Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/PYOwHqO3PsCeovuHF8GlDrGMjCQ.roa
File: PYOwHqO3PsCeovuHF8GlDrGMjCQ.roa (raw, json)
Hash identifier: xs/jFcHniwCdIPExzmwj8gc2iGMtmPMAOpCrJ9tOj5o=
Subject key identifier: 3D:83:B0:1E:A3:B7:3E:C0:9E:A2:FB:87:17:C1:A5:0E:B1:8C:8C:24
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 19AEF518
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/PYOwHqO3PsCeovuHF8GlDrGMjCQ.roa
Signing time: Tue 12 Apr 2022 08:43:05 +0000
ROA not before: Tue 12 Apr 2022 08:43:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 193.187.155.0/24 maxlen: 24
193.187.154.0/24 maxlen: 24
193.187.153.0/24 maxlen: 24
45.12.232.0/24 maxlen: 32
45.14.46.0/24 maxlen: 32
2.59.174.0/24 maxlen: 32
213.232.104.0/24 maxlen: 24
193.160.212.0/24 maxlen: 24
92.119.150.0/24 maxlen: 32
5.181.148.0/23 maxlen: 32
91.188.203.0/24 maxlen: 32
185.226.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430896408 (0x19aef518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 12 08:43:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d83b01ea3b73ec09ea2fb8717c1a50eb18c8c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:39:d8:66:46:4c:d5:2a:c3:e8:11:5f:3c:
34:0c:a2:d5:d6:3e:cb:b7:dc:14:ab:35:42:4b:8e:
ea:ea:05:81:89:b8:dc:8e:f7:57:75:32:48:8f:bb:
66:65:6e:b5:25:f9:a5:e0:2b:ca:87:33:47:f7:b6:
04:3d:49:58:e0:76:bd:a8:f4:9f:41:d2:d2:bc:d2:
02:d6:98:93:7e:cb:59:d7:d1:48:c0:c8:67:59:25:
06:25:2b:b0:31:6f:20:ed:7d:4c:00:b6:a7:7f:cd:
f3:1e:dc:5c:24:2c:63:d5:e5:4e:68:63:be:66:f9:
f9:12:96:aa:5c:9b:48:2d:da:61:c3:18:32:de:c5:
2f:08:85:e3:b2:20:20:2f:65:f9:52:20:97:7f:2b:
3f:cc:58:fa:84:38:f8:86:70:58:48:e8:31:79:fd:
49:03:7a:55:34:c4:27:7c:28:66:f8:6d:2a:db:84:
63:56:3b:78:40:99:ff:47:81:5b:de:e8:8a:fe:4f:
5d:0e:a5:c1:b1:cd:ec:18:83:2d:02:23:3a:d6:6a:
bd:16:43:8f:d0:10:d4:5f:71:61:98:ac:7f:f0:98:
2f:b7:22:66:79:51:08:85:ec:d2:db:29:d8:61:b0:
cc:2b:c9:e9:64:a7:ee:c5:9d:ba:77:9b:21:e1:ea:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:83:B0:1E:A3:B7:3E:C0:9E:A2:FB:87:17:C1:A5:0E:B1:8C:8C:24
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/PYOwHqO3PsCeovuHF8GlDrGMjCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.174.0/24
5.181.148.0/23
45.12.232.0/24
45.14.46.0/24
91.188.203.0/24
92.119.150.0/24
185.226.75.0/24
193.160.212.0/24
193.187.153.0-193.187.155.255
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:42:b1:52:57:e7:62:35:a7:12:71:b9:c7:2c:75:8a:d9:0c:
ff:54:21:5f:01:3e:e5:a1:fd:b4:0b:e8:3f:74:db:2b:ea:82:
e7:2d:17:62:92:89:dc:e4:7f:b6:68:08:97:0e:59:d7:e9:4c:
9c:b2:56:f7:40:4c:a3:41:74:ac:dc:26:a9:ae:e9:13:ea:57:
36:8b:ed:af:ab:cd:33:b4:69:22:03:67:e3:27:a8:63:91:13:
b2:c2:0d:6d:14:bf:e7:2b:1f:91:e0:cc:e6:a3:34:be:6d:7e:
bf:01:7f:2c:67:90:6c:02:38:24:74:8a:b3:de:47:2d:88:d0:
44:86:c0:46:84:98:17:45:f3:bc:27:a2:ef:10:30:5a:eb:34:
40:c7:63:a6:51:0d:35:3a:05:b9:17:2e:bb:d2:da:3d:11:38:
a9:93:78:8b:25:75:c0:6d:70:66:f9:e2:c2:0d:7e:99:da:c9:
0e:05:93:4f:fe:5f:c3:f3:5f:ed:3c:02:ea:be:fa:fc:82:4b:
32:c9:5c:64:50:12:3b:60:1f:6b:dc:b3:a3:a3:90:8d:7b:68:
ed:77:cf:ed:ec:1b:bb:7b:24:99:cd:7d:ef:53:a7:ee:0d:93:
62:37:24:2d:c2:1f:2a:be:cb:7e:70:7c:17:5e:02:36:19:29:
a8:aa:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org