Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PvnkgjzYSCwm9j0raxo0eqrp6KY.roa
File: PvnkgjzYSCwm9j0raxo0eqrp6KY.roa (raw, json)
Hash identifier: 0/6ff8C+FNi1X2bQlFJ37vvsAmm9Ni3iSSkKovdKGeo=
Subject key identifier: 3E:F9:E4:82:3C:D8:48:2C:26:F6:3D:2B:6B:1A:34:7A:AA:E9:E8:A6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0DE33D50
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PvnkgjzYSCwm9j0raxo0eqrp6KY.roa
Signing time: Thu 14 Apr 2022 08:24:00 +0000
ROA not before: Thu 14 Apr 2022 08:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 45.80.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232996176 (0xde33d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 14 08:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ef9e4823cd8482c26f63d2b6b1a347aaae9e8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:66:1a:71:1f:6d:18:2f:6d:0e:77:d1:82:
07:3e:28:b6:49:d1:b5:67:16:6a:8a:7d:67:30:07:
00:a0:e8:20:2a:5d:c9:bf:f9:19:08:4d:e7:03:25:
2b:89:63:5d:06:9e:ce:aa:b7:dc:1f:e6:69:2a:a3:
64:5c:cd:17:10:e1:88:f7:c5:d0:e9:5e:d9:6d:51:
01:aa:43:aa:30:1c:0d:89:f0:9d:65:4f:5e:79:c4:
23:c2:af:c9:a1:b2:05:e7:e7:99:9d:2d:02:32:f5:
ce:a3:58:26:cf:40:f6:a1:f0:08:44:bd:e1:c4:c5:
00:49:04:9c:42:bd:06:93:64:a6:0a:d7:37:2f:7e:
ab:19:8a:26:8c:11:ec:74:9c:8b:63:7b:dc:32:93:
ac:78:47:cd:af:08:09:ee:8c:31:ef:07:58:99:2c:
e9:26:e6:2e:41:64:07:a1:99:62:ef:85:0b:83:2d:
5e:74:3c:4f:10:54:ce:10:73:e8:c9:27:cd:15:bc:
ff:e5:8a:3d:e0:43:06:4f:c4:96:78:f8:26:f6:5a:
f0:03:88:da:69:b2:d5:0d:34:a5:2d:36:91:e4:88:
0a:ad:bc:38:df:8a:17:0a:04:4e:8e:1a:1e:11:d6:
fb:15:7f:4d:f5:18:21:e9:da:b0:46:6a:0f:6b:31:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F9:E4:82:3C:D8:48:2C:26:F6:3D:2B:6B:1A:34:7A:AA:E9:E8:A6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PvnkgjzYSCwm9j0raxo0eqrp6KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cb:d3:1d:6d:46:46:b3:27:0e:08:52:73:97:e9:dc:6e:26:
fd:5f:ba:56:4e:df:66:1c:c5:cc:dd:84:41:61:25:59:45:7f:
97:f8:68:8b:1a:ba:fb:33:e1:03:88:62:51:fa:71:28:7a:a1:
9a:f9:dd:7d:92:ea:ae:b5:52:41:cd:ee:0e:00:b9:16:c1:3b:
58:42:2e:8d:50:92:9d:22:95:c1:9d:a1:79:3e:45:a8:39:1f:
ce:b5:45:40:27:d7:4b:4f:ee:70:64:3c:02:71:2e:ff:ef:26:
7d:cd:00:ca:6c:ef:52:3f:3b:10:ed:d8:1f:e1:44:a8:d7:31:
3a:f2:62:e1:ec:64:43:e8:fb:62:a9:fd:b5:23:ab:7b:f5:38:
88:fc:f5:3f:6b:cb:ea:29:aa:6d:87:fe:2f:cd:80:41:7b:59:
d3:bb:84:ad:55:2a:98:e3:77:95:08:9a:ed:ed:a8:21:70:88:
68:9c:77:08:ae:59:51:e0:23:b3:03:8b:99:49:e6:6f:01:b3:
84:07:0e:45:db:be:99:18:b2:cc:9c:2f:25:1d:44:21:03:36:
0c:75:f2:da:17:f6:b3:1e:7d:1a:6a:5a:a7:4f:ff:82:af:79:
ab:d0:a9:1c:71:1b:0d:ec:27:fe:17:b8:43:f4:d3:af:88:18:
8b:62:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:45 2024 by rpki-client on console-fra.rpki-client.org