Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/PBNSsFHleiJl1L9C9CmQacU0Z4k.roa
File: PBNSsFHleiJl1L9C9CmQacU0Z4k.roa (raw, json)
Hash identifier: sw8xnAEzKOUb8nMIO5bXkTCdBgemp49LQujH+BYQauI=
Subject key identifier: 3C:13:52:B0:51:E5:7A:22:65:D4:BF:42:F4:29:90:69:C5:34:67:89
Certificate issuer: /CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Certificate serial: 0277FE
Authority key identifier: 08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/PBNSsFHleiJl1L9C9CmQacU0Z4k.roa
Signing time: Tue 11 Jan 2022 19:08:43 +0000
ROA not before: Tue 11 Jan 2022 19:08:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13789
IP address blocks: 185.37.36.0/24 maxlen: 24
185.37.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161790 (0x277fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Validity
Not Before: Jan 11 19:08:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c1352b051e57a2265d4bf42f4299069c5346789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:d8:e2:75:db:1c:39:39:1f:93:63:13:c4:
8a:ad:65:b2:40:7b:2a:e4:38:5b:83:b8:a1:b1:09:
43:a3:31:42:69:ed:60:7b:e6:70:31:de:2e:90:a0:
7a:13:b2:1a:4c:20:76:77:6d:5f:46:70:95:aa:b8:
28:a0:a0:57:20:ee:12:36:62:ea:e0:c5:e4:00:1d:
a6:5b:26:18:e0:80:90:ec:2e:03:75:d6:93:e6:29:
22:7a:d3:d2:96:3f:c2:88:52:98:c9:67:68:43:8c:
91:ed:c6:43:5a:94:d7:81:53:d3:90:c9:db:65:64:
49:a1:e1:9c:8f:19:79:fe:79:cd:ce:db:c9:7c:6b:
1f:04:a4:a5:90:e0:a3:b4:0f:78:f7:8b:c3:4b:01:
42:76:4d:8e:c5:9c:dc:ce:ff:6a:c5:05:97:ed:51:
4c:ee:2e:cb:06:8f:e5:ba:38:cf:35:81:c0:33:06:
b5:50:dc:de:59:97:49:df:88:aa:d1:b4:c5:13:b2:
d4:71:e7:b0:52:7d:ee:74:7d:55:73:64:ee:e7:9f:
6e:5c:70:9d:01:b1:41:81:59:47:53:ff:87:fd:91:
ef:4b:6d:1d:e2:d1:c1:7c:0b:23:ca:48:64:a5:30:
41:25:46:88:a9:55:33:64:61:0e:a4:7c:7a:bd:ac:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:52:B0:51:E5:7A:22:65:D4:BF:42:F4:29:90:69:C5:34:67:89
X509v3 Authority Key Identifier:
keyid:08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/PBNSsFHleiJl1L9C9CmQacU0Z4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.36.0/23
Signature Algorithm: sha256WithRSAEncryption
51:6d:df:0d:02:37:1d:d5:ea:c4:a9:4b:75:07:e5:eb:96:a7:
77:9d:e6:3b:95:42:7e:9e:af:3d:a8:97:7f:d5:96:2c:fa:fc:
22:a6:53:e7:dc:6d:d4:ba:14:34:de:da:1d:d7:0c:72:9d:ff:
24:5a:8c:d9:65:e2:4c:66:c7:c2:b6:5d:92:c1:fe:cb:b2:69:
aa:af:7e:77:a4:5a:cc:0c:ef:dd:a8:f3:46:4d:79:7d:f3:2b:
f7:1e:80:e9:ad:2d:63:be:54:5f:32:59:11:71:e1:8b:e8:04:
78:40:a6:26:5d:60:db:9b:6e:bc:b3:7c:1e:a6:45:4a:ff:76:
4c:82:fe:d2:60:ac:2c:af:cf:55:17:fd:61:28:61:d1:db:15:
40:83:d8:29:83:32:58:9d:f8:31:e7:0b:a5:b5:c5:1e:9f:9b:
32:5e:41:d3:39:5d:24:85:80:ab:df:46:00:00:22:0b:47:ee:
b1:4d:68:92:35:c7:9e:90:f4:8a:1f:cd:c6:42:8a:57:94:1d:
c0:37:4c:24:f3:fd:69:64:e2:40:27:68:52:95:17:81:30:a9:
0b:a1:e9:b3:bb:f2:77:b8:cc:2c:90:c7:af:57:84:e6:98:4e:
a9:5a:9a:63:eb:8e:a7:38:bb:f7:ad:38:e2:a7:dd:b8:ee:9f:
8a:98:76:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:45 2023 by rpki-client on console-ams.rpki-client.org