Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/PbMfW114uD949NExm-6AzMxR71w.roa
File: PbMfW114uD949NExm-6AzMxR71w.roa (raw, json)
Hash identifier: 1H/O3UigtIQXY9c8ZFuhJ71pchs6qIXZHQ9mj5+EzEY=
Subject key identifier: 3D:B3:1F:5B:5D:78:B8:3F:78:F4:D1:31:9B:EE:80:CC:CC:51:EF:5C
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 23B26269
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/PbMfW114uD949NExm-6AzMxR71w.roa
Signing time: Sat 01 Jan 2022 14:01:28 +0000
ROA not before: Sat 01 Jan 2022 14:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47617
IP address blocks: 195.162.128.0/19 maxlen: 19
195.162.128.0/20 maxlen: 20
93.187.208.0/24 maxlen: 24
93.187.209.0/24 maxlen: 24
93.187.210.0/24 maxlen: 24
93.187.208.0/21 maxlen: 21
195.162.144.0/20 maxlen: 20
93.187.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598893161 (0x23b26269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Jan 1 14:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3db31f5b5d78b83f78f4d1319bee80cccc51ef5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:51:5d:fe:49:09:60:60:b6:38:1b:8b:cb:
17:28:a4:d7:3d:ed:7d:02:f7:9b:56:61:b9:df:21:
53:ad:75:9e:8f:52:02:5a:2a:e4:0d:a4:b8:98:82:
db:61:16:56:90:3c:df:60:05:ae:9e:a0:ba:a6:32:
05:93:35:a1:43:51:86:27:9a:e5:b9:0e:ed:fe:3a:
0a:cc:e3:0b:1a:53:df:0e:d9:65:bd:31:00:1d:ba:
f8:b9:ec:cf:f4:54:a4:4e:43:b0:ab:1d:50:e0:4d:
c6:77:d3:0a:63:93:be:61:2a:f5:04:b4:25:1b:70:
0f:67:14:d2:ee:78:a1:b2:4c:e7:5a:87:84:c7:4c:
e3:a7:d3:19:88:0b:d4:64:ec:e1:44:20:33:42:b7:
8b:4a:cb:db:55:b1:e2:3a:c2:9c:79:86:a4:26:8c:
fe:34:cd:df:15:78:01:e9:97:80:7c:5c:bc:46:e7:
71:36:d3:1e:b0:0e:62:2a:f4:7b:64:34:94:a9:0b:
46:5c:4c:b5:60:99:9b:ec:e9:f6:48:df:08:17:ad:
4b:37:c5:2a:ba:29:91:f7:69:07:d1:9d:fb:0f:f1:
59:39:1b:97:59:04:5f:68:6b:a5:a2:45:0e:c5:56:
ae:1e:7f:97:18:2a:51:35:fc:01:82:d3:ea:4a:45:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:1F:5B:5D:78:B8:3F:78:F4:D1:31:9B:EE:80:CC:CC:51:EF:5C
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/PbMfW114uD949NExm-6AzMxR71w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.208.0/21
195.162.128.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:fc:fc:9c:e6:d2:e2:01:4b:5c:47:42:7f:a9:09:1c:98:c8:
e6:7e:e5:19:0c:d0:06:fc:6b:2a:ee:dd:c5:d2:b7:25:49:82:
c8:e8:dd:4c:e9:f2:22:9e:e8:ff:d6:dc:12:f1:0a:73:44:71:
91:2b:91:c4:74:72:33:b3:62:57:20:2b:5c:c5:20:42:a8:5d:
ee:87:03:dc:46:2c:34:58:b6:df:6a:67:64:2f:c0:46:6f:28:
16:bb:9c:49:d4:f3:a5:1b:05:98:99:af:f8:4b:ca:65:22:2f:
27:f1:64:00:f8:d7:b6:01:ed:7c:db:d7:01:ce:98:dd:11:11:
83:82:03:40:21:a6:91:6e:49:14:53:09:62:e5:ed:fd:73:b5:
b2:a5:11:1b:6f:a7:a1:59:59:76:0b:d9:87:bf:d9:cd:f5:c6:
40:e8:30:eb:95:2e:4a:e9:a3:15:ad:0e:7b:52:45:3d:e9:e5:
65:92:3b:39:73:1e:13:e5:f8:ad:0d:ed:f9:98:c3:24:e2:85:
62:89:dc:c2:1b:db:b7:63:ad:59:84:61:62:25:ef:49:da:cd:
ea:17:ee:9c:f6:53:16:0f:a5:53:0f:e5:ab:1e:b6:c0:e3:39:
90:f9:54:48:b3:1f:03:65:e8:a7:93:ee:46:02:5f:6c:51:aa:
33:48:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:13:43 2025 by rpki-client