Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/PNTrKKlYw1CxLLMW28eBVu7DQdk.roa
File: PNTrKKlYw1CxLLMW28eBVu7DQdk.roa (raw, json)
Hash identifier: 2dnAW3GoFbBtsaenTJM1fEKLt6RPNkUN4Q5UEI9bC8w=
Subject key identifier: 3C:D4:EB:28:A9:58:C3:50:B1:2C:B3:16:DB:C7:81:56:EE:C3:41:D9
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 015A4C
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/PNTrKKlYw1CxLLMW28eBVu7DQdk.roa
Signing time: Thu 12 May 2022 13:03:02 +0000
ROA not before: Thu 12 May 2022 13:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13065
IP address blocks: 185.9.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88652 (0x15a4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: May 12 13:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cd4eb28a958c350b12cb316dbc78156eec341d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:31:d0:a8:8d:40:ac:a1:95:f0:4b:4a:55:
91:f9:ff:24:b9:bc:92:3e:05:c2:78:1b:9b:34:6b:
33:b0:82:77:a5:7f:87:ac:7a:82:e7:83:64:f0:2e:
7e:74:ef:81:2f:93:22:28:84:b1:e3:e9:6a:0c:09:
1d:28:f2:5f:f9:14:2c:56:ed:62:43:6b:28:00:14:
d7:48:d8:12:ba:30:d7:f2:43:b9:92:b7:e8:49:07:
ba:08:f2:ec:25:ef:30:f3:a4:c7:57:12:5c:e6:1f:
a7:94:45:68:7e:e4:5d:15:45:15:52:00:99:5b:57:
62:54:f3:1d:26:f9:c7:4a:27:7e:09:a9:f9:31:12:
db:42:86:a8:0b:4e:1c:66:ba:67:63:8b:99:5e:a3:
b2:57:3d:55:e0:69:53:24:1d:e1:20:9e:b4:8c:56:
5b:bc:e0:ce:b4:f2:87:9a:3d:64:78:56:e3:57:0e:
eb:bd:5b:4a:6d:6f:65:8c:05:0f:1e:18:ff:f6:8b:
38:06:98:94:9d:a2:c0:f2:79:2f:5d:01:02:cd:6d:
57:db:df:4c:e6:85:cc:26:05:46:37:31:05:32:92:
97:3c:a9:9f:13:9d:ab:8f:51:7f:64:9c:14:9a:3e:
ea:9d:a8:d3:3c:5a:02:9d:02:de:aa:04:1f:e5:84:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D4:EB:28:A9:58:C3:50:B1:2C:B3:16:DB:C7:81:56:EE:C3:41:D9
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/PNTrKKlYw1CxLLMW28eBVu7DQdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.56.0/22
Signature Algorithm: sha256WithRSAEncryption
21:ad:b9:1c:df:6e:90:ca:a0:b1:09:f8:7f:1c:25:51:ff:3e:
c8:ee:35:47:75:23:67:58:9c:e2:fe:5d:62:2e:b7:28:cc:c5:
db:3a:d0:a0:cf:69:14:be:5c:29:64:a2:6f:02:4d:a1:b8:39:
01:13:8b:c4:a5:ba:20:ff:cf:8b:80:87:97:d7:ed:a8:df:25:
55:8a:47:d7:c5:48:d9:22:52:e8:4c:2d:b2:df:59:86:40:10:
a4:78:4e:2f:c7:12:22:7e:d4:6f:3a:a7:76:b8:1f:1b:3e:95:
4e:f5:87:2a:fb:cf:4b:a0:40:78:53:7a:e7:1d:5d:16:15:79:
c6:73:ec:df:ae:91:25:8e:6b:63:b3:b1:9b:24:a2:d4:86:e6:
a1:0c:a5:82:38:5f:45:f9:cd:f2:06:08:4d:3c:2e:95:45:f5:
98:cf:98:98:9c:2f:79:36:61:07:83:be:12:c9:ff:f5:47:38:
fc:56:b5:99:da:f4:76:65:7a:97:0f:96:f1:9a:1d:25:eb:fc:
85:01:b4:de:79:50:80:42:96:fa:5a:92:8d:0f:14:32:ea:02:
a2:f8:0c:af:fa:90:28:88:53:a2:ec:45:3a:77:dc:93:7c:e2:
0c:8b:af:69:66:e0:ed:0b:65:1a:25:c1:32:f9:12:da:cd:f7:
0d:4a:f1:1b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAVpMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk2
ZTgyYWI2NDhiOGIzZjg4NTc1NjljMzlhZjk1NDRhZGZjMTdjMDEwHhcNMjIwNTEy
MTMwMzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzY2Q0ZWIyOGE5NThj
MzUwYjEyY2IzMTZkYmM3ODE1NmVlYzM0MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuzgx0KiNQKyhlfBLSlWR+f8kubySPgXCeBubNGszsIJ3pX+H
rHqC54Nk8C5+dO+BL5MiKISx4+lqDAkdKPJf+RQsVu1iQ2soABTXSNgSujDX8kO5
krfoSQe6CPLsJe8w86THVxJc5h+nlEVofuRdFUUVUgCZW1diVPMdJvnHSid+Can5
MRLbQoaoC04cZrpnY4uZXqOyVz1V4GlTJB3hIJ60jFZbvODOtPKHmj1keFbjVw7r
vVtKbW9ljAUPHhj/9os4BpiUnaLA8nkvXQECzW1X299M5oXMJgVGNzEFMpKXPKmf
E52rj1F/ZJwUmj7qnajTPFoCnQLeqgQf5YR7PQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFDzU6yipWMNQsSyzFtvHgVbuw0HZMB8GA1UdIwQYMBaAFJboKrZIuLP4hXVp
w5r5VErfwXwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMtMTkzYWQ1Yzc5YjgzLzEv
UE5UcktLbFl3MUN4TExNVzI4ZUJWdTdEUWRrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8y
NDI2ZjEtOGYyYS00OWZmLTg2NDMtMTkzYWQ1Yzc5YjgzLzEvbHVncXRraTRzX2lG
ZFduRG12bFVTdF9CZkFFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQk4MA0GCSqGSIb3DQEBCwUAA4IB
AQAhrbkc326QyqCxCfh/HCVR/z7I7jVHdSNnWJzi/l1iLrcozMXbOtCgz2kUvlwp
ZKJvAk2huDkBE4vEpbog/8+LgIeX1+2o3yVVikfXxUjZIlLoTC2y31mGQBCkeE4v
xxIiftRvOqd2uB8bPpVO9Ycq+89LoEB4U3rnHV0WFXnGc+zfrpEljmtjs7GbJKLU
huahDKWCOF9F+c3yBghNPC6VRfWYz5iYnC95NmEHg74Syf/1Rzj8VrWZ2vR2ZXqX
D5bxmh0l6/yFAbTeeVCAQpb6WpKNDxQy6gKi+Ayv+pAoiFOi7EU6d9yTfOIMi69p
ZuDtC2UaJcEy+RLazfcNSvEb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:08 2024 by rpki-client on console-ams.rpki-client.org