Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/QkrbwVEKGXG6X-v8uisrQ6KAOzk.roa
File: QkrbwVEKGXG6X-v8uisrQ6KAOzk.roa (raw, json)
Hash identifier: AoE6lZLyvUCnasH6k/qlbVbjMeBDC6FxaKOiSNfdyzs=
Subject key identifier: 42:4A:DB:C1:51:0A:19:71:BA:5F:EB:FC:BA:2B:2B:43:A2:80:3B:39
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 069072BE
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/QkrbwVEKGXG6X-v8uisrQ6KAOzk.roa
Signing time: Sat 01 Jan 2022 02:01:41 +0000
ROA not before: Sat 01 Jan 2022 02:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21373
IP address blocks: 193.53.50.0/24 maxlen: 24
193.53.49.0/24 maxlen: 24
193.53.48.0/24 maxlen: 24
193.53.51.0/24 maxlen: 24
193.53.56.0/23 maxlen: 24
193.53.55.0/24 maxlen: 24
193.53.54.0/24 maxlen: 24
193.53.53.0/24 maxlen: 24
193.53.52.0/24 maxlen: 24
193.53.58.0/23 maxlen: 24
193.53.63.0/24 maxlen: 24
193.53.62.0/24 maxlen: 24
193.53.61.0/24 maxlen: 24
193.53.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110129854 (0x69072be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Jan 1 02:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=424adbc1510a1971ba5febfcba2b2b43a2803b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:8e:ce:d7:8d:bd:88:38:3b:27:df:55:d0:
44:31:69:77:16:10:19:c8:8d:b8:82:8f:71:20:0d:
aa:80:f4:05:59:b0:de:2c:04:41:60:1d:48:33:8a:
a7:5d:ba:76:90:c0:c5:3f:4b:06:00:8b:35:ce:3a:
fa:66:4e:86:8e:28:de:71:28:96:fc:1d:c1:4f:74:
b9:84:02:63:77:9c:1c:dc:5d:95:79:f6:2d:7b:5b:
8b:e7:f0:72:5c:8d:ac:66:fe:0f:f2:7d:76:7b:42:
12:7b:6d:45:a3:5a:c8:d6:da:0a:5a:b6:01:10:1c:
64:77:e4:b9:ae:0b:53:b7:63:b1:09:03:b1:37:0e:
14:b1:0d:60:20:8f:d0:4c:55:e4:5a:1c:0d:46:15:
c8:ab:ee:aa:6e:34:03:c5:25:4f:c9:3e:97:bd:39:
47:1f:2e:b4:e4:69:75:ca:ac:05:b3:63:0e:3e:88:
19:01:0c:42:24:2c:07:9f:5e:75:9e:3a:82:e7:b7:
36:01:8f:95:23:01:e3:d0:22:49:de:46:a0:5e:44:
12:66:b6:a4:b3:24:b9:90:cb:4b:48:25:b9:5c:39:
be:1b:91:df:6e:3c:66:aa:3a:d9:6f:27:95:60:43:
43:6b:5c:b6:07:53:b3:19:bc:b8:8e:2b:7c:d1:d9:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:DB:C1:51:0A:19:71:BA:5F:EB:FC:BA:2B:2B:43:A2:80:3B:39
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/QkrbwVEKGXG6X-v8uisrQ6KAOzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.48.0/20
Signature Algorithm: sha256WithRSAEncryption
08:81:a4:04:26:39:3b:a4:38:75:ba:17:ba:a1:9c:ac:b0:f6:
ef:64:21:e2:ae:68:82:02:f9:5d:7b:f8:c0:ae:7e:f0:34:b3:
0f:ef:d0:c5:ad:1f:cb:9b:f8:af:83:b2:84:be:34:ca:e3:85:
c7:2f:6c:ae:af:36:21:40:82:9f:72:c5:e8:39:9d:b5:4e:3a:
be:82:20:ea:63:37:d4:6c:14:9f:d4:59:6d:0f:7f:e0:ea:e8:
1b:4b:2e:55:5f:4f:32:72:31:08:5f:20:62:e4:5a:b2:e4:a9:
5f:2b:d7:83:07:7d:f2:9b:3e:47:79:c5:94:4f:5a:31:59:16:
13:4d:a0:1c:de:9f:66:fe:f8:36:cf:13:de:dd:b6:98:cb:89:
b1:66:e5:30:ab:59:42:6c:84:ce:05:48:f4:22:39:d5:bc:79:
a3:29:ef:c3:b6:30:03:1e:96:0c:78:b3:01:d2:c8:4a:d9:75:
22:96:aa:0f:e5:2a:81:1c:df:8d:ad:be:b9:20:0a:12:82:9b:
0d:fa:d1:50:bd:74:6b:f6:43:88:4b:18:52:25:35:b3:53:93:
3a:21:8f:aa:03:13:32:d2:38:63:52:b8:48:b0:95:7a:6c:1b:
c4:61:25:ce:db:57:ba:5b:34:a6:1c:1c:9b:b0:53:34:27:54:
55:a4:71:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:57 2024 by rpki-client on console-ams.rpki-client.org