Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/pHuMbuy8_mp2YBeUZRyF7nllS4A.roa
File: pHuMbuy8_mp2YBeUZRyF7nllS4A.roa (raw, json)
Hash identifier: 51Lzi+9p103PTwp7FWca76q8VyvjyzHYIhQ1FyQKi0Y=
Subject key identifier: A4:7B:8C:6E:EC:BC:FE:6A:76:60:17:94:65:1C:85:EE:79:65:4B:80
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0774E773
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/pHuMbuy8_mp2YBeUZRyF7nllS4A.roa
Signing time: Fri 07 Jan 2022 11:03:25 +0000
ROA not before: Fri 07 Jan 2022 11:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 176.105.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125101939 (0x774e773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 7 11:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a47b8c6eecbcfe6a76601794651c85ee79654b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:8c:52:2f:d5:41:16:29:56:e7:e0:72:84:
2f:ba:c8:58:dd:d8:63:78:e0:6f:52:3f:73:1a:f7:
eb:67:fb:82:eb:ec:82:bf:d2:45:cc:a9:d7:18:53:
a3:47:5d:93:56:af:db:39:57:e2:0b:5d:00:ca:a9:
0d:56:06:9c:ce:19:9d:49:8c:c7:75:6d:4a:14:b0:
88:e6:5b:3e:66:58:37:1c:ee:67:88:91:c0:6d:b8:
26:59:d6:51:dd:72:98:d7:a8:a3:02:97:98:d6:43:
f9:73:d2:be:b5:0a:d8:b4:23:27:ad:9e:c1:25:b5:
a4:86:d9:44:dc:91:42:c3:2c:61:b2:e5:09:7f:51:
55:3d:9e:e8:fe:74:e3:35:56:6a:a5:f3:58:74:5f:
40:77:a3:33:cd:08:d8:ed:ba:94:51:f3:a3:2c:ff:
ca:f6:54:b7:b5:8a:69:40:d0:a9:32:0a:4c:5e:19:
51:7f:7d:2f:5f:81:27:57:de:af:f2:9b:69:02:56:
2d:be:cf:8d:74:f6:5b:97:43:4d:2e:69:9f:f5:c3:
61:6a:d7:ae:bd:aa:63:b3:26:21:5e:cc:b8:91:c9:
95:24:3e:80:23:77:e8:18:a1:df:db:d8:2b:35:0b:
9a:c2:78:13:83:57:e5:23:1a:35:ba:1c:b8:0d:a6:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7B:8C:6E:EC:BC:FE:6A:76:60:17:94:65:1C:85:EE:79:65:4B:80
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/pHuMbuy8_mp2YBeUZRyF7nllS4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:cf:af:71:9b:13:60:fb:a2:f0:ff:a7:52:bf:01:b2:30:ad:
f2:65:2f:2f:88:8e:ad:fa:66:4d:24:b9:65:65:41:96:ec:a4:
ab:2a:d4:59:6f:b8:1c:e4:3a:23:81:d9:5d:f3:28:4a:ac:df:
d2:53:4e:16:fb:96:17:42:34:55:de:42:85:f8:bf:be:9c:8f:
ac:40:fe:d3:78:68:ba:55:d2:87:44:66:2a:43:54:01:8f:b9:
eb:79:be:4f:a0:6d:f8:fc:04:9a:1d:4c:55:64:90:65:96:8f:
1d:45:e4:22:a3:f6:52:c5:d7:45:de:13:25:06:e1:63:f2:90:
3c:79:5d:cc:db:5d:94:0a:60:37:45:ea:bb:e5:3a:4a:05:0a:
eb:f7:71:c7:dd:0a:49:7d:91:7b:10:e6:1b:e4:e6:92:a0:22:
90:ac:cf:85:20:93:e4:5a:c8:39:4b:57:0a:c3:70:3d:31:89:
0c:96:a8:aa:03:16:78:97:64:f0:51:37:d6:4f:a5:c1:e6:cf:
04:74:f3:43:dc:c1:b1:03:1f:70:50:df:7c:4f:f9:bb:30:4b:
e5:86:bc:e5:7d:7a:86:e7:b9:64:58:45:81:df:6e:1c:ca:fb:
93:2f:53:76:58:3c:c2:46:f0:da:d3:6e:0e:4e:93:11:10:76:
75:95:23:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:19 2023 by rpki-client on console-fra.rpki-client.org