Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/PPEl0_HRrgB6omPCfXKIFNkTe_Q.roa
File: PPEl0_HRrgB6omPCfXKIFNkTe_Q.roa (raw, json)
Hash identifier: 0Kg80PacTBXcpBhmJchE9SH+KCu6zhQzb9Yt30MGBnI=
Subject key identifier: 3C:F1:25:D3:F1:D1:AE:00:7A:A2:63:C2:7D:72:88:14:D9:13:7B:F4
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 0A910ADC
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/PPEl0_HRrgB6omPCfXKIFNkTe_Q.roa
Signing time: Thu 19 May 2022 09:31:17 +0000
ROA not before: Thu 19 May 2022 09:31:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31236
IP address blocks: 160.20.214.0/23 maxlen: 23
82.112.64.0/19 maxlen: 24
94.198.48.0/23 maxlen: 23
2a00:92c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177277660 (0xa910adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: May 19 09:31:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cf125d3f1d1ae007aa263c27d728814d9137bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:ad:d7:58:2c:ea:9a:47:05:9f:75:ec:fc:
f1:34:01:48:2c:ce:00:5d:19:12:bd:c2:2e:85:76:
14:b1:71:e6:72:86:b0:6b:31:31:05:b8:a4:8a:d8:
59:bb:5f:92:a9:05:01:24:ce:a8:b4:ba:c1:f1:17:
21:4d:31:a2:7b:56:4e:e5:a8:4e:bb:00:f3:ae:db:
76:53:a4:f6:f6:af:a5:21:f4:c3:e5:64:db:a8:d4:
2f:76:d7:7f:18:8e:9e:08:ba:79:da:11:a0:2c:a5:
58:82:09:be:9e:4f:55:c5:22:71:2f:dc:75:50:1b:
35:b0:69:f8:49:59:c0:0b:c0:f2:82:f7:6b:61:a3:
e3:90:13:3f:9e:4f:77:c0:53:21:a1:c9:ac:86:35:
89:13:6c:fb:4e:48:0c:a1:08:a6:db:ab:10:3f:0b:
1d:1c:8f:e6:c4:3d:cc:f8:ba:a1:35:00:92:0e:82:
25:5d:50:25:50:3c:2a:77:78:ac:d4:c9:83:e7:e3:
83:b8:f5:5c:54:92:37:79:7c:9f:f6:ce:6c:01:1e:
79:bf:2a:34:7f:35:68:4e:7a:3a:7b:3d:3d:7b:d3:
ec:5a:ad:99:f8:b8:91:05:91:7a:17:22:fb:95:3d:
66:fe:98:8f:cf:34:7f:88:06:f6:e2:f9:12:16:49:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F1:25:D3:F1:D1:AE:00:7A:A2:63:C2:7D:72:88:14:D9:13:7B:F4
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/PPEl0_HRrgB6omPCfXKIFNkTe_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.64.0/19
94.198.48.0/23
160.20.214.0/23
IPv6:
2a00:92c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:ff:d6:1a:b1:33:22:0b:13:48:56:5d:2d:a0:cd:b9:7b:08:
c7:34:8e:5f:48:dc:f5:24:ad:c4:53:ee:23:3a:1b:d0:42:81:
48:3d:2b:19:4e:cf:9c:2b:07:ec:ae:0b:65:34:81:f2:36:75:
75:7c:09:2d:bb:fb:e1:28:c9:70:e5:cc:36:a4:1f:68:3b:5c:
d6:5a:78:5d:ff:8f:04:e2:07:70:dd:6f:20:8b:f1:bd:9a:4b:
77:61:10:4a:13:99:7f:39:8f:26:a4:c8:0d:cd:ea:cb:b9:f1:
91:5d:bc:92:0d:b7:21:03:21:d3:13:79:dc:e6:0f:45:7e:87:
60:f1:1e:d2:a7:c3:81:2d:21:08:3d:07:6b:93:4b:d8:a7:e9:
aa:71:a2:f1:ef:7f:1a:f4:40:f9:15:51:b0:d3:a4:ba:4f:6a:
f6:77:87:e4:a0:2b:b1:b7:b3:e0:dd:cf:c7:e9:8c:05:c5:e3:
8c:0b:e5:4c:01:2f:1d:75:db:d8:d3:7d:90:1c:58:15:f3:68:
b0:04:a0:a3:d7:50:77:7f:57:ce:0f:10:bb:da:66:52:6b:05:
5e:c1:2c:4a:bf:ca:ec:1a:66:83:13:18:af:08:9d:81:a9:aa:
91:e8:13:75:b7:cc:cf:89:c6:95:5f:22:ba:d8:64:df:b5:a5:
35:7b:17:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:48 2023 by rpki-client on console-ams.rpki-client.org