Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/hJ8J7H8FMityzKAsKGN24kUpnAA.roa
File: hJ8J7H8FMityzKAsKGN24kUpnAA.roa (raw, json)
Hash identifier: 4H3WL4A1Agsiu4CVwTrHiIczSxspmjzKxpOxVjbQ2QI=
Subject key identifier: 84:9F:09:EC:7F:05:32:2B:72:CC:A0:2C:28:63:76:E2:45:29:9C:00
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 07A86C3D
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/hJ8J7H8FMityzKAsKGN24kUpnAA.roa
Signing time: Sat 01 Jan 2022 10:01:58 +0000
ROA not before: Sat 01 Jan 2022 10:01:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.48.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128478269 (0x7a86c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 1 10:01:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=849f09ec7f05322b72cca02c286376e245299c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bf:73:f5:53:c0:c0:66:64:e6:34:ac:56:88:
09:f2:0c:f8:7f:34:49:4f:6d:65:7f:f4:61:2d:08:
04:d5:3c:27:ea:b4:c1:f3:ce:9d:64:a5:f5:cd:42:
da:84:81:4b:d3:ed:fd:a2:27:76:e2:eb:38:3e:07:
e8:41:57:c1:de:1b:df:b8:73:a5:57:b6:1d:0f:96:
28:00:7a:3f:dd:11:b7:4f:4b:b6:0d:6a:10:35:a3:
c1:18:a2:32:b0:12:22:de:b2:d5:42:7f:40:90:4a:
bf:e1:be:d9:cd:2e:a3:68:fc:de:f2:1f:ce:7e:af:
4a:f0:1e:94:17:71:a7:5b:e3:07:83:87:ca:6f:a9:
d5:89:3a:e0:1b:7a:97:a4:40:33:35:c3:b3:ae:98:
ae:14:85:a2:78:ef:b0:f5:8f:05:c1:40:61:39:30:
f2:82:4c:a1:59:74:f2:15:c1:fd:0a:d7:86:8f:44:
86:61:68:4a:8f:b9:12:82:ce:cf:00:c7:24:bb:66:
35:1c:e0:dc:0f:74:53:c0:a6:3e:b8:1a:a7:56:c0:
ab:d7:14:6b:92:42:7c:40:2f:aa:34:96:20:5e:ed:
61:e4:fa:57:9e:c1:0e:56:db:63:05:88:3a:3f:40:
e7:09:ca:c2:73:82:da:01:47:f5:a6:06:2d:0d:f4:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:09:EC:7F:05:32:2B:72:CC:A0:2C:28:63:76:E2:45:29:9C:00
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/hJ8J7H8FMityzKAsKGN24kUpnAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.27.0/24
Signature Algorithm: sha256WithRSAEncryption
66:be:c1:2f:1a:4b:dd:76:17:17:b5:c1:33:4a:cc:ea:3c:23:
a5:c9:5f:55:1b:72:ab:16:51:1f:2e:d3:75:5b:fb:89:78:d3:
d5:69:be:73:e1:73:d3:6c:13:4e:22:b3:41:34:e9:bb:ea:2b:
fe:df:01:55:a5:33:f2:cd:db:29:4d:07:e4:51:d7:2e:c8:3e:
35:24:59:25:95:8a:50:75:34:e2:94:f4:aa:cb:a2:30:09:76:
92:0d:d7:b0:84:52:f1:d2:bd:29:4c:c5:28:f5:f7:3c:d0:48:
48:57:c8:8d:70:e0:08:39:6e:c7:26:78:5b:7d:94:8a:37:fe:
3f:a7:70:fa:23:21:7d:e6:5a:97:37:21:b0:04:5b:fe:74:02:
92:2f:97:29:d0:4a:a4:f9:b5:b3:88:9f:0f:98:47:01:ed:fc:
78:b8:82:44:1f:d2:cd:52:da:cd:db:1c:bb:00:e4:2c:6b:f3:
c2:d3:50:dd:c5:28:4f:81:38:a6:13:f6:76:5c:66:de:f9:0e:
84:3d:38:6c:33:af:bb:c1:d2:1a:6f:5f:0e:ac:ce:e8:fd:ae:
f2:e8:cb:96:53:28:a3:93:a0:41:ac:1d:59:4b:48:4c:9b:37:
4f:38:98:e2:27:66:e8:a6:fc:b5:dc:f3:e4:61:0a:20:36:97:
c6:ae:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:33 2024 by rpki-client on console-fra.rpki-client.org