Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/pjRNkTKrE-J0381DMiWEMqN4tK0.roa
File: pjRNkTKrE-J0381DMiWEMqN4tK0.roa (raw, json)
Hash identifier: 4aYaYhPp8uRfEjvwDx0aD0wgDxWoBeoQOmW1j6DLbCg=
Subject key identifier: A6:34:4D:91:32:AB:13:E2:74:DF:CD:43:32:25:84:32:A3:78:B4:AD
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 0F86A1D5
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/pjRNkTKrE-J0381DMiWEMqN4tK0.roa
Signing time: Sat 01 Jan 2022 14:06:14 +0000
ROA not before: Sat 01 Jan 2022 14:06:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35086
IP address blocks: 185.95.141.0/24 maxlen: 24
185.95.140.0/24 maxlen: 24
185.95.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260481493 (0xf86a1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Jan 1 14:06:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6344d9132ab13e274dfcd4332258432a378b4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:94:b4:79:14:ee:2b:91:d2:f6:f6:32:e6:
ec:c0:bd:34:3b:3f:cb:06:ed:9f:82:f2:8d:c7:be:
6c:7c:51:1c:03:9d:b8:a1:e2:4d:c8:82:98:e5:cb:
ba:0d:bb:92:d4:b5:f7:c8:b8:3c:8f:7e:19:15:17:
e0:73:87:fc:fe:18:ec:7b:d3:a5:20:d3:27:a5:80:
33:37:ec:88:06:8a:37:a3:4c:37:67:84:84:9e:45:
21:c4:2d:b3:d8:7b:98:8f:08:6f:60:1c:2d:fb:9c:
81:d9:f5:75:4f:e1:12:41:58:6e:43:c3:58:44:72:
45:f7:ac:76:78:6c:06:15:27:56:64:47:eb:0b:d5:
16:06:09:74:1e:4d:7b:59:9d:c2:9b:a2:61:05:56:
b9:a4:26:a1:c3:6d:38:ef:5a:9c:67:96:24:b4:b1:
cb:71:d1:24:75:fe:e2:bb:ce:69:a2:cc:ad:e0:ca:
fd:ed:09:54:cb:53:30:cc:b5:bc:74:d5:53:6e:06:
b3:67:3b:d3:b1:df:00:95:fd:3c:62:7c:10:18:51:
c6:27:d8:66:3d:ba:03:c8:73:76:c5:db:a7:82:4d:
b4:fa:fa:a1:1f:8d:ec:7a:90:26:7d:8f:03:88:86:
78:8b:ed:03:51:2b:f1:e2:54:7f:6a:11:ba:b3:0a:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:34:4D:91:32:AB:13:E2:74:DF:CD:43:32:25:84:32:A3:78:B4:AD
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/pjRNkTKrE-J0381DMiWEMqN4tK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.140.0-185.95.142.255
Signature Algorithm: sha256WithRSAEncryption
8b:e9:b2:e2:e6:78:90:2c:35:0f:d3:c6:e5:3f:df:9b:88:f9:
40:78:16:d8:11:1b:37:1f:87:18:bd:19:df:70:60:2a:ce:02:
c8:56:f6:bb:ae:5d:9a:3d:08:e9:06:84:71:d4:a3:4c:77:ec:
1b:97:7e:01:b6:6b:ea:e4:11:a3:0c:24:41:44:6c:c5:cc:7c:
56:40:3b:55:12:71:8a:b4:e8:86:cf:cc:78:81:62:6b:e9:42:
4d:ba:1e:03:87:3d:6d:cb:0f:5b:2e:21:23:17:6b:53:6f:99:
bb:ba:e8:95:35:25:c3:21:04:55:48:2d:95:32:71:61:f2:ed:
a1:6a:36:c6:23:50:0c:97:bc:42:ee:13:ac:18:66:cd:19:5c:
17:2a:6c:4c:b6:a4:b8:9f:65:b7:a0:51:1f:60:96:8f:c2:04:
3c:f4:88:e8:52:60:fe:b5:cc:6d:06:8f:ae:6f:90:4f:c4:a6:
49:05:9a:5a:d9:14:61:ef:00:ef:76:4e:9f:1c:87:4e:4c:e6:
6d:e7:d2:09:3e:29:e9:f1:ab:c6:93:47:8c:eb:27:72:86:45:
da:9b:7e:d0:ba:c9:ad:77:ad:87:e8:1d:f0:77:af:b5:fc:23:
31:57:1d:4b:9f:3d:f4:4c:ef:3c:84:32:6b:75:cb:5c:76:ac:
bf:79:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org