Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/puGst1bhyxs716pAe-XiuwcONHA.roa
File: puGst1bhyxs716pAe-XiuwcONHA.roa (raw, json)
Hash identifier: 2HMLHuX0veJoET+0xLGWez42BVZHdA57400LOAVkQNE=
Subject key identifier: A6:E1:AC:B7:56:E1:CB:1B:3B:D7:AA:40:7B:E5:E2:BB:07:0E:34:70
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182EE5940819414426752245F4FD499274B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/puGst1bhyxs716pAe-XiuwcONHA.roa
Signing time: Tue 30 Aug 2022 10:43:22 +0000
ROA not before: Tue 30 Aug 2022 10:43:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210122
IP address blocks: 83.137.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:59:40:81:94:14:42:67:52:24:5f:4f:d4:99:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 30 10:43:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6e1acb756e1cb1b3bd7aa407be5e2bb070e3470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4f:58:0d:b8:9b:41:32:f8:ea:79:08:40:b5:
22:22:2b:17:b1:d8:70:bb:72:ff:d8:19:a3:3d:d1:
c9:60:cf:34:68:43:9d:40:0a:26:3d:fa:f3:29:85:
09:93:47:ef:37:4b:50:37:b2:71:d4:ac:ec:7e:23:
91:37:b1:ea:a1:54:08:d2:de:98:19:ce:7c:c8:68:
4e:a5:45:f2:d8:cb:30:72:9a:72:97:38:2e:7b:48:
cb:a3:98:2f:4d:63:ef:3b:43:05:1e:97:f7:d9:10:
1c:8f:31:c4:bc:5d:a5:f4:65:e6:90:c4:da:9b:b5:
8c:8e:55:3c:10:07:47:2a:40:5c:88:c9:3c:7e:7f:
d9:20:95:77:2d:0d:72:6b:96:f0:ac:6c:9b:5c:f1:
06:af:5b:12:08:c6:3e:b7:ce:03:8e:5c:19:f2:55:
6f:93:0f:c8:45:a3:e6:1e:dc:db:5a:46:33:2e:77:
16:cb:c1:ce:20:28:92:50:af:3c:bf:25:59:55:0c:
95:49:3f:1f:4b:30:36:c2:97:dd:01:76:c6:d0:5f:
26:b0:3a:7e:fe:f5:5e:2f:38:a9:e4:9e:22:ac:3b:
f7:55:d3:a3:83:81:1a:e6:c9:eb:16:c2:8d:f7:6c:
74:02:92:0f:a1:59:0a:35:94:f2:0b:f7:af:6d:58:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E1:AC:B7:56:E1:CB:1B:3B:D7:AA:40:7B:E5:E2:BB:07:0E:34:70
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/puGst1bhyxs716pAe-XiuwcONHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6c:73:1c:6d:50:f1:52:11:26:dc:0b:6c:65:97:79:89:83:
7f:54:47:7b:b0:e2:d7:87:f2:8a:5a:d8:93:17:f9:20:81:9e:
38:b0:49:31:73:58:41:5f:be:4a:5f:a3:6d:25:a9:c5:90:c5:
c8:9b:68:9d:64:d9:02:77:2e:91:5e:64:5f:b1:b7:7d:b3:ac:
6f:d5:28:f1:ae:32:85:31:72:f2:f1:10:b3:2b:d7:8c:93:29:
c0:bb:6a:f3:f6:4a:4d:e1:2f:d5:69:dc:c9:05:f5:21:d2:ac:
e8:73:47:13:1e:69:8a:53:9d:c7:8b:09:49:8e:8a:a6:7a:5c:
35:80:50:d5:96:da:a8:3e:d9:2c:bf:61:83:54:f9:3e:97:2e:
dd:88:54:54:8d:71:6f:89:bf:b4:19:be:41:6f:7b:49:50:7d:
5a:fb:1b:01:ea:29:68:1b:3a:96:96:0a:2e:17:34:5f:32:19:
00:e6:cb:6d:06:da:7b:f6:52:76:64:bd:0f:26:6a:e7:1c:82:
99:ee:7d:10:bb:dd:98:ea:9b:87:70:40:c7:6d:cd:ac:3a:7e:
42:ef:38:4e:4e:92:87:23:56:ec:a4:6d:26:18:fc:75:05:bc:
e7:25:40:f0:50:a6:88:f7:3c:e2:fe:a5:e7:25:55:a4:9f:8a:
25:20:22:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org