Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/PSLPOT1ao21V1bijIJ4UVm48cQc.roa
File: PSLPOT1ao21V1bijIJ4UVm48cQc.roa (raw, json)
Hash identifier: ZcmCUVPXiuwMNKWVIGAZFxoY8cpT4dKAVSDoR45g1rc=
Subject key identifier: 3D:22:CF:39:3D:5A:A3:6D:55:D5:B8:A3:20:9E:14:56:6E:3C:71:07
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0298E6D2
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/PSLPOT1ao21V1bijIJ4UVm48cQc.roa
Signing time: Mon 03 Jan 2022 17:40:30 +0000
ROA not before: Mon 03 Jan 2022 17:40:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 86.107.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43574994 (0x298e6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 3 17:40:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d22cf393d5aa36d55d5b8a3209e14566e3c7107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:74:66:65:77:4c:5b:97:2e:05:a7:a4:96:
a6:4d:29:7f:68:7b:06:c3:44:0e:65:6a:14:d1:d8:
12:01:7e:bb:7d:9c:51:8e:f3:11:e7:43:4b:97:55:
e2:d5:f7:84:d4:46:e4:79:a1:0c:e9:f4:3e:54:62:
af:57:df:02:ab:7b:44:82:f8:45:70:9e:1f:7b:36:
9a:6d:19:b7:91:b0:2c:b8:c2:98:88:e6:3c:f5:58:
bf:a2:0e:5d:e9:75:06:a7:0c:20:6f:73:86:eb:9f:
cb:a6:c3:ca:6b:17:c9:14:4f:b2:7f:38:2f:f2:65:
2d:31:8c:22:c2:7a:e7:40:b4:fd:04:8c:2d:ce:62:
d0:42:c7:39:6f:b1:8d:69:a7:58:61:60:20:a9:b7:
a2:6e:de:5c:d7:42:79:79:e6:05:b9:78:92:db:c6:
73:36:b5:76:e6:53:dd:c4:ce:3a:3f:45:0b:06:58:
83:be:d2:a1:8f:50:21:bb:6a:2e:c1:ab:16:44:77:
31:de:37:1f:10:08:27:2a:d5:e4:fb:1c:ca:49:c7:
07:3e:12:ea:28:db:68:20:b7:ac:ac:60:16:29:ed:
8e:9a:77:05:ef:f9:bc:78:b1:ac:58:bf:e6:c5:46:
d3:91:75:8a:b7:bf:a4:c2:6c:29:ab:e5:06:7a:c5:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:CF:39:3D:5A:A3:6D:55:D5:B8:A3:20:9E:14:56:6E:3C:71:07
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/PSLPOT1ao21V1bijIJ4UVm48cQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.108.0/23
Signature Algorithm: sha256WithRSAEncryption
74:b4:43:02:41:f3:2b:57:80:7c:fc:45:e1:95:05:1b:2c:ec:
13:bd:42:48:7d:0c:c1:47:46:1a:8d:1a:f4:2b:b8:0d:6d:25:
0f:16:be:34:22:ca:ba:25:44:f9:34:d6:36:4f:8b:58:b5:77:
b4:ce:b2:74:fd:7a:c9:9b:73:ab:ed:44:98:dd:a0:ee:87:e3:
23:18:95:46:70:14:89:2a:50:58:c6:f2:0b:01:90:ac:a7:80:
38:0c:52:55:5d:96:d2:51:b9:da:cd:23:3a:b7:d2:e0:a5:46:
ce:86:2d:57:cd:86:0f:b0:af:9c:fa:08:3a:6f:f0:34:1f:99:
1b:71:df:ac:6a:dc:ac:ad:88:c3:41:2e:28:70:ca:4f:09:f6:
77:ae:be:21:c5:74:06:c8:f8:93:31:13:77:00:d2:4c:4f:9a:
e4:7c:c0:7a:34:40:46:c1:97:1e:59:77:53:84:a3:f6:30:a3:
4a:3b:2b:83:95:30:1d:56:1c:70:45:be:81:fb:1a:62:1b:f7:
40:b3:54:1d:04:80:8f:4b:b3:38:2e:64:11:d4:bd:aa:a2:cb:
9b:26:6f:13:f3:74:e7:b0:51:d8:af:df:9e:b1:af:05:6b:4b:
7c:49:db:82:e5:2a:95:4f:91:ae:e7:70:1c:f6:cd:c1:88:14:
33:e3:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org