Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/PmcQLaI31Y2SbGOsNn2rJ2RaHPg.roa
File: PmcQLaI31Y2SbGOsNn2rJ2RaHPg.roa (raw, json)
Hash identifier: Y98joFK//Ny4L4XpzNeo3XL8gzyzq8bnQ+BUPwNSJdw=
Subject key identifier: 3E:67:10:2D:A2:37:D5:8D:92:6C:63:AC:36:7D:AB:27:64:5A:1C:F8
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 18C57EB6
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/PmcQLaI31Y2SbGOsNn2rJ2RaHPg.roa
Signing time: Sat 01 Jan 2022 02:52:21 +0000
ROA not before: Sat 01 Jan 2022 02:52:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1759
IP address blocks: 193.143.8.0/21 maxlen: 24
193.143.240.0/21 maxlen: 24
91.195.246.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415596214 (0x18c57eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jan 1 02:52:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e67102da237d58d926c63ac367dab27645a1cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:d8:13:a5:e1:65:20:70:c0:e2:af:55:6c:
a2:db:69:0e:00:31:67:83:ff:69:dd:56:4e:a0:5b:
4a:8d:75:d6:62:ee:26:45:84:9b:54:88:91:ef:96:
3f:f8:d7:e7:64:36:df:c4:2e:f2:25:7b:4a:8b:b5:
1d:ee:61:9b:a1:c5:84:0f:e1:eb:c7:ab:fb:55:ad:
18:a6:c8:4e:95:54:3d:c9:db:11:c0:a5:25:53:53:
80:fd:44:0e:ba:87:b9:92:d2:44:61:10:3e:a4:c0:
8b:a1:47:ed:26:a5:12:26:0f:d3:49:22:48:48:bc:
01:27:fd:37:1a:c4:ec:85:2c:7a:c8:e1:aa:f3:45:
dd:d1:97:2c:a7:8e:f8:ab:5a:e6:09:a1:da:15:62:
9e:35:4c:ce:c8:71:54:9e:b7:01:84:1b:95:a6:34:
c3:bd:d2:70:c2:99:5b:95:58:9d:98:47:3a:81:57:
a9:6f:8f:c7:e4:19:17:f4:2e:b8:d9:74:2f:cb:15:
1f:07:a2:ab:a7:8a:14:e9:9a:7c:86:14:85:19:fd:
4f:fb:21:bc:66:17:9e:5b:ac:9a:3d:71:1c:d0:ce:
43:18:c5:54:bd:f6:a5:45:8e:1e:d3:48:10:5d:d3:
89:95:51:0b:2e:ae:5a:36:cd:6e:f1:85:de:7c:af:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:67:10:2D:A2:37:D5:8D:92:6C:63:AC:36:7D:AB:27:64:5A:1C:F8
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/PmcQLaI31Y2SbGOsNn2rJ2RaHPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.246.0/23
193.143.8.0/21
193.143.240.0/21
Signature Algorithm: sha256WithRSAEncryption
14:58:ad:b7:ef:3b:64:5d:4d:e4:1b:1e:93:c1:f1:46:5d:8e:
dc:1c:c7:f7:90:4d:22:37:c4:08:d8:d3:d7:3f:26:81:9f:5e:
33:fe:8b:73:12:1e:ee:47:e2:24:e6:06:25:10:f6:e7:cd:84:
43:f1:78:37:25:ed:9a:37:63:7c:51:f1:66:95:eb:33:33:2c:
01:cc:d7:ba:d0:bf:be:72:16:a2:30:d1:ad:38:00:31:31:ce:
e7:5e:b8:8d:df:2a:1a:14:f2:55:2b:cf:9b:fc:d7:3b:50:32:
a2:9b:ff:b5:5d:5b:be:20:56:c2:2d:10:fb:10:91:c3:8f:16:
63:37:10:dc:29:1e:00:3f:4c:ff:4e:b4:fc:a1:76:d6:38:d6:
fb:65:ab:1a:83:04:5a:8f:f3:2f:f1:9f:81:38:a9:af:67:4d:
94:23:b1:ad:cd:0d:1f:5e:82:1c:77:7c:e8:e0:ff:ac:67:6d:
3f:04:66:eb:d6:38:cc:b3:2d:4d:1e:8c:54:d8:59:97:32:4d:
0b:25:61:40:5d:2c:52:bb:c3:eb:19:83:58:7c:76:97:77:3f:
7d:df:fa:9d:8a:41:29:27:e3:4d:fb:a3:01:46:f9:9d:72:ec:
c7:d0:25:5a:15:cf:a5:76:e1:d1:0a:08:b5:1d:8a:4d:ae:31:
5f:0d:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:39 2024 by rpki-client on console-ams.rpki-client.org