Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/PhY6iE0HwjodN_V1H8EG7eosLJE.roa
File: PhY6iE0HwjodN_V1H8EG7eosLJE.roa (raw, json)
Hash identifier: W59LZAO7udYiGueDy/1CorGqPsqMSy8vN/NUtsO8gME=
Subject key identifier: 3E:16:3A:88:4D:07:C2:3A:1D:37:F5:75:1F:C1:06:ED:EA:2C:2C:91
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 0873B212
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/PhY6iE0HwjodN_V1H8EG7eosLJE.roa
Signing time: Sat 01 Jan 2022 16:07:40 +0000
ROA not before: Sat 01 Jan 2022 16:07:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 85.235.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141799954 (0x873b212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Jan 1 16:07:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e163a884d07c23a1d37f5751fc106edea2c2c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:18:2d:8a:ef:4d:13:67:c3:28:3e:ce:6b:
d0:89:19:36:fc:21:bf:57:df:48:e3:e5:47:5e:07:
f4:ee:f8:c8:28:e4:7a:36:95:7a:30:8b:f3:b2:24:
c5:1e:33:a2:b2:77:8e:d7:f0:1b:fc:10:1b:06:19:
8c:9d:42:94:d0:35:e9:1f:30:46:dd:28:23:59:de:
20:a9:02:9d:38:3a:79:aa:a6:45:ea:36:2f:b0:6c:
71:a5:0d:22:eb:ac:a2:7a:54:3c:f9:6e:b2:79:47:
07:ba:59:b7:d4:b7:8b:9f:f3:78:3a:d7:26:ef:f7:
f5:80:f6:d0:b8:72:8d:52:1c:aa:a9:3e:9e:ee:fa:
43:78:20:84:a8:36:a5:54:b0:c1:2c:c2:1d:da:96:
df:23:aa:2c:17:c1:c7:e8:76:9e:5a:7f:6e:f1:da:
99:10:aa:1e:b9:4c:c3:5e:ad:4b:98:ba:95:7c:78:
8e:34:fa:9f:42:40:33:b3:10:6e:e8:24:ec:b1:9e:
84:a8:8c:af:21:00:6d:6f:ae:86:e5:82:66:86:4d:
b3:91:ec:0a:d6:7f:de:2c:b8:c8:28:16:53:d6:78:
47:4f:30:fb:2f:2a:93:eb:eb:9b:e7:e2:f8:de:99:
af:0e:5a:da:b0:31:7b:7b:fc:20:2b:9c:57:69:c4:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:16:3A:88:4D:07:C2:3A:1D:37:F5:75:1F:C1:06:ED:EA:2C:2C:91
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/PhY6iE0HwjodN_V1H8EG7eosLJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:7b:ca:50:9e:7e:68:5d:21:3e:60:bc:ec:ee:40:e3:a7:d7:
8d:31:42:4a:f2:60:4a:92:8d:ef:d2:d1:93:1a:cd:f5:55:17:
e4:44:58:dd:de:e2:1d:4b:ca:16:ba:f6:82:46:64:be:21:e7:
e6:7e:d4:9f:7c:03:1c:6d:78:7d:73:7e:c1:9a:21:6e:12:b0:
73:4d:14:45:fe:94:5d:85:2f:2c:03:67:35:e5:52:a4:49:5d:
fe:84:a4:13:a7:95:42:e4:41:6f:6d:cc:ef:bb:2c:57:79:af:
df:60:3c:5c:8c:74:c7:73:e6:7a:af:ad:89:ad:24:6f:4a:c3:
54:99:62:63:aa:a9:78:f7:e5:9d:ef:5a:60:27:88:2c:f3:a7:
cc:9d:f6:a0:71:42:6a:b5:c1:4b:29:41:13:4f:ca:ac:46:47:
f3:cd:a3:83:29:d1:7a:d6:c4:51:6e:a7:7b:24:0e:f9:7d:e4:
5e:72:26:e8:2e:9d:96:36:9b:d4:5f:fb:81:bd:50:df:22:e4:
b3:54:23:3c:97:08:a1:4a:c3:79:ef:57:a6:bb:c7:bf:d5:cb:
b9:66:cb:c5:50:fd:cb:bb:67:5a:83:80:93:73:fb:25:ac:4c:
ee:dd:fa:75:20:95:e9:ec:6b:22:86:9f:75:84:25:52:53:2b:
c8:72:d6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-fra.rpki-client.org