Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/PXMlE_HVwpS1UNrJ2NVReDUrQCo.roa
File: PXMlE_HVwpS1UNrJ2NVReDUrQCo.roa (raw, json)
Hash identifier: YGPLike423Oqri9FBnnctOiNUFVw03sWqFYTT8rfxwo=
Subject key identifier: 3D:73:25:13:F1:D5:C2:94:B5:50:DA:C9:D8:D5:51:78:35:2B:40:2A
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 0188E2
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/PXMlE_HVwpS1UNrJ2NVReDUrQCo.roa
Signing time: Mon 16 May 2022 07:07:41 +0000
ROA not before: Mon 16 May 2022 07:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43736
IP address blocks: 91.195.144.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100578 (0x188e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: May 16 07:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d732513f1d5c294b550dac9d8d55178352b402a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:3d:aa:63:6a:8e:37:e5:ab:73:74:a4:b1:
4e:fc:0a:62:b5:8c:cd:cf:8e:dc:1f:c7:97:63:d1:
60:cd:81:dd:19:84:2b:d6:b3:8d:99:7d:e4:56:59:
6e:cd:a5:96:df:55:2c:51:7e:23:b7:8d:07:89:41:
03:22:86:28:29:8f:58:50:10:7a:59:ce:3f:16:1c:
5a:e8:14:a2:32:5d:9b:ee:bd:b3:16:08:ca:1f:d5:
c0:04:fa:e9:2e:b7:d1:83:b0:b0:eb:33:89:46:87:
1e:8c:2e:2c:fb:fd:42:ef:b9:a6:87:57:1e:4e:f2:
58:6b:2f:4f:22:48:ec:f5:a2:19:8a:87:c4:8c:80:
b5:42:b1:36:e0:de:2c:20:d3:d0:fd:46:b2:8e:7d:
7d:79:12:a8:44:2a:81:fd:67:a8:e4:ee:05:e6:e9:
07:67:b4:45:4f:61:30:ce:06:d7:47:e2:6b:4d:53:
af:ea:64:da:3c:80:dd:04:94:20:fc:a3:ec:2c:5f:
1b:3c:17:40:97:ad:61:3a:64:6f:ef:58:01:0e:dc:
6b:b7:44:6d:ad:d5:09:ac:5a:d0:01:7c:92:55:7c:
f2:a3:7f:9c:84:69:e6:30:04:7b:56:e4:16:73:23:
8d:89:0d:03:d7:74:bc:f3:da:72:5d:3d:d3:96:92:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:73:25:13:F1:D5:C2:94:B5:50:DA:C9:D8:D5:51:78:35:2B:40:2A
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/PXMlE_HVwpS1UNrJ2NVReDUrQCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.144.0/23
Signature Algorithm: sha256WithRSAEncryption
72:be:3a:d9:cc:17:16:10:7d:e4:6c:f8:e8:78:ce:63:d6:95:
87:fe:06:5b:0f:b0:70:86:75:d2:c5:a5:c9:5e:b2:f3:65:16:
d2:ef:45:c9:ac:fb:cc:2c:53:d9:91:17:55:6a:4c:4f:d3:f2:
fa:11:8e:8c:ed:b7:24:8e:a8:ab:8d:c8:53:38:e8:61:91:48:
6d:b7:ac:8b:fc:be:c8:41:e3:d5:3f:a1:3e:2f:2b:2f:f8:f0:
02:8a:87:19:fb:88:c9:54:f0:39:99:1d:02:8b:fc:c7:dc:36:
15:54:8d:24:1a:2c:a5:4d:d2:af:ac:9b:e9:28:60:39:92:ed:
04:f3:19:ab:f5:27:9b:82:8d:7f:42:30:f0:32:9c:15:71:e8:
ef:20:5e:05:11:25:f6:28:4e:e7:ea:04:b7:7e:c6:6c:3f:d3:
30:48:6f:94:f1:a0:ef:b7:0d:df:f5:1b:4a:47:ac:86:d8:41:
02:85:e8:fa:9e:bb:35:cd:17:f9:f0:d5:7b:d8:45:db:b8:1f:
7a:8e:ef:a2:36:f4:0d:7c:47:b5:f6:c6:3b:20:5d:19:10:74:
ea:cd:bf:6e:3d:f9:6f:ee:49:10:81:c0:64:88:d5:8f:a4:cc:
d0:f0:e1:5e:9f:15:ac:56:62:be:3b:d7:54:83:e8:f2:35:aa:
5c:83:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org