Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/jH0uZHk_zk3cuupDklQVdx1ADSc.roa
File: jH0uZHk_zk3cuupDklQVdx1ADSc.roa (raw, json)
Hash identifier: 1xl261RNFMMKQl4hpURVT//PJAryD41XivKoBAOQeXM=
Subject key identifier: 8C:7D:2E:64:79:3F:CE:4D:DC:BA:EA:43:92:54:15:77:1D:40:0D:27
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 0A7CB3D7
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/jH0uZHk_zk3cuupDklQVdx1ADSc.roa
Signing time: Sat 01 Jan 2022 08:55:28 +0000
ROA not before: Sat 01 Jan 2022 08:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35104
IP address blocks: 185.48.149.0/24 maxlen: 24
185.48.148.0/24 maxlen: 24
185.48.148.0/23 maxlen: 23
185.48.151.0/24 maxlen: 24
185.48.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175944663 (0xa7cb3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Jan 1 08:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c7d2e64793fce4ddcbaea43925415771d400d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:b0:74:1e:0f:24:9e:0e:23:91:4c:61:e0:
ee:48:bc:4c:e1:6c:38:94:1c:db:8b:c8:b4:e3:ab:
1b:b2:01:46:e4:bf:e4:2c:b6:24:14:99:cd:35:66:
91:ca:2e:24:6a:48:ba:08:f2:b5:a9:a4:1f:91:3d:
5e:39:7a:ca:9d:de:42:dc:47:06:2f:d1:15:37:ff:
b3:75:bc:f8:5f:b8:a0:14:57:17:a4:c0:ec:fe:b8:
cc:97:29:b0:13:ac:31:25:6b:f0:5f:2c:e5:19:f1:
3f:bc:e5:54:31:90:a0:45:ba:cf:73:c5:4e:c4:8e:
b7:94:71:93:8d:68:f2:63:07:fc:4e:a0:6d:9a:54:
d5:c0:0f:4b:44:2c:da:2d:4f:4f:2d:45:53:83:b1:
63:5a:7c:f1:ec:d7:5e:b6:8e:f0:0b:1d:b4:c1:b3:
d7:55:8f:6a:99:95:64:bb:cc:7c:c2:7d:be:e2:30:
aa:56:45:d6:3d:17:0c:7a:66:01:85:0a:43:9c:6b:
ed:84:b9:17:07:3b:02:0b:1d:c1:6d:20:d7:bf:01:
76:37:7b:7f:20:5f:92:3b:3b:de:5f:19:18:9c:d5:
b4:50:5b:40:f9:a4:9f:02:45:6b:13:12:f1:7c:82:
4c:50:5c:ff:8f:89:c8:39:95:be:39:7e:8b:ba:6d:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:2E:64:79:3F:CE:4D:DC:BA:EA:43:92:54:15:77:1D:40:0D:27
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/jH0uZHk_zk3cuupDklQVdx1ADSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.148.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:35:9f:ca:3d:de:4b:e1:1a:94:96:f9:6f:cc:dc:e0:7c:d9:
cb:18:07:db:80:4c:d2:8c:49:df:92:6a:b3:aa:a3:f8:66:dd:
60:41:6a:e9:3b:fc:3d:0c:92:61:a9:7a:4c:37:b0:f3:cd:f3:
cf:a2:fe:17:9f:d8:70:a4:d4:b8:e8:8d:b3:a8:5e:d4:cf:07:
0e:a8:e7:77:78:a8:30:36:a5:47:26:32:d0:39:1e:0f:27:bf:
df:12:64:8a:fb:57:a8:e4:57:eb:cc:31:5e:84:d7:5c:ed:20:
d1:af:6d:5c:d8:53:a0:e4:26:96:6a:5c:52:39:d9:de:27:38:
c6:f8:ca:34:10:22:08:4a:bc:83:ec:69:4a:37:87:98:a4:30:
39:7a:93:ed:2f:1f:27:00:52:36:ae:1c:a6:67:d4:c1:f3:20:
20:c1:25:61:3c:5c:81:2c:06:9d:84:63:73:6f:5a:68:1e:a7:
e4:fc:85:95:b7:ba:29:29:98:b6:ad:1f:37:a1:5b:e2:2f:24:
c1:91:7d:89:6b:c3:87:8f:4e:5c:01:c4:2a:2d:51:91:47:45:
62:28:7f:eb:91:99:13:aa:82:d1:ff:8b:9f:c7:97:2b:19:f9:
e8:df:2e:c4:a5:63:d5:73:49:dc:1b:ec:0e:79:8c:3c:ae:d7:
73:a5:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net