Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/pgBidpOu4-FdIwJAdphPj-NzZNI.roa
File: pgBidpOu4-FdIwJAdphPj-NzZNI.roa (raw, json)
Hash identifier: FWLoVrDMukXrQizFBW/Q/M8GAgCqbbntBH3w1wZneIo=
Subject key identifier: A6:00:62:76:93:AE:E3:E1:5D:23:02:40:76:98:4F:8F:E3:73:64:D2
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 02CB37B9
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/pgBidpOu4-FdIwJAdphPj-NzZNI.roa
Signing time: Sat 01 Jan 2022 09:54:20 +0000
ROA not before: Sat 01 Jan 2022 09:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 195.34.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46872505 (0x2cb37b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 09:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a600627693aee3e15d23024076984f8fe37364d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:1f:5a:e4:98:73:28:ec:51:74:7b:3d:7e:
1d:6d:c9:5a:e4:57:09:f5:f1:4c:e4:e6:20:26:14:
de:53:7e:2b:74:3f:91:2a:7f:3a:36:70:e9:cc:fd:
13:00:0e:35:ca:f4:ac:e1:a8:fe:1b:b9:13:f9:0b:
c0:52:ac:23:fa:70:ca:7a:2e:9f:ff:8c:3b:b5:84:
69:99:b9:8f:b6:3e:15:0c:b3:6c:9d:c3:36:6b:80:
5e:d2:95:6f:46:c7:d9:b2:84:87:dc:82:e8:d9:88:
31:2a:29:55:26:c4:ea:6a:92:01:23:e2:1a:b5:b8:
52:da:cd:71:88:62:4a:69:a0:67:7b:4d:05:54:b2:
a1:a6:dd:39:06:47:4c:4c:2e:6b:38:87:be:2a:15:
21:3c:b9:d9:6c:d5:04:69:74:be:95:9e:83:48:04:
1e:b6:e0:cc:8d:67:8f:27:09:dd:a6:ca:fe:bd:0f:
68:76:9b:7f:3f:ac:42:43:ea:a0:5c:88:37:f7:33:
53:46:28:46:1c:15:cb:29:3a:30:e1:93:73:d2:10:
00:fd:31:87:ba:d5:ad:81:8f:ea:e1:80:28:e0:af:
b4:68:ef:9f:a3:19:5f:22:13:ce:f6:c6:02:56:03:
39:67:e7:26:71:43:c6:09:a6:9c:d1:f4:3d:1e:89:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:00:62:76:93:AE:E3:E1:5D:23:02:40:76:98:4F:8F:E3:73:64:D2
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/pgBidpOu4-FdIwJAdphPj-NzZNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.78.0/24
Signature Algorithm: sha256WithRSAEncryption
90:10:a3:ff:ff:a6:4f:2a:be:c9:15:0b:f5:cc:69:ed:74:74:
d2:f7:41:8d:b1:3e:95:13:26:10:44:ca:42:13:89:2b:31:b5:
af:ad:09:20:6f:c9:b0:e4:ed:7c:89:78:4a:c3:c3:1c:68:9e:
59:64:f0:4e:35:d0:e5:cf:fb:b0:cf:8f:2c:dd:65:72:3f:b4:
94:67:06:89:af:ab:aa:6e:81:a8:69:04:26:fa:83:5c:e1:8b:
3b:9b:e1:d6:ef:0e:c7:0a:93:26:3f:5e:32:ea:a8:57:a4:9f:
3c:8e:59:57:fe:05:bf:b7:d3:c9:1a:2b:35:7f:ff:2b:e7:04:
1b:67:a4:08:d0:98:a2:ad:59:1d:94:e3:8e:ac:c5:d1:bf:21:
e1:55:9d:4b:9b:35:ad:ba:27:e7:23:ac:e3:1d:d5:70:0f:76:
3a:ed:74:82:0d:b3:6e:3d:f2:30:4b:9d:61:72:d4:5d:19:a8:
ba:dc:f7:30:69:f2:f5:47:c3:f6:88:cc:61:fe:4c:d1:b4:1f:
1f:62:3e:a2:81:88:ce:ea:d6:55:8e:0f:4f:76:95:c8:d6:c7:
96:02:30:e2:ab:b8:d8:2a:df:33:eb:f4:34:d8:a1:c2:14:28:
22:ae:52:57:15:44:a6:60:fc:d9:d5:b6:8f:10:5a:eb:9e:09:
0b:3e:5a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-fra.rpki-client.org