Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/Pcov-xZtUn45FtLG9LQKuzT_fug.roa
File: Pcov-xZtUn45FtLG9LQKuzT_fug.roa (raw, json)
Hash identifier: bh4AOuolV4OssifbZPLoGFjVPuTdQRLftHZEQhXh35A=
Subject key identifier: 3D:CA:2F:FB:16:6D:52:7E:39:16:D2:C6:F4:B4:0A:BB:34:FF:7E:E8
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 0431D0C4
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/Pcov-xZtUn45FtLG9LQKuzT_fug.roa
Signing time: Sat 01 Jan 2022 14:04:56 +0000
ROA not before: Sat 01 Jan 2022 14:04:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207356
IP address blocks: 185.16.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70373572 (0x431d0c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: Jan 1 14:04:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dca2ffb166d527e3916d2c6f4b40abb34ff7ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:fa:c1:66:a5:c3:81:44:3b:45:81:e9:ec:
a1:53:b8:d4:27:17:3e:f2:80:e3:de:91:1f:a9:46:
f6:af:c9:1d:e1:85:02:b4:a7:42:a9:25:cf:ae:79:
65:1c:29:bb:2e:4d:24:de:92:9e:d9:dc:6e:0a:06:
e3:19:8c:5e:be:b8:6d:26:5a:8c:7f:c5:26:c1:1b:
f6:be:10:f1:bb:9b:1c:ed:ab:74:b7:6c:0d:3f:94:
bd:1e:35:b4:b5:26:95:1a:22:01:9b:7f:ee:42:b7:
26:3f:bd:ba:6b:5d:83:5c:2b:a4:29:a9:ba:8c:eb:
87:44:3c:93:08:52:85:60:05:55:25:f3:89:11:58:
6c:29:61:e4:aa:b9:51:dd:ed:75:94:92:9e:de:7b:
02:5a:67:2f:70:a6:6a:c8:48:2d:c2:89:35:02:c8:
b3:9e:da:23:d2:0f:42:b5:86:c7:83:56:f2:00:26:
1d:c0:8d:dd:3d:e0:54:81:83:85:24:c4:e5:15:dc:
ce:6c:83:4e:85:d1:63:d0:3b:a1:88:dd:67:c4:5c:
81:8a:07:43:de:87:b7:51:9c:7c:12:43:f5:c4:9f:
86:1e:da:7a:04:29:e5:10:b2:18:17:de:5d:1f:d4:
c2:d3:8a:28:95:66:e0:a2:ea:7c:d3:39:08:24:0f:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CA:2F:FB:16:6D:52:7E:39:16:D2:C6:F4:B4:0A:BB:34:FF:7E:E8
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/Pcov-xZtUn45FtLG9LQKuzT_fug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.248.0/24
Signature Algorithm: sha256WithRSAEncryption
66:54:a1:a4:d5:60:79:09:8d:d3:bd:ca:65:98:7f:b0:42:a5:
62:2a:6e:0f:b6:26:73:c0:13:1a:64:53:0d:27:34:4d:8b:42:
c3:4a:5e:ac:ca:8a:b0:f5:35:19:c9:31:a0:84:d6:ac:2f:53:
dc:ad:3c:5f:cd:3d:b9:e9:92:06:7b:62:a9:d5:60:72:d0:2a:
bc:b4:e3:83:f1:4b:8e:04:6f:6a:ba:27:38:01:8e:99:a9:b3:
49:0a:24:11:07:ba:de:92:e1:34:f8:42:65:42:26:a2:a1:7f:
b3:f4:93:d9:98:bc:70:fd:9e:ed:fc:c4:7e:b5:b9:8e:1e:13:
c5:14:82:08:20:eb:5a:ac:e7:fe:9d:be:50:97:33:26:c8:12:
31:47:ca:43:ea:cb:25:0b:8a:56:f1:8b:35:fd:15:68:2e:5a:
2c:ca:73:c0:6d:c1:f9:b9:bc:68:9f:3e:a1:44:fb:da:5d:d3:
f9:a1:96:c3:da:d1:7b:51:35:63:48:77:23:bb:ef:d1:29:c6:
2a:ac:8f:25:27:0c:fd:31:1b:8b:96:6c:b4:c2:e8:b0:ce:d9:
7e:3f:41:6d:0a:c3:ec:63:51:e4:ee:71:c1:cc:90:db:64:0e:
73:03:bf:c9:b1:73:7d:53:7d:b7:87:4e:ed:fc:f5:56:16:5c:
2a:df:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:49 2023 by rpki-client on console.sobornost.net