Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qsfoyB3Dt0Iph7LfEtsNHP4Cspo.roa
File: qsfoyB3Dt0Iph7LfEtsNHP4Cspo.roa (raw, json)
Hash identifier: tR4mcBUMddO5ev05cg24ljZuwRihjd9UMD7xn13pVX0=
Subject key identifier: AA:C7:E8:C8:1D:C3:B7:42:29:87:B2:DF:12:DB:0D:1C:FE:02:B2:9A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0183E0008F51857F7BCDAD2250A426C44C98
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qsfoyB3Dt0Iph7LfEtsNHP4Cspo.roa
Signing time: Sun 16 Oct 2022 08:54:36 +0000
ROA not before: Sun 16 Oct 2022 08:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133219
IP address blocks: 194.15.39.0/24 maxlen: 24
45.147.6.0/24 maxlen: 24
45.67.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e0:00:8f:51:85:7f:7b:cd:ad:22:50:a4:26:c4:4c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 16 08:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aac7e8c81dc3b7422987b2df12db0d1cfe02b29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:96:ac:8d:1e:8c:ab:ac:c9:8b:f9:87:af:
73:13:c4:38:9e:08:3d:0a:44:f3:55:00:83:ba:84:
98:4c:fc:fe:53:b7:ca:95:d4:dc:a8:bf:93:a5:9b:
38:20:82:5e:1e:b1:f8:96:80:b7:cd:7f:66:96:e6:
cd:b2:4b:e2:61:b7:01:1f:03:f2:49:1b:d8:e0:23:
27:95:c2:db:d8:da:f8:09:88:0b:4c:bc:03:5a:ff:
be:4f:f9:0a:c3:c1:f6:b4:a8:88:80:26:cc:93:cc:
5c:e3:41:f9:da:f5:df:24:0e:9e:9f:f7:84:2a:bf:
4f:d3:35:ee:f9:bc:10:06:a2:ab:0c:33:04:45:90:
55:de:9c:7b:7a:f8:b2:0e:87:23:6c:b4:7a:bd:68:
e4:47:c3:4e:02:71:f7:40:40:0c:14:7f:7a:e0:0a:
8f:44:3a:ae:fc:d5:e7:43:6e:ee:90:76:74:11:05:
07:0a:5a:03:91:26:7c:a4:f8:b0:2b:b9:4c:e8:ae:
8a:db:f4:70:02:84:23:a1:a5:fc:14:e3:72:0d:5a:
22:73:87:2a:b2:11:b4:0e:39:1b:98:5c:6a:a2:68:
88:98:97:f6:42:82:55:09:97:fe:63:44:47:ec:bf:
73:5f:9a:8a:4a:10:81:77:63:7d:d5:d3:f9:6a:08:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C7:E8:C8:1D:C3:B7:42:29:87:B2:DF:12:DB:0D:1C:FE:02:B2:9A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qsfoyB3Dt0Iph7LfEtsNHP4Cspo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.138.0/24
45.147.6.0/24
194.15.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:33:2b:a5:10:c2:c6:c7:a3:e7:df:cd:c4:48:1a:92:f4:90:
cb:a3:12:c6:85:6b:b0:0e:ff:6b:4d:3e:54:85:8d:93:5f:2f:
b5:bd:11:45:32:f9:26:65:50:b5:42:51:1d:e0:34:c7:02:79:
c3:52:24:ac:29:6c:41:ed:6b:06:06:9d:58:5c:c3:66:46:03:
ee:30:04:38:2d:31:28:99:13:06:69:97:20:27:0a:a3:8c:ae:
9f:df:7d:42:0f:d9:70:1a:8b:08:7a:c0:3f:f0:7d:18:b9:3a:
48:c4:4f:53:05:b5:ab:20:15:14:76:40:78:e8:6b:6d:ad:86:
13:47:bf:d8:ec:0e:39:a2:e1:2f:13:68:29:29:14:3b:8a:da:
9e:84:25:38:f7:b8:71:a8:dd:5a:2c:4c:a2:04:00:72:d7:c0:
ab:ce:67:dd:e7:c5:c7:01:a8:62:71:f8:af:89:23:ff:76:c1:
c7:06:85:7c:b2:8a:0e:c3:02:87:de:e0:86:5f:47:56:51:fe:
f4:04:83:85:4b:97:e8:24:5b:d3:1d:dd:4f:ee:e8:4d:cf:dc:
f3:35:33:e1:4c:fd:08:a9:03:5d:17:b5:99:a6:07:48:a4:ff:
bd:8a:c4:44:c7:d9:f0:c7:d6:ed:b2:1e:9d:ab:10:69:38:cc:
60:6f:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-fra.rpki-client.org