Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/PGOlzHrTInaAoSKPoCPp26qzZPQ.roa
File: PGOlzHrTInaAoSKPoCPp26qzZPQ.roa (raw, json)
Hash identifier: mrlqOEH2QLaQy13Bv7R5xOpx1IKALifyZOjVgdIs+Qc=
Subject key identifier: 3C:63:A5:CC:7A:D3:22:76:80:A1:22:8F:A0:23:E9:DB:AA:B3:64:F4
Certificate issuer: /CN=59a06c187953cfc8133b2beee5f01a15e45da078
Certificate serial: C9D0F5
Authority key identifier: 59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/PGOlzHrTInaAoSKPoCPp26qzZPQ.roa
Signing time: Sat 01 Jan 2022 12:57:36 +0000
ROA not before: Sat 01 Jan 2022 12:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 91.233.120.0/24 maxlen: 24
194.104.235.0/24 maxlen: 24
2a11:6740::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13226229 (0xc9d0f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a06c187953cfc8133b2beee5f01a15e45da078
Validity
Not Before: Jan 1 12:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c63a5cc7ad3227680a1228fa023e9dbaab364f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:63:72:bf:08:53:3c:36:20:09:13:28:65:
e3:9a:53:58:3d:48:9a:28:e5:25:a5:56:41:57:b8:
84:f0:0e:c2:d5:f2:b5:a2:1c:cf:73:e8:c7:3f:aa:
77:02:f4:42:98:c2:42:85:e5:c7:de:86:07:9c:18:
76:60:e3:e3:10:e2:34:99:1f:4e:5d:52:c0:b0:3d:
aa:63:ac:c1:e5:93:f3:71:c4:a0:77:aa:88:a6:84:
72:3f:88:ac:47:9c:33:d9:8c:cc:f0:4e:77:ba:aa:
88:6c:f7:9f:20:b8:b5:e5:81:b6:ae:69:ad:e5:dc:
ba:ac:46:46:0c:1a:bc:90:5d:d1:a2:89:6a:63:d4:
ab:c7:7f:c0:82:85:ea:e7:ea:6c:d1:19:d9:a3:a8:
65:43:77:15:d0:c9:d4:1f:0e:93:33:cb:18:41:48:
78:5f:8c:aa:44:d1:ca:44:32:62:5a:c4:73:ba:fc:
18:d6:b5:66:63:ce:c6:30:eb:9c:e7:bd:5e:e3:a4:
db:1d:c8:c0:1a:3c:39:b9:cf:fe:cc:29:34:82:03:
d8:f1:85:7d:df:d2:10:b1:48:90:d6:e9:09:9c:b7:
c2:33:78:36:1f:22:d7:61:dd:d7:56:53:0d:b9:fe:
95:85:99:dd:0c:f9:6a:9a:0b:55:8f:d3:11:53:42:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:A5:CC:7A:D3:22:76:80:A1:22:8F:A0:23:E9:DB:AA:B3:64:F4
X509v3 Authority Key Identifier:
keyid:59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/PGOlzHrTInaAoSKPoCPp26qzZPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.120.0/24
194.104.235.0/24
IPv6:
2a11:6740::/29
Signature Algorithm: sha256WithRSAEncryption
81:cd:99:3f:98:ca:51:94:bc:ac:df:77:c8:88:78:a2:3c:28:
ac:2d:78:da:50:05:4d:97:91:cc:4a:e7:88:f5:bb:26:28:f6:
ca:66:0f:ac:58:b8:80:77:62:74:65:07:ee:63:88:97:3f:78:
44:dc:be:7e:98:35:df:b7:12:b8:34:8a:29:99:f7:c4:29:ef:
87:08:50:fe:b6:f0:8b:01:16:73:d1:58:4b:24:8d:c1:68:df:
5d:f0:fb:70:5f:65:e1:c3:a5:5b:56:0b:ea:86:1c:ca:6c:3a:
60:50:67:bc:eb:c3:69:e1:e7:ba:71:d7:aa:b9:6a:ff:de:bb:
41:63:9f:4c:97:57:9e:86:a7:e5:92:d4:5b:a2:08:cf:39:0c:
0f:46:03:2e:c9:72:30:4c:3c:89:a6:db:36:0d:50:73:4c:45:
e8:7c:6a:c0:27:fa:fc:e9:bd:ca:8d:04:1d:72:cc:ec:97:73:
d9:6f:89:00:c5:71:57:20:93:2f:e1:65:2d:66:dc:bd:61:6b:
6b:28:f5:3a:26:a9:04:4a:49:52:13:d8:66:b8:65:14:9d:6a:
19:2d:58:c4:bb:6f:1f:28:85:c4:d1:33:e1:01:a0:b1:55:af:
3d:31:e7:ce:50:11:dc:1a:c6:0d:08:70:ea:85:28:b6:34:0f:
dc:e0:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:23 2023 by rpki-client on console-ams.rpki-client.org