Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/PGbo7DBKkgQZeQXxlu0cKEk7Fpc.roa
File: PGbo7DBKkgQZeQXxlu0cKEk7Fpc.roa (raw, json)
Hash identifier: 266Fh3+PGW3PXkpv8X5szv7+ZBmpY1JZTakW2x1Zdkc=
Subject key identifier: 3C:66:E8:EC:30:4A:92:04:19:79:05:F1:96:ED:1C:28:49:3B:16:97
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 033D8C01
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/PGbo7DBKkgQZeQXxlu0cKEk7Fpc.roa
Signing time: Thu 30 Jun 2022 06:37:04 +0000
ROA not before: Thu 30 Jun 2022 06:37:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47285
IP address blocks: 185.105.236.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
45.139.8.0/24 maxlen: 24
45.139.9.0/24 maxlen: 24
2a12:2600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54365185 (0x33d8c01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jun 30 06:37:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c66e8ec304a9204197905f196ed1c28493b1697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:f3:36:56:93:58:37:65:e2:1b:a7:71:7c:
28:9c:35:d2:e5:12:cf:34:a9:8e:64:ec:9e:76:02:
01:01:b1:94:b7:ee:4e:e7:63:36:6f:ae:1f:42:3a:
8d:ae:c6:89:53:c6:47:68:dc:6a:38:c9:6a:42:b9:
5d:48:01:a0:39:b5:80:a9:ac:ce:25:92:cf:2a:4f:
7b:1d:41:60:6f:43:96:30:f2:8e:fc:a1:e1:7f:9e:
35:f9:80:4a:61:56:6c:b0:fe:c0:a7:86:df:5d:a8:
14:f9:dd:8a:71:fb:00:cd:c9:fb:4b:80:ab:fc:bf:
d8:50:b0:eb:32:4f:02:84:d6:0c:d2:13:5c:28:e8:
38:30:fe:d0:0e:fa:b9:f8:05:8a:9f:3f:86:e8:40:
1b:c1:62:ee:a3:3d:38:59:e1:22:59:38:e4:76:49:
db:4c:ae:09:10:6b:f0:fd:01:40:9a:0b:ec:0c:ec:
3a:78:33:58:88:db:73:ee:89:fa:fd:06:04:80:e6:
72:49:36:7e:be:4f:27:7e:ba:85:62:99:58:19:1a:
56:f7:86:e0:76:68:d6:08:47:92:a6:cb:7f:da:0b:
5e:4a:8b:0b:e5:2a:6f:e0:02:f1:9e:9d:5b:aa:17:
93:fc:48:2e:4c:f6:ec:0e:eb:d4:db:73:bd:65:c1:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:E8:EC:30:4A:92:04:19:79:05:F1:96:ED:1C:28:49:3B:16:97
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/PGbo7DBKkgQZeQXxlu0cKEk7Fpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/23
185.105.236.0/24
185.105.238.0/24
IPv6:
2a12:2600::/29
Signature Algorithm: sha256WithRSAEncryption
7c:31:52:e1:e1:28:29:97:66:81:b6:6e:29:23:6c:3b:43:c8:
42:5a:5d:c1:cc:40:ab:32:8d:f4:27:47:ba:bc:3c:77:7f:19:
be:78:09:c1:0b:42:9d:74:9c:36:97:a3:ce:bb:b0:44:cf:fc:
12:19:a4:a3:f8:e2:0c:5e:14:b7:05:a7:41:6e:c1:bd:77:1c:
6e:43:43:0e:5b:49:5f:92:d6:37:5f:fc:f0:67:26:af:99:94:
17:9e:c8:3a:96:e1:50:58:2f:b3:a5:7e:2f:6f:9a:84:2b:99:
71:a2:f8:93:46:88:c3:e1:6d:ce:ac:41:c5:cd:22:46:9c:cc:
d6:0f:89:e1:5c:e6:a5:c2:92:e7:95:a4:57:ad:60:68:d2:df:
b1:27:5a:96:58:9d:4e:7c:46:2a:bd:f9:9b:9f:19:8a:05:55:
19:fe:a2:bd:a5:74:bd:37:c7:52:8b:1b:a9:59:fe:5c:04:91:
9e:2d:f9:3d:aa:a7:65:f0:13:08:74:b6:d1:42:55:8e:31:67:
91:7e:f2:cb:d7:a0:ba:e2:5c:5b:cd:cf:ce:03:e7:4d:53:cc:
42:90:c7:1f:91:8f:12:84:0a:44:5e:82:51:84:1c:21:d3:ba:
5d:0e:0f:54:5e:c0:01:2e:17:db:ed:55:c0:8e:5b:54:4b:ef:
41:cd:2e:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org