Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/P0wGHaI2kozya0wh2AQNW70jj-I.roa
File: P0wGHaI2kozya0wh2AQNW70jj-I.roa (raw, json)
Hash identifier: P9ETvvQ6VZ5SW2JDaC/kSv6WVjvPqcYznGewo7Ga2nM=
Subject key identifier: 3F:4C:06:1D:A2:36:92:8C:F2:6B:4C:21:D8:04:0D:5B:BD:23:8F:E2
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 04CB95DF
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/P0wGHaI2kozya0wh2AQNW70jj-I.roa
Signing time: Sat 01 Jan 2022 01:59:47 +0000
ROA not before: Sat 01 Jan 2022 01:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47674
IP address blocks: 185.231.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80451039 (0x4cb95df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 1 01:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f4c061da236928cf26b4c21d8040d5bbd238fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:f1:de:17:61:7c:c3:30:72:3d:2c:11:5b:
48:db:22:e1:02:08:18:e9:0f:34:28:2e:e0:40:a4:
f5:e2:28:f4:0a:98:cb:cb:12:3e:77:62:53:4e:d8:
21:8c:c6:d4:20:ff:1a:3e:98:32:2c:9c:d0:df:72:
dd:83:ba:cd:85:68:f4:d5:70:d4:d1:c2:1f:0c:7d:
a6:2e:33:a9:04:a5:04:ab:58:73:cb:0a:9c:55:16:
fd:1f:70:49:9b:27:46:a8:3c:74:1b:c6:9a:6a:5a:
09:09:7d:24:b4:74:58:10:ca:d9:14:1d:5d:ba:65:
30:d9:99:0a:47:30:39:ea:f9:a8:e8:47:35:81:e9:
ad:8a:75:e1:42:34:da:3e:42:3b:22:ee:a8:35:38:
25:c5:f6:95:34:5b:24:b3:cd:ea:96:03:90:02:f5:
5e:bd:db:e7:de:ab:4e:0e:cf:5d:f3:3b:11:24:43:
af:96:3e:16:de:c3:24:83:02:21:f1:09:5b:6b:e6:
50:3b:a1:4a:2f:04:a1:78:d4:55:5e:4a:fa:d7:83:
61:c4:8d:b0:d1:ef:78:d5:aa:06:55:59:21:87:19:
aa:03:01:62:7d:30:cd:0a:57:48:34:d6:b9:23:a7:
6e:8e:e4:38:17:ed:dd:7c:c5:45:63:2d:1f:ea:b3:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:06:1D:A2:36:92:8C:F2:6B:4C:21:D8:04:0D:5B:BD:23:8F:E2
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/P0wGHaI2kozya0wh2AQNW70jj-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.32.0/24
Signature Algorithm: sha256WithRSAEncryption
32:28:3d:48:fa:88:f1:af:a9:ce:fb:20:4f:59:d4:67:8f:ed:
e2:c9:1c:69:13:e6:71:1b:26:22:7d:c2:c7:5e:48:48:ba:66:
78:55:7b:77:7b:4d:f1:fa:6f:2a:cc:5d:27:e8:66:72:48:36:
bd:7b:44:1e:77:67:ee:02:c2:3b:f0:13:08:d1:3e:9c:f8:9c:
b6:3c:ab:2e:7b:0b:89:5e:d0:1c:4a:17:b1:98:02:c1:54:1f:
bc:19:cb:2d:ca:21:26:90:de:bb:aa:52:66:ec:b7:6d:88:c5:
c6:0b:0a:e8:6c:d5:04:f4:ab:4e:e2:7c:13:ea:6b:9f:66:4b:
90:36:6b:a2:2e:c9:7a:16:cd:89:5d:3f:3a:00:b1:23:96:8d:
d4:c2:fa:18:a3:5a:12:a8:7c:6b:3f:67:2a:e7:1e:ba:a1:a0:
39:99:85:54:ed:90:3b:47:b5:16:56:17:38:b5:9e:a4:44:1d:
aa:6d:17:70:4c:18:e4:c2:4d:a3:76:dc:a0:24:91:6a:58:2f:
0f:76:87:2e:bf:16:ee:28:d6:9b:a1:99:99:d5:37:d2:14:53:
33:7d:d8:b0:6c:de:53:48:e9:46:ba:49:bd:9a:6b:f4:6e:d0:
64:0e:bc:c6:bf:fc:fe:31:59:60:69:dd:de:43:57:8a:d0:c2:
ca:17:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:25 2023 by rpki-client on console.sobornost.net