Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/PNFdMMpgmeJ0qblIE9l5eDOEQjw.roa
File: PNFdMMpgmeJ0qblIE9l5eDOEQjw.roa (raw, json)
Hash identifier: 7dv/Dhg4aJZ+YnmyRCrxTKSijHaLFuMaQy4LAKaFKwE=
Subject key identifier: 3C:D1:5D:30:CA:60:99:E2:74:A9:B9:48:13:D9:79:78:33:84:42:3C
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 03276050
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/PNFdMMpgmeJ0qblIE9l5eDOEQjw.roa
Signing time: Tue 21 Jun 2022 10:52:44 +0000
ROA not before: Tue 21 Jun 2022 10:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47285
IP address blocks: 185.105.236.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
45.139.8.0/22 maxlen: 22
2a12:2600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52912208 (0x3276050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jun 21 10:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cd15d30ca6099e274a9b94813d979783384423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:73:ef:3c:7e:bb:d2:95:bd:ce:62:fa:19:
78:73:66:2a:7c:cd:4c:32:c3:4b:f1:98:13:73:67:
2c:a7:ff:e4:32:be:a9:5e:42:18:aa:55:50:32:07:
28:ec:01:1e:ad:cb:16:2b:bc:d1:bc:68:42:76:19:
97:0f:21:f1:00:97:6f:63:d8:3f:c3:07:82:0b:45:
2f:db:bc:20:5b:0f:60:08:8d:74:19:34:3f:5a:64:
22:83:7f:e3:58:0e:1d:c0:77:91:90:ee:e4:2d:4c:
ca:23:78:56:46:cd:68:e4:e7:24:29:9c:e8:13:1a:
be:77:6a:41:8c:2e:ae:b4:1b:cd:4b:a9:3b:06:f1:
9c:3c:d9:c5:58:c7:aa:e8:c7:b5:d2:6e:71:f5:64:
82:23:a6:93:f3:03:bd:b0:b7:49:df:eb:2d:a1:01:
c2:8d:df:77:3a:d9:b7:78:32:f7:d5:b9:38:aa:fb:
12:5c:4c:ad:59:12:f2:b2:b6:b7:bf:5b:23:5e:f0:
a0:e8:2c:97:cc:08:af:59:fa:3f:b0:07:39:2d:bb:
1f:9d:93:4f:77:26:0d:49:dd:26:44:80:f0:a4:b8:
01:85:3a:a8:8b:42:e0:62:6f:0c:79:ba:8f:fc:12:
f2:3f:87:9b:01:82:38:59:62:6a:14:cf:c0:75:1b:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D1:5D:30:CA:60:99:E2:74:A9:B9:48:13:D9:79:78:33:84:42:3C
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/PNFdMMpgmeJ0qblIE9l5eDOEQjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/22
185.105.236.0/24
185.105.238.0/24
IPv6:
2a12:2600::/29
Signature Algorithm: sha256WithRSAEncryption
31:10:46:49:96:e0:08:0a:e8:d3:41:31:f6:88:0d:6f:00:c3:
93:07:ee:5f:d3:f1:63:92:09:eb:b0:27:be:20:ad:18:d3:61:
fa:4e:9e:0a:5b:d6:22:2d:0a:ed:4a:81:d9:b1:85:64:3a:19:
85:0c:cb:24:a6:ea:a2:f9:38:b9:92:17:96:5c:ad:78:da:42:
a1:b0:9e:34:a0:81:59:1b:8d:fe:bc:0c:18:19:93:e6:bc:15:
85:24:83:6b:b3:ab:69:cb:c6:88:d6:25:63:08:49:d7:36:3a:
65:34:5f:02:5c:84:aa:20:b2:90:3f:7c:83:3c:4c:9d:44:bf:
7b:33:3e:77:e9:bb:a9:13:b6:4c:cc:f2:cf:d0:c7:52:98:66:
c7:3a:3d:96:62:cb:44:6f:69:cf:63:aa:df:fe:a6:36:85:42:
9a:29:0e:50:04:c8:f9:4f:f1:5b:f2:37:6b:a4:b3:9d:a8:63:
97:32:61:fc:5f:d8:25:37:cb:f3:ca:2e:d9:e3:0d:ec:61:65:
07:19:b0:d7:39:a1:f9:96:cf:b4:d9:3b:b5:9a:34:10:17:e4:
e1:75:47:2f:43:02:00:fd:08:75:83:0c:54:2c:84:f9:50:98:
6b:06:6c:d8:85:4c:c6:d8:cb:e7:f3:2a:d5:d6:7a:d8:ea:20:
3d:4a:74:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org