 08:54:19 +0000
ROA not before: Sat 01 Jan 2022 08:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199330
IP address blocks: 194.169.218.0/24 maxlen: 24
2001:67c:13cc::/48 maxlen: 48
2a04:2b00:a005::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459047577 (0x1b5c8299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 08:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ddbdde6be057e576ea029a35e14804cc76df4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:53:49:07:12:65:24:16:90:4a:09:33:86:
ef:fb:c4:7c:1d:3e:d2:97:e2:1b:61:27:5b:7a:e6:
7a:37:96:34:7f:d0:d2:82:8f:cc:f3:58:f7:93:25:
98:ee:20:11:51:58:f1:fc:80:09:3c:18:c3:a9:6f:
c5:c7:f1:bc:11:00:15:83:19:7c:37:cd:23:42:2b:
5f:35:e9:69:3a:a6:00:3e:df:68:1c:80:3d:88:4a:
dd:4c:bd:bb:61:a0:2c:70:c6:1b:ca:ac:26:13:4f:
a6:34:76:ba:c6:12:4c:f9:0b:ec:37:bd:01:eb:52:
f2:0e:d2:75:49:00:aa:38:c1:08:1d:26:e9:71:5a:
55:0f:bb:23:8e:af:9d:e8:a9:43:5c:e2:eb:29:12:
b1:cf:be:ff:d0:e6:18:9e:8e:36:93:ed:b3:e8:97:
83:85:0a:e9:48:a9:87:70:69:5c:29:12:fe:cb:79:
a9:40:5c:c5:59:74:61:16:80:dc:df:fd:27:cf:52:
16:e0:e6:eb:58:10:48:4f:02:2f:6c:52:1b:71:d2:
10:9c:0d:0d:a7:95:88:75:21:99:ca:3c:eb:1d:8c:
fa:7a:e7:18:a1:ab:98:9c:f5:78:74:c7:24:df:08:
49:09:7b:3a:c2:a1:a7:ea:51:66:df:14:8e:9e:eb:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DB:DD:E6:BE:05:7E:57:6E:A0:29:A3:5E:14:80:4C:C7:6D:F4:E2
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/Pdvd5r4FflduoCmjXhSATMdt9OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.218.0/24
IPv6:
2001:67c:13cc::/48
2a04:2b00:a005::/48
Signature Algorithm: sha256WithRSAEncryption
02:6d:ba:48:9c:35:ef:6d:21:ba:24:4c:6c:5c:26:16:1a:60:
6a:5b:f7:1a:58:4d:07:84:75:ab:3f:5e:5a:a1:fb:57:3a:12:
dd:ef:70:9a:e6:da:20:69:2b:ce:c8:29:1c:32:aa:e6:27:1a:
68:5a:57:36:ee:d9:79:3b:2f:72:27:53:2c:29:8a:03:d8:9a:
60:50:e9:e0:04:8c:86:aa:1a:6c:b9:89:cf:51:4f:0d:a1:49:
ae:61:8c:dc:aa:0e:76:ad:35:33:1f:bf:18:0c:d2:3a:50:bb:
02:0e:e5:3b:50:77:d9:58:76:c7:53:7e:07:49:5f:4f:a4:3a:
f4:1e:5f:28:07:dc:58:77:06:54:76:b8:95:15:27:a0:a9:de:
da:a3:cd:84:0c:6c:49:0e:7c:62:d3:e7:03:c1:63:80:ef:f3:
34:e6:eb:1b:16:2a:c5:4d:0f:44:04:c3:a7:8f:e1:5d:91:ee:
97:f7:9b:51:c9:37:a8:1f:61:69:51:13:b1:e3:74:fe:da:ce:
e3:09:c2:65:65:ed:21:3d:06:45:1d:f5:96:4a:bd:8d:80:4c:
39:e2:02:15:6f:71:ed:c4:55:6d:a1:10:45:06:c9:cc:90:e3:
b8:9c:50:75:b9:4a:a4:5f:20:cd:81:e5:26:71:b4:71:a1:51:
24:dc:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:46 2024 by rpki-client on console-fra.rpki-client.org