Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/pgRMkCJrMeiypArIkl9ODhE9XUw.roa
File: pgRMkCJrMeiypArIkl9ODhE9XUw.roa (raw, json)
Hash identifier: yPpuAjPw8K1J/UhcFp+WlOIxtEOsdhVxxxN6PbIyJCU=
Subject key identifier: A6:04:4C:90:22:6B:31:E8:B2:A4:0A:C8:92:5F:4E:0E:11:3D:5D:4C
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 3F6792D6
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/pgRMkCJrMeiypArIkl9ODhE9XUw.roa
Signing time: Sat 01 Jan 2022 10:59:50 +0000
ROA not before: Sat 01 Jan 2022 10:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1835
IP address blocks: 130.226.0.0/16 maxlen: 24
192.38.0.0/17 maxlen: 24
130.225.0.0/16 maxlen: 24
2001:878::/30 maxlen: 48
2001:7f8:1f::/48 maxlen: 64
2001:878::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1063752406 (0x3f6792d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Jan 1 10:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6044c90226b31e8b2a40ac8925f4e0e113d5d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:2c:05:f3:62:f9:fe:e7:47:c8:84:58:4e:
56:7b:dc:c8:d5:5f:d1:29:fa:4b:7e:cd:3c:ae:8c:
b8:1d:c4:8e:5c:08:2a:a3:f3:06:97:ca:2e:45:4d:
5b:13:37:9f:c8:6d:25:58:65:85:ca:e1:a0:71:e8:
bb:85:44:67:90:79:52:e7:4e:6c:c1:bd:62:85:94:
3b:98:2e:85:c3:0d:57:94:6a:64:85:3e:2a:fa:67:
83:8c:e6:b7:ca:e4:e0:e4:b5:ba:4b:ae:4d:d2:e1:
a7:61:5b:28:d5:82:d4:e1:d4:dd:10:c8:27:32:90:
b5:dc:65:eb:b1:44:08:06:19:be:af:7b:94:bb:4c:
8e:57:b6:75:06:0e:74:54:17:52:2f:97:f3:69:ff:
1e:89:cc:12:0e:7d:20:cf:c6:84:22:bc:ab:40:49:
14:27:cb:e6:42:05:93:1b:8c:fd:4f:44:78:27:c6:
3b:3c:49:2f:2c:d4:d3:a2:1d:95:18:e6:6a:45:03:
c2:60:b4:94:db:39:24:ba:5e:e8:3d:1f:dc:26:2e:
75:fc:1f:28:9a:5b:23:2c:18:a1:5f:24:94:38:53:
82:c2:22:0a:f9:eb:67:80:e0:b3:fa:27:c7:82:73:
21:bc:ee:24:3a:35:2d:26:55:85:f5:3f:d8:7a:f2:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:04:4C:90:22:6B:31:E8:B2:A4:0A:C8:92:5F:4E:0E:11:3D:5D:4C
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/pgRMkCJrMeiypArIkl9ODhE9XUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.225.0.0-130.226.255.255
192.38.0.0/17
IPv6:
2001:7f8:1f::/48
2001:878::/29
Signature Algorithm: sha256WithRSAEncryption
06:55:8c:b6:2d:c4:71:d4:1d:99:3b:04:88:4d:ba:00:f1:5e:
98:15:ba:69:e5:2e:4a:62:20:25:a8:05:65:d4:ef:e7:cf:06:
9e:d6:0e:90:3e:cd:2e:b4:97:69:b5:e2:c6:37:24:2a:51:fd:
e3:3b:bf:17:86:b2:ae:76:0d:a5:6c:f7:9b:15:e6:8b:5c:91:
95:bd:3b:00:a9:b2:55:23:76:c8:43:c4:bf:5d:ce:75:7c:d6:
09:6f:db:22:ff:12:5f:07:76:c1:a6:28:df:1a:e5:29:8e:54:
e4:1c:8f:db:84:61:96:f3:7f:09:a4:39:45:7e:c7:a4:bb:89:
8e:8f:b6:59:e7:91:a1:cd:9c:9a:3c:f0:b2:f7:f5:be:ed:43:
40:26:05:c3:4d:ae:86:29:1a:cb:2a:bb:eb:c2:dc:c2:4f:41:
ef:87:a1:5a:ac:a1:0c:eb:8d:40:23:fd:21:7c:26:a6:db:cc:
f1:d3:4b:a9:07:2f:15:28:53:a9:4c:20:ad:b5:fd:43:80:df:
5e:53:50:79:73:3b:9e:a2:e1:cc:87:8a:95:7b:01:ad:58:4f:
a1:3c:c6:b0:56:3e:29:8f:6b:b6:bc:84:8d:38:b2:1c:8c:18:
d3:9d:9c:ea:bc:f1:6d:aa:3b:3d:af:69:e2:c8:a3:71:c5:f8:
3b:2b:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:10 2025 by rpki-client