Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/PCziCK_pgRzwIGw7xzn7Ioan7B8.roa
File: PCziCK_pgRzwIGw7xzn7Ioan7B8.roa (raw, json)
Hash identifier: ICQZJM9fn+Be6w+ypAU//lqYNTMgNH5f83sVUz7NCfE=
Subject key identifier: 3C:2C:E2:08:AF:E9:81:1C:F0:20:6C:3B:C7:39:FB:22:86:A7:EC:1F
Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial: 01CAEF1F
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/PCziCK_pgRzwIGw7xzn7Ioan7B8.roa
Signing time: Sat 01 Jan 2022 15:06:51 +0000
ROA not before: Sat 01 Jan 2022 15:06:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21217
IP address blocks: 91.199.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30076703 (0x1caef1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Validity
Not Before: Jan 1 15:06:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c2ce208afe9811cf0206c3bc739fb2286a7ec1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:67:41:71:c1:4f:79:4f:4c:24:a3:2f:f6:
4e:1d:c3:47:72:d9:54:c5:ca:30:3a:98:6b:72:77:
17:0f:4a:1b:45:36:ba:ea:52:76:fa:18:37:41:c5:
1e:64:83:c2:38:c1:7a:f7:b8:06:e2:32:0f:c8:b4:
1d:8e:ec:27:a2:eb:62:ff:9e:32:1e:59:f9:de:3e:
36:1c:30:18:01:35:20:18:17:e8:72:86:04:cd:60:
8c:b0:a5:42:5a:cf:6c:b3:c8:aa:ed:98:73:2c:a9:
40:0d:57:5b:0f:a5:79:34:f0:cd:8b:27:1f:5d:ce:
91:e5:cc:ea:e4:9c:5a:e7:90:2a:d5:56:78:a4:ca:
e2:67:4e:83:53:0a:46:fd:12:6b:c3:92:00:f4:fa:
22:d1:cc:77:3c:92:ac:da:df:be:1d:57:9e:96:b6:
e2:37:f0:fa:10:30:a9:36:28:34:3c:fa:40:e4:cd:
6f:6f:8a:e4:3e:04:4d:f6:fb:9b:40:b5:13:d1:b2:
49:76:49:50:3b:11:bb:0e:7f:b5:bb:97:bb:cd:ca:
a9:91:c5:18:00:e7:2e:fb:e4:79:72:29:62:83:f0:
62:3f:b1:de:90:07:95:0d:04:10:55:77:5a:9b:3e:
d4:ab:c1:dd:e9:bf:03:94:58:1d:b8:8d:cc:92:1a:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2C:E2:08:AF:E9:81:1C:F0:20:6C:3B:C7:39:FB:22:86:A7:EC:1F
X509v3 Authority Key Identifier:
keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/PCziCK_pgRzwIGw7xzn7Ioan7B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.255.0/24
Signature Algorithm: sha256WithRSAEncryption
08:90:95:8a:00:75:30:4c:44:e1:98:f4:e2:61:d9:3e:e6:f5:
7e:8a:00:bc:66:8c:b2:91:df:06:a2:33:0c:38:1d:47:1a:41:
86:d5:e0:56:56:62:05:62:06:d4:20:1d:dc:9c:f1:e4:4f:77:
92:42:47:2d:7e:2a:6c:85:6e:68:39:e1:cf:7a:86:8d:ff:06:
21:f6:76:fd:f8:cb:2a:bb:db:0a:c7:9e:68:f4:f2:8a:c6:67:
ca:aa:0c:ef:6e:d8:36:9c:d1:f3:0c:cc:9f:fc:dd:2a:0b:a6:
21:f9:59:bb:ce:08:f0:6d:a1:1c:c0:bc:96:d8:98:58:81:d5:
89:69:e2:27:57:53:cf:67:e6:09:53:f6:90:fc:cc:97:00:86:
c5:32:4a:04:64:cd:d3:f1:77:e6:d8:26:88:a5:04:eb:6c:c2:
a9:2f:b4:05:be:7f:ad:4d:0c:4b:9b:b8:3b:e2:8a:45:37:48:
6f:46:e1:45:19:6a:06:c7:96:22:04:3f:52:5b:f0:76:4a:62:
06:3e:98:a0:29:03:86:e2:bb:b3:fa:57:15:1a:a2:38:c6:47:
3a:80:eb:cb:a1:6d:b6:c4:67:92:00:36:fe:fb:2e:e2:51:40:
1c:1e:29:56:91:41:c9:1c:a3:c1:7e:b2:b4:4d:bc:1a:d0:2d:
59:b3:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:01:04 2025 by rpki-client