Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/PJMa2IVKvUSAMqAOt5SCTs4RiwU.roa
File: PJMa2IVKvUSAMqAOt5SCTs4RiwU.roa (raw, json)
Hash identifier: fMKTRpj64u/tUk9L1m59sD5NGUyAxFVQdx01/ClgvgU=
Subject key identifier: 3C:93:1A:D8:85:4A:BD:44:80:32:A0:0E:B7:94:82:4E:CE:11:8B:05
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 032910B9
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/PJMa2IVKvUSAMqAOt5SCTs4RiwU.roa
Signing time: Sat 01 Jan 2022 11:55:15 +0000
ROA not before: Sat 01 Jan 2022 11:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.93.251.0/24 maxlen: 24
185.93.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53022905 (0x32910b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jan 1 11:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c931ad8854abd448032a00eb794824ece118b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:46:d3:4e:59:17:fd:26:f6:48:c6:22:e5:
4d:2d:10:3a:6f:5b:05:a9:3b:77:9f:5b:ae:3e:50:
a8:fd:e3:21:ea:6d:b4:40:19:1e:c1:c5:8a:5f:87:
f8:a7:20:10:e5:f1:b5:bb:13:ae:a5:4c:c7:8f:c2:
55:79:73:f6:5a:5a:38:e6:4d:e3:4f:6c:69:5d:a0:
d1:93:81:d5:99:9a:25:95:cd:fc:91:38:3a:23:26:
06:18:18:15:6a:4b:4b:82:9c:45:41:39:10:2a:30:
5a:19:2e:34:c6:0d:e1:69:0f:a0:e7:23:c0:87:8a:
c2:76:99:5d:b4:6f:fb:11:86:ee:5f:63:77:50:1d:
e2:83:5b:70:4a:39:26:40:47:66:e2:58:d1:2f:71:
aa:fd:7a:de:a1:e6:05:b6:a9:c3:6a:25:61:fd:68:
d9:e8:95:ad:70:08:f8:dd:11:a8:c4:75:d1:c7:2c:
4c:62:6f:d7:15:f2:11:35:8d:6a:60:05:dc:7c:bf:
cf:94:58:e5:22:72:fc:c7:f7:48:f8:fa:9e:7c:a9:
c9:f8:e5:21:b8:49:1f:db:74:10:96:ac:7d:39:d9:
41:ff:5a:df:2d:8c:96:89:cb:fb:ec:e8:9e:e3:97:
d7:75:d0:fc:e1:13:3c:76:85:42:3b:a0:53:2c:1e:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:93:1A:D8:85:4A:BD:44:80:32:A0:0E:B7:94:82:4E:CE:11:8B:05
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/PJMa2IVKvUSAMqAOt5SCTs4RiwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.250.0/23
Signature Algorithm: sha256WithRSAEncryption
02:d4:7a:5b:0c:84:1a:4d:1c:d4:5a:ad:35:08:70:98:4d:8d:
01:33:2f:b8:5c:0d:c7:39:20:ad:a8:d9:c8:75:d2:9e:ca:89:
e1:cb:d8:de:e1:a8:74:77:fd:25:fc:81:e6:c5:bc:64:c7:1b:
00:94:1a:b8:42:b0:75:41:3e:7e:f7:f0:cf:86:7c:66:4d:98:
34:c7:d0:06:3a:ea:e0:46:86:75:70:12:91:40:a9:91:d2:46:
ba:83:61:62:8a:dc:d5:ac:13:0f:2d:69:6f:17:bb:03:ab:7a:
80:ec:b0:e7:94:ff:fa:c3:d2:a7:7b:f7:c1:d4:e4:96:3b:36:
87:83:1b:ff:8a:c6:7f:ec:ac:e3:09:c3:ce:d4:e9:41:f4:3a:
dc:ee:fe:44:43:bd:13:e0:57:14:cc:33:6e:58:6d:d7:c5:9f:
56:7e:b1:11:18:0f:1c:2d:21:9a:f6:55:8f:11:5d:b1:a7:da:
72:db:fe:5a:cd:25:62:5e:7c:5e:87:3d:68:68:9f:b2:dc:e2:
61:1c:23:3c:4e:44:5b:b6:fc:59:70:d3:10:41:47:b7:3e:91:
60:9c:96:72:cd:96:a1:4f:fc:34:58:4d:0e:9e:4c:09:6a:0a:
2f:ff:76:37:1c:4e:09:35:f6:11:f3:57:83:52:09:c9:ca:70:
9e:ce:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-fra.rpki-client.org