Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/PHopnGV3My2CzIxEvHY1cQr7yOU.roa
File: PHopnGV3My2CzIxEvHY1cQr7yOU.roa (raw, json)
Hash identifier: drYEHMK7shCa2kAVY5MxfsXs5voTCJxeOpFb3D4JeIs=
Subject key identifier: 3C:7A:29:9C:65:77:33:2D:82:CC:8C:44:BC:76:35:71:0A:FB:C8:E5
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 093994AC
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/PHopnGV3My2CzIxEvHY1cQr7yOU.roa
Signing time: Wed 09 Feb 2022 10:53:55 +0000
ROA not before: Wed 09 Feb 2022 10:53:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39405
IP address blocks: 213.178.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154768556 (0x93994ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: Feb 9 10:53:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c7a299c6577332d82cc8c44bc7635710afbc8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:41:00:ec:05:59:71:19:4c:31:c7:91:f8:
af:a4:bd:71:ea:87:71:2f:d9:5f:91:25:36:70:bf:
4e:67:74:45:71:c1:b0:cf:d6:ea:2c:d6:a5:3c:ed:
30:f4:75:d3:fb:8d:20:64:0d:4d:1f:f9:12:e7:55:
70:37:e5:1a:7f:6e:46:80:6e:c4:9d:30:3d:81:3d:
b2:2d:de:51:25:41:a3:45:c0:dd:b8:cb:37:fa:dd:
60:32:74:00:c8:25:88:4d:99:76:21:c0:11:0b:62:
f3:7c:10:24:a1:30:73:c7:d1:f6:95:3a:d8:22:74:
e4:ac:08:1e:27:5c:d7:6d:11:35:b3:14:c7:ec:88:
ae:d5:80:43:75:ca:37:9d:be:20:c3:47:e5:11:08:
c1:12:9b:57:73:46:87:73:c3:7d:10:fc:51:03:e9:
fc:7f:1e:d5:74:0d:46:ec:32:6a:ed:b7:c0:40:04:
e7:dc:ba:f3:6e:d0:6e:67:60:26:2e:9c:02:b8:3c:
3b:9c:7d:2d:90:db:97:f2:2c:55:ad:33:ca:f5:27:
87:9b:4f:ce:50:ef:44:59:1b:71:6e:fa:33:7d:b6:
7b:25:a0:7f:9e:f2:dc:aa:b8:c7:e4:04:b7:d5:8c:
18:81:8f:e6:6d:81:f5:61:8e:d9:09:76:db:dd:44:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:29:9C:65:77:33:2D:82:CC:8C:44:BC:76:35:71:0A:FB:C8:E5
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/PHopnGV3My2CzIxEvHY1cQr7yOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.148.0/22
Signature Algorithm: sha256WithRSAEncryption
04:b6:de:2b:f0:97:ae:4c:f8:e7:17:3f:8d:8b:00:fc:1a:71:
87:f5:36:e2:b0:6b:d2:28:52:89:9a:c2:1f:1c:4a:29:b2:d6:
33:7b:fb:53:32:10:23:b1:15:98:d7:42:d9:f1:69:b0:60:d5:
ff:b6:98:fe:75:68:2b:c0:93:ab:ee:8e:69:e8:7f:2e:01:29:
bd:3b:54:ed:b9:87:d7:8e:8d:0b:bd:9c:84:86:a7:b1:e3:9e:
c7:d7:21:f6:a3:35:18:03:66:c6:dd:6b:96:f5:35:cc:23:ba:
b6:3a:72:78:ae:77:0d:67:fb:cb:42:61:5b:ae:ad:0a:9a:ae:
7c:63:76:cc:56:61:6e:27:d7:54:51:79:32:af:7d:e6:8f:5a:
a8:05:15:0a:c2:58:e4:2f:05:04:b5:e7:12:0b:d9:9d:7f:30:
7b:c2:7a:ad:c0:49:eb:60:23:d5:10:41:12:d0:33:70:6e:e8:
da:53:50:07:8d:94:ff:52:90:ce:6c:eb:1c:a9:35:db:da:1b:
7a:43:cc:32:9a:0c:16:00:16:59:14:6c:c1:7a:fc:9c:4c:a6:
38:b4:c2:e8:3f:6e:2a:b1:ac:8e:2d:ff:bf:5a:63:e7:6e:a9:
65:42:b8:41:7c:0c:58:bb:06:61:f3:8e:02:94:92:da:78:66:
8c:94:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:13 2024 by rpki-client on console-fra.rpki-client.org