Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/QJXd7JmbSV2PLZLjaqWSaRksUTc.roa
File: QJXd7JmbSV2PLZLjaqWSaRksUTc.roa (raw, json)
Hash identifier: Ak4kfM/mzQuJDmbxXY60ngzBj7TFSgEtk/vjFQI9ThQ=
Subject key identifier: 40:95:DD:EC:99:9B:49:5D:8F:2D:92:E3:6A:A5:92:69:19:2C:51:37
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F7E5506
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/QJXd7JmbSV2PLZLjaqWSaRksUTc.roa
Signing time: Sat 01 Jan 2022 08:05:01 +0000
ROA not before: Sat 01 Jan 2022 08:05:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48724
IP address blocks: 212.193.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259937542 (0xf7e5506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4095ddec999b495d8f2d92e36aa59269192c5137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8b:44:9e:3c:eb:a6:f2:61:c1:d3:14:00:82:
14:9c:51:22:bb:0d:41:ed:40:a7:21:d8:d0:b8:4b:
2e:15:13:c9:bf:41:5e:e4:cb:b3:49:1c:df:4b:92:
1f:83:5a:4c:e1:95:ee:bc:ec:49:1c:4d:c5:b0:96:
c4:6c:3f:a3:a2:98:ca:60:51:39:72:d1:68:37:f6:
8a:3b:21:fc:63:ac:8e:09:47:08:ac:ad:85:12:41:
0c:38:30:50:02:f1:ca:51:70:59:b0:6f:2e:1e:84:
2c:3b:78:37:cc:ab:b7:e0:88:87:98:87:a7:d2:57:
f5:cd:b9:82:7d:af:20:5d:ae:fa:ca:47:f2:d9:84:
50:2c:5e:3c:64:7a:71:77:d1:08:0f:8e:56:cb:2d:
8a:4a:09:fb:3b:37:0d:13:a9:ef:60:78:bd:6b:b4:
08:6a:6a:b7:ea:ce:0d:a0:e2:d3:86:91:02:c0:35:
9f:31:69:87:0a:72:a0:16:ef:47:a1:f4:01:a2:23:
3e:02:a6:1c:e3:7d:94:fc:59:fd:04:2a:ab:28:ef:
14:53:30:27:28:bc:1e:dd:ee:95:12:eb:34:58:fc:
32:f9:8d:07:4b:1b:aa:aa:34:78:cf:f1:ce:dc:04:
01:a1:db:27:c8:0c:b5:1a:8a:3a:12:ff:26:2b:52:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:DD:EC:99:9B:49:5D:8F:2D:92:E3:6A:A5:92:69:19:2C:51:37
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/QJXd7JmbSV2PLZLjaqWSaRksUTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.99.0/24
Signature Algorithm: sha256WithRSAEncryption
24:26:a6:2f:ef:20:96:45:96:b4:3a:ea:1c:01:e8:05:d1:27:
b2:c2:9e:8a:d0:68:a4:80:0d:76:15:fd:6b:5c:79:30:81:f2:
0d:e7:a8:34:63:e9:6e:30:45:a1:11:83:90:ee:fa:6b:37:63:
d6:dc:61:5c:aa:88:c9:be:6a:07:fc:39:96:e6:5b:59:39:1c:
02:de:37:15:70:70:0b:e8:af:95:ee:35:b4:f7:4b:77:c3:41:
a0:b6:c5:05:05:fe:55:8a:8a:48:55:6e:cc:75:59:5a:a8:40:
8c:93:3e:c2:aa:d3:e6:09:14:51:25:da:1b:67:37:6a:e2:01:
c7:cb:1e:dd:29:dd:6c:4e:9b:f3:a7:7f:71:33:8b:be:fa:39:
de:88:6c:67:03:b4:b9:cb:80:0b:02:47:0e:f7:55:3d:85:7d:
3d:b8:1f:16:34:cd:30:8a:f4:d9:ad:07:ee:7f:15:8e:62:3b:
eb:c4:de:ca:4b:0d:d6:87:5e:63:18:9e:8d:9e:a4:63:1a:83:
ac:ca:e6:a5:66:25:e7:6d:2c:39:bb:ca:b9:c9:b7:35:62:03:
ec:cc:cd:74:82:d8:31:33:f1:3f:1b:0f:d5:0d:05:75:41:5f:
ca:bb:f8:88:b5:d7:3c:12:3c:f7:6c:9c:30:ff:dc:c0:48:31:
9e:26:59:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org