Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/QDkbNhPAX04CF6nNLuMQFpJ2MD8.roa
File: QDkbNhPAX04CF6nNLuMQFpJ2MD8.roa (raw, json)
Hash identifier: 6NL6EaDURw9iikuH8dxqKZ85GVrQX4S/w2gB3+nKMi0=
Subject key identifier: 40:39:1B:36:13:C0:5F:4E:02:17:A9:CD:2E:E3:10:16:92:76:30:3F
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 0183EF307B84892E84DF57F177CEEBC06E96
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/QDkbNhPAX04CF6nNLuMQFpJ2MD8.roa
Signing time: Wed 19 Oct 2022 07:41:15 +0000
ROA not before: Wed 19 Oct 2022 07:41:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211483
IP address blocks: 192.109.198.0/24 maxlen: 24
193.29.3.0/24 maxlen: 24
185.60.76.0/24 maxlen: 24
185.60.77.0/24 maxlen: 24
185.60.78.0/24 maxlen: 24
185.60.79.0/24 maxlen: 24
2a04:5b40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:30:7b:84:89:2e:84:df:57:f1:77:ce:eb:c0:6e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Oct 19 07:41:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40391b3613c05f4e0217a9cd2ee310169276303f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:35:60:9d:f1:38:38:48:bc:51:09:30:24:
60:f3:8c:f2:98:2b:f0:62:44:43:c8:b9:ec:88:ee:
81:97:6d:80:78:5f:89:62:1f:28:1c:8d:cd:3b:99:
8e:c2:52:4a:07:b5:d5:4a:7a:2a:6e:41:19:50:f2:
92:2c:0c:39:cb:9c:01:8a:d1:e5:04:00:5d:e2:c3:
73:a5:e0:c7:c8:34:e1:43:79:72:df:f8:05:2b:2f:
8b:20:be:63:c9:39:a2:b5:cf:6d:cd:82:2c:9a:7f:
69:df:b3:f6:40:06:4e:82:ab:03:03:ab:79:57:a7:
4d:fd:df:fb:02:25:5c:1d:0a:02:f4:e5:16:28:83:
c1:89:59:06:17:94:21:af:e4:24:c0:6f:4e:07:5a:
45:62:7f:bc:e8:3b:64:8b:7f:48:42:4a:e2:ba:96:
a4:fd:8a:99:4b:28:db:02:cc:5c:90:aa:c4:46:5b:
4c:8c:b7:43:c8:f8:f1:7e:43:e2:d1:1f:ba:5d:78:
f4:bc:59:98:ec:c6:7d:c0:1a:c1:14:b0:b8:e7:ed:
7b:0e:fe:a9:75:b8:23:e0:d0:8d:3b:16:e3:f2:f7:
3e:ba:60:75:74:4a:d8:57:1a:d8:19:73:ca:b1:eb:
ba:86:bb:95:ef:1a:f3:83:77:db:08:ba:2c:a7:53:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:39:1B:36:13:C0:5F:4E:02:17:A9:CD:2E:E3:10:16:92:76:30:3F
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/QDkbNhPAX04CF6nNLuMQFpJ2MD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.76.0/22
192.109.198.0/24
193.29.3.0/24
IPv6:
2a04:5b40::/32
Signature Algorithm: sha256WithRSAEncryption
bb:b9:43:e4:e6:e2:9d:72:2b:91:2f:00:1b:14:a4:50:72:2c:
35:7a:1b:9d:da:58:cb:55:5b:ac:0a:7f:a2:bf:95:a0:6a:b2:
4c:82:23:bc:aa:b9:00:e5:a8:04:bd:ec:07:d1:2c:3e:2f:b3:
ef:a9:05:75:ed:59:3b:e4:2c:07:20:6e:57:7d:53:67:6c:cc:
72:f7:e9:df:64:99:4f:25:66:27:17:72:7e:54:05:7f:b6:8d:
7e:2f:a3:6a:59:ba:de:01:48:67:d5:17:f8:cc:1b:3a:2e:1f:
1a:1c:bf:5c:c3:43:79:40:72:05:e8:8f:43:73:35:3f:06:e5:
93:11:f6:5d:1f:d3:ce:94:ec:ba:01:89:63:bb:12:bb:ce:0d:
98:48:9a:66:7a:39:26:91:f5:3e:c1:40:63:19:1b:f2:4b:f6:
ca:4e:21:70:80:d5:d9:73:cc:46:db:8e:40:c0:c5:27:1c:27:
d5:1b:f2:40:02:55:7f:b8:7f:89:d0:32:85:b7:d7:30:2e:d1:
0b:ad:83:63:79:b9:cd:3d:2a:74:c5:cc:36:4b:6d:3f:76:a3:
15:bf:c0:50:c6:52:b6:42:3e:9b:4d:27:be:c9:db:12:2d:7a:
79:68:d5:31:ac:9d:f2:69:eb:81:97:95:f3:6a:51:2c:00:48:
69:8e:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:04 2024 by rpki-client on console-fra.rpki-client.org