Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/phou3sAunYr8M7QroeTPPkLQMEI.roa
File: phou3sAunYr8M7QroeTPPkLQMEI.roa (raw, json)
Hash identifier: lgSMiMv/XwAvmpu/Wakus7xdpCIihXZ0AybJxNM3eMA=
Subject key identifier: A6:1A:2E:DE:C0:2E:9D:8A:FC:33:B4:2B:A1:E4:CF:3E:42:D0:30:42
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 02E5A7AC
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/phou3sAunYr8M7QroeTPPkLQMEI.roa
Signing time: Sat 01 Jan 2022 09:59:33 +0000
ROA not before: Sat 01 Jan 2022 09:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198701
IP address blocks: 185.236.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48605100 (0x2e5a7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: Jan 1 09:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a61a2edec02e9d8afc33b42ba1e4cf3e42d03042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:48:a6:fa:5f:18:39:d5:80:e7:ff:ca:e8:
26:ae:11:d8:81:05:87:08:0f:06:9f:16:7e:db:99:
5c:1b:0b:9a:5f:96:e7:cb:fe:69:c1:90:dd:42:5a:
4a:56:22:61:ce:42:1a:f3:95:1b:ad:89:41:16:af:
31:13:12:e2:5c:e0:3e:ec:a9:82:7e:d2:ab:41:22:
52:24:57:e2:17:17:0e:64:b7:df:7b:a9:06:91:2f:
79:86:59:e4:04:e3:85:df:b2:9c:aa:08:ea:91:7c:
ca:e3:62:a4:fe:fa:e2:12:8c:5d:a3:8d:68:7a:9d:
0c:d9:33:3e:6a:40:b8:fc:1e:45:49:c3:f3:f2:b1:
4f:ea:ae:0b:9a:64:2e:ab:0c:e0:d5:e4:90:08:a8:
63:58:71:22:be:8f:39:28:79:1f:9e:89:c4:7b:20:
4c:19:cb:bb:ea:28:c6:bf:79:7f:e0:a2:61:cf:36:
54:b8:aa:c0:10:de:1d:a6:1f:e0:61:e8:8c:3f:33:
31:81:b6:24:e2:17:44:77:44:25:39:99:bf:e5:0e:
e5:91:a9:13:f2:83:d8:11:5f:c5:ae:d5:05:84:bd:
df:fe:92:5a:23:3d:73:04:a9:14:a1:60:ba:e4:2b:
79:9a:07:83:8c:fb:46:6b:60:a9:d6:c2:61:ee:a0:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1A:2E:DE:C0:2E:9D:8A:FC:33:B4:2B:A1:E4:CF:3E:42:D0:30:42
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/phou3sAunYr8M7QroeTPPkLQMEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:be:57:a8:14:d0:67:b3:27:7c:16:e5:e6:b7:5a:c8:84:91:
8e:0a:79:25:77:d8:19:bc:62:95:3a:68:d2:b6:df:1e:79:10:
68:41:4f:cf:22:71:e3:24:d4:b3:be:b8:42:86:ad:80:80:de:
ce:eb:ce:71:d8:ba:c8:7b:7b:8a:13:31:8d:ab:a1:63:e6:6e:
49:95:e1:f2:9e:9f:75:c8:61:31:8e:73:c1:c3:07:86:65:0a:
9a:ca:8e:40:6c:50:da:50:02:c0:99:ba:ec:2e:55:47:64:a2:
37:6c:f7:3d:55:4e:82:96:33:2d:ab:dd:2b:03:67:38:09:ff:
55:1c:46:b8:1f:8b:5e:d7:d1:3f:8d:ca:f8:b0:bd:1d:66:16:
11:99:16:45:34:5e:43:61:68:56:ea:ba:cd:1e:57:87:55:ce:
c2:07:06:11:66:7b:a1:51:53:c6:dd:d7:71:2f:a1:5d:6a:8a:
76:6d:ca:80:02:f8:03:42:2a:84:cc:2e:31:42:5c:77:a8:40:
01:36:69:ce:b2:94:29:4d:b4:91:41:4b:ef:e3:26:7a:7b:0a:
26:f3:6c:b5:8d:b8:0b:1f:f4:70:e8:3e:42:43:53:54:71:2b:
b1:4b:1b:d6:30:d7:ee:74:ba:c7:55:31:82:03:49:c3:a9:1d:
c6:84:73:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:55 2023 by rpki-client on console.sobornost.net