Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/PkVlPwMs2KfIW0y-UmomXkrNFkU.roa
File: PkVlPwMs2KfIW0y-UmomXkrNFkU.roa (raw, json)
Hash identifier: DPl+YKDrwnPkP/MFMxCgoDm382LZk0dUTOj8e4BYAq8=
Subject key identifier: 3E:45:65:3F:03:2C:D8:A7:C8:5B:4C:BE:52:6A:26:5E:4A:CD:16:45
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 020FD1BC
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/PkVlPwMs2KfIW0y-UmomXkrNFkU.roa
Signing time: Sat 01 Jan 2022 10:01:17 +0000
ROA not before: Sat 01 Jan 2022 10:01:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209295
IP address blocks: 193.228.229.0/24 maxlen: 24
2001:678:ea8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34591164 (0x20fd1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Jan 1 10:01:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e45653f032cd8a7c85b4cbe526a265e4acd1645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:85:6c:39:66:97:20:ff:df:33:19:36:c5:
09:a1:10:90:87:be:de:99:88:0d:e4:88:f1:78:d1:
08:59:57:6d:84:86:86:de:07:b2:a7:a6:fa:96:3d:
95:e2:3d:39:fa:77:8f:52:33:e8:f0:02:05:01:af:
e8:35:39:dc:b4:61:22:ba:c7:a6:85:92:65:de:fc:
c5:4b:71:a4:cd:2d:88:f0:79:6a:d8:2e:d0:d9:6d:
54:ae:3a:fd:05:08:de:55:f1:c3:23:ff:0c:66:a3:
8e:73:61:86:1d:7b:48:90:91:57:68:5f:38:94:ad:
9b:ed:13:39:92:61:67:4a:58:71:c5:5d:a8:bb:5c:
57:89:94:b6:d0:21:0c:3f:cd:d4:77:4b:1b:3e:58:
00:9d:ab:8a:3c:4e:48:a8:f2:b8:33:d7:c3:c1:c5:
ec:ff:7e:78:32:fd:3f:cd:aa:32:69:f2:8f:25:4f:
f9:bc:07:54:cc:e3:ae:66:e1:5a:5d:1c:30:bd:5a:
22:b6:a8:ab:1e:dd:06:dc:8a:67:68:a6:d7:f6:11:
45:93:f4:60:b8:75:77:6b:b3:52:a9:27:9d:a4:c0:
56:72:58:01:00:4b:8f:17:43:39:69:e4:d2:59:6c:
e8:bf:7e:a9:0d:e8:05:47:2e:37:15:a0:57:bc:ac:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:45:65:3F:03:2C:D8:A7:C8:5B:4C:BE:52:6A:26:5E:4A:CD:16:45
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/PkVlPwMs2KfIW0y-UmomXkrNFkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.229.0/24
IPv6:
2001:678:ea8::/48
Signature Algorithm: sha256WithRSAEncryption
49:66:8f:bd:76:e4:11:1d:b2:4e:6e:57:a9:1c:eb:bc:85:e4:
3f:f9:32:4b:66:8f:2a:a6:83:73:8f:26:60:7e:75:3f:2d:05:
ec:59:68:64:17:b6:a8:35:19:aa:4d:de:a1:26:76:cd:2e:1a:
18:77:70:38:c0:ad:13:b1:c6:65:be:25:b9:2a:5d:5f:c9:f8:
9c:e9:1f:b7:80:df:95:8f:0b:16:23:1c:6d:39:7d:c9:26:31:
5a:31:1e:21:70:0b:77:52:1d:81:13:95:4c:38:e8:97:8f:29:
b5:8b:be:a4:7d:61:48:5b:30:a3:e9:43:0a:68:94:48:51:67:
11:7d:78:dc:92:12:98:fa:15:60:4d:74:68:e7:f8:92:bf:0f:
b3:a3:73:0a:ab:c3:70:6d:77:3c:b4:c8:14:58:10:07:58:f8:
43:47:68:9a:32:61:06:71:bc:4d:51:1b:da:73:a9:33:56:ae:
ad:3c:00:f3:05:3c:ca:9a:9d:ca:1a:a8:da:06:f3:6d:a2:47:
08:f4:c2:88:8c:a2:b0:f4:1c:39:c8:23:85:28:2e:9c:6c:e0:
47:13:4e:45:b2:40:c1:da:9e:2a:f5:86:40:89:80:ce:aa:19:
b1:a8:37:11:d4:87:73:46:47:f3:4f:bd:12:5e:51:ed:72:54:
bd:fb:f1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:18 2024 by rpki-client on console-fra.rpki-client.org