Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/qosNRY5DVTuM9-6WXO6hNYf0XhQ.roa
File: qosNRY5DVTuM9-6WXO6hNYf0XhQ.roa (raw, json)
Hash identifier: tuDNTReK0yMoCsDTEqTK0tg0/uZDSHxhP8KOd47/ZEE=
Subject key identifier: AA:8B:0D:45:8E:43:55:3B:8C:F7:EE:96:5C:EE:A1:35:87:F4:5E:14
Certificate issuer: /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial: 0176477D
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/qosNRY5DVTuM9-6WXO6hNYf0XhQ.roa
Signing time: Sat 01 Jan 2022 11:04:08 +0000
ROA not before: Sat 01 Jan 2022 11:04:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202208
IP address blocks: 185.42.252.0/22 maxlen: 22
185.42.252.0/24 maxlen: 24
185.42.254.0/23 maxlen: 23
2a01:66a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24528765 (0x176477d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Validity
Not Before: Jan 1 11:04:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa8b0d458e43553b8cf7ee965ceea13587f45e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:51:91:e2:9d:49:20:d8:70:67:02:bc:93:
cc:79:30:2e:10:19:fa:a1:6c:c5:81:f5:e5:3a:86:
e4:42:b3:49:18:78:0b:7f:dd:af:8c:bd:fb:00:e1:
8d:79:ce:0a:6f:e8:fa:e1:3a:9f:de:a5:73:ad:aa:
ae:26:c0:44:a5:ee:64:28:04:7e:8d:e6:d0:55:bd:
bb:cb:26:3e:15:c6:69:7e:32:5b:b0:60:a4:3b:42:
92:d1:f3:6d:3e:3e:0e:77:ec:73:16:c5:d9:82:9c:
26:f0:82:b1:c2:b8:6c:df:69:6e:f8:7c:4d:70:f7:
93:98:2f:bf:c2:2b:8b:0b:2d:7f:b6:e4:bd:af:97:
98:ca:6e:dc:9c:b8:62:0c:60:35:24:7f:dc:fe:55:
9a:25:c3:de:a9:b8:1a:6c:e8:8f:24:d7:2e:62:57:
09:e0:a3:e1:85:05:67:0a:89:fc:92:7d:d1:8d:60:
57:38:97:da:3e:36:f9:e0:cb:84:21:94:70:78:79:
cc:cf:d0:16:82:60:75:08:69:96:da:43:5b:17:6f:
e0:7a:2e:5e:4c:17:d1:e3:1f:6d:ed:f0:d4:8a:bf:
e4:09:8b:94:45:5d:8b:8e:aa:d9:df:c4:53:48:2e:
b6:d0:95:9f:5f:1f:d3:1a:fb:20:f5:6f:67:a9:18:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8B:0D:45:8E:43:55:3B:8C:F7:EE:96:5C:EE:A1:35:87:F4:5E:14
X509v3 Authority Key Identifier:
keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/qosNRY5DVTuM9-6WXO6hNYf0XhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.252.0/22
IPv6:
2a01:66a0::/32
Signature Algorithm: sha256WithRSAEncryption
af:bd:46:ac:af:91:eb:9d:67:b4:26:12:25:6c:96:62:e3:67:
3f:50:d3:15:e5:b2:6c:a0:79:41:f8:98:d4:c9:9f:fd:f9:81:
3d:bc:b4:05:42:1c:f1:32:65:7f:e9:e0:1b:5d:40:4a:27:51:
88:54:29:2c:d9:4e:ab:19:c3:6e:b8:fe:52:99:01:13:5e:31:
dc:c3:2d:74:e0:b1:13:d3:88:51:3f:40:f1:90:bd:90:a4:c3:
9f:f3:e7:52:8d:e2:66:93:cb:a6:b4:4d:e0:41:5f:3a:d5:32:
37:fd:e3:27:97:73:10:fa:60:6e:10:83:53:64:6a:45:00:ee:
98:12:5a:1f:4f:84:e3:ea:cc:8a:e3:c8:95:7e:17:e2:e7:34:
a2:1e:dd:fc:dc:b4:06:6d:31:3d:b1:47:dd:3e:78:43:76:a9:
dd:e1:72:37:04:b6:64:2f:f6:7c:7a:10:71:05:e8:8b:a3:e6:
b4:a8:59:94:33:57:45:79:67:55:c2:69:c7:00:67:4a:a3:5a:
bf:51:66:81:7a:97:73:f6:4a:26:60:08:dc:92:fa:44:9c:a2:
1b:5b:61:b7:89:ef:be:59:34:89:a7:65:ad:7a:74:2a:55:8f:
1d:a0:ee:85:f7:60:5c:90:42:1f:4c:6a:4f:73:03:be:79:75:
d0:ea:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:35 2024 by rpki-client on console-fra.rpki-client.org