Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/4hDlokr9h41A8on1S0AgdXE5ak8.roa
File: 4hDlokr9h41A8on1S0AgdXE5ak8.roa (raw, json)
Hash identifier: uChpULRqiwkXLyuoUkVr6ebWZJQnIZjDvri097sSFEo=
Subject key identifier: E2:10:E5:A2:4A:FD:87:8D:40:F2:89:F5:4B:40:20:75:71:39:6A:4F
Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial: 185B1A9A
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/4hDlokr9h41A8on1S0AgdXE5ak8.roa
Signing time: Sat 01 Jan 2022 09:57:48 +0000
ROA not before: Sat 01 Jan 2022 09:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212942
IP address blocks: 176.105.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408623770 (0x185b1a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Validity
Not Before: Jan 1 09:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e210e5a24afd878d40f289f54b40207571396a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:f0:83:be:80:6a:f0:8d:d1:a2:a1:ce:5c:
26:e7:26:5e:e9:b3:44:de:70:e0:24:81:0a:c1:85:
1e:fc:4e:02:a1:e0:a0:25:4b:f2:fe:11:63:71:f9:
fc:96:af:f6:95:32:1f:9b:c5:28:1e:76:b7:75:a2:
22:f7:a7:73:7e:6b:d8:f1:5a:74:c4:a2:3c:42:3f:
5f:15:48:01:5d:b4:64:f7:56:a7:fb:73:da:10:d4:
df:2f:f4:e9:dd:e3:eb:94:77:71:1f:fd:40:ac:66:
04:e0:52:7c:8e:3b:cb:ea:24:5a:ea:76:29:97:4d:
a3:33:6c:d2:37:71:02:af:ae:12:2d:67:77:2e:82:
a4:c6:4a:4c:9c:bf:df:a1:51:46:01:a1:7d:06:7c:
f2:5a:18:24:3e:26:e5:cb:c5:10:b9:c8:19:7e:4b:
5e:d2:9c:37:1c:0a:73:9b:45:8f:37:e3:79:f6:24:
23:27:ff:2a:95:b2:f5:d7:22:99:6f:c3:39:38:f3:
8f:28:1a:cc:92:67:86:4a:8d:44:f4:7d:f9:1d:11:
59:6f:27:30:af:14:4c:d3:22:7a:53:0b:6d:48:87:
b9:21:34:81:ff:7b:3a:df:ba:a7:06:f0:10:0b:7c:
70:ad:b3:81:d5:a3:62:89:98:a2:ed:90:b3:5b:0f:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:10:E5:A2:4A:FD:87:8D:40:F2:89:F5:4B:40:20:75:71:39:6A:4F
X509v3 Authority Key Identifier:
keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/4hDlokr9h41A8on1S0AgdXE5ak8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.167.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7b:6e:34:81:1a:f3:4e:f0:88:5a:1c:59:7a:09:d0:08:f4:
41:d5:69:1a:2c:2e:a7:23:ab:00:ec:87:63:86:47:8e:5d:ce:
88:45:9c:ca:4c:10:83:ca:25:71:f7:10:f7:17:37:c9:6d:9f:
c1:c3:d0:91:40:9f:0e:b8:51:9c:3c:f4:bb:a3:4f:ab:b4:1f:
40:ca:58:7e:e6:f3:93:fc:eb:38:5a:9c:cc:78:a0:6b:14:bd:
09:df:81:0c:8b:2b:3d:09:35:49:3c:0d:14:2f:86:91:c9:56:
fb:4d:a8:47:a6:14:55:da:6f:f7:de:ac:a6:83:cf:e7:d7:e1:
e5:4c:b4:a9:86:c2:8e:07:2f:0b:a2:3c:a4:d3:57:f9:53:55:
35:3f:16:9b:46:80:65:83:c9:a1:aa:bb:16:6d:98:b0:5b:7e:
68:21:5b:e7:90:04:9d:6c:bb:44:bc:b6:80:b9:2e:34:8f:1b:
e3:0d:94:dc:7c:b7:8b:9e:f7:e0:f6:ea:6c:ac:f9:8f:d5:3a:
ef:a1:ea:75:c0:59:cc:b0:70:c3:0a:68:81:36:52:7e:3f:60:
74:6a:d4:e5:af:aa:8c:72:93:58:1b:76:be:25:b0:9f:42:26:
cf:dc:6d:81:fd:c7:88:be:87:f8:5c:4b:7d:93:ae:91:81:fb:
f4:ef:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net