Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/pgSGRR5Eb7m7KIY7l_aTtc-Fe7M.roa
File: pgSGRR5Eb7m7KIY7l_aTtc-Fe7M.roa (raw, json)
Hash identifier: KoSYKSLuU8KFb8lqg61KdDz9ez7g/XOUs2wWR6lc4Hc=
Subject key identifier: A6:04:86:45:1E:44:6F:B9:BB:28:86:3B:97:F6:93:B5:CF:85:7B:B3
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0183B42710F7F171374880FCB2769C170A91
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/pgSGRR5Eb7m7KIY7l_aTtc-Fe7M.roa
Signing time: Fri 07 Oct 2022 20:33:22 +0000
ROA not before: Fri 07 Oct 2022 20:33:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 91.186.204.0/22 maxlen: 24
91.186.212.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b4:27:10:f7:f1:71:37:48:80:fc:b2:76:9c:17:0a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 7 20:33:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a60486451e446fb9bb28863b97f693b5cf857bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:8f:56:d2:f5:76:33:d7:ff:62:7c:a3:bb:
a1:d5:69:d9:d5:48:f4:55:bf:22:a7:df:c5:83:13:
d6:c5:42:bd:d1:fa:e4:d0:ac:92:9a:30:7f:89:d3:
09:00:e3:c4:af:3d:a5:0b:00:7f:fd:60:db:50:9c:
86:66:c2:c0:b1:fc:9f:c5:90:fc:6f:15:9c:92:f7:
3f:ff:84:10:9d:9c:e5:f1:5b:3f:3f:d6:8e:18:b2:
02:b4:21:cc:0a:12:d6:4b:f4:b9:00:f9:6e:ef:fd:
b2:82:b8:23:81:35:56:39:25:5d:71:51:4d:ae:25:
ec:b1:aa:31:1c:0b:1d:5c:43:b6:a2:7b:86:bc:03:
49:d8:29:10:b6:29:e1:0d:fc:1f:c7:65:40:5a:1c:
73:28:a5:0d:be:29:d9:fe:bb:88:f9:12:5d:cb:57:
31:e5:2b:75:8e:87:28:2b:dd:45:71:3b:b1:81:e8:
cc:72:6a:75:0f:8d:a1:a4:15:bb:2f:68:50:2a:ad:
0b:4a:02:e4:6e:c2:13:0f:92:a9:44:03:e7:92:f9:
b1:1c:70:64:45:b7:63:8c:d3:19:22:5f:46:93:3d:
e0:41:f9:22:4c:f9:d5:c5:d5:a0:45:30:45:9f:47:
e9:ae:49:45:b8:7d:60:16:ef:0c:ac:55:99:8c:b9:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:04:86:45:1E:44:6F:B9:BB:28:86:3B:97:F6:93:B5:CF:85:7B:B3
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/pgSGRR5Eb7m7KIY7l_aTtc-Fe7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.204.0/22
91.186.212.0/23
Signature Algorithm: sha256WithRSAEncryption
07:b9:05:f5:21:08:d8:08:9d:47:97:26:95:f3:e2:19:04:b1:
32:db:45:c4:27:cf:9b:f2:1f:7d:0d:4c:e9:65:38:aa:04:8a:
bd:10:1a:51:39:be:53:de:b5:fd:e9:91:ae:fa:66:ee:4d:35:
b2:79:c4:de:54:08:bd:fe:64:64:d7:d2:48:0f:dc:d8:6a:b5:
aa:be:a6:a2:e1:d2:cd:52:7a:1c:6e:ef:9d:28:36:77:e5:cf:
2e:22:43:f8:ee:4e:6d:4d:6b:24:e3:fc:b5:d8:4c:84:4b:c3:
b9:c3:f3:9b:d8:fd:ac:17:20:ce:ee:e8:5a:fc:40:79:ed:fc:
1f:d2:84:3d:1f:ef:82:34:3e:f1:48:92:c8:77:b1:f6:c5:43:
79:78:a3:72:0c:01:62:fc:ad:f1:df:9c:77:75:19:ed:01:dc:
04:d4:14:07:91:f7:03:16:7c:0f:3a:70:66:26:52:70:c0:36:
4f:35:3b:8f:f3:92:e8:a0:95:42:21:2d:5e:ef:15:00:cb:50:
2f:20:10:4c:36:6f:61:00:cd:84:e6:b4:99:02:0e:a9:ba:21:
59:a2:6d:1b:6c:11:11:bc:2e:a8:79:ed:f7:32:73:4a:fa:56:
2e:86:e3:44:8b:41:7d:93:04:e3:57:b2:e3:dd:17:ac:0a:1b:
b6:9a:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org