Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/qGKkio6K3DXn19abapWfasKfU2A.roa
File: qGKkio6K3DXn19abapWfasKfU2A.roa (raw, json)
Hash identifier: IpQ5N08cKvVc8U+BxzWRW/q8V3DxTwBHycwGXaE6P44=
Subject key identifier: A8:62:A4:8A:8E:8A:DC:35:E7:D7:D6:9B:6A:95:9F:6A:C2:9F:53:60
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 133A584F
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/qGKkio6K3DXn19abapWfasKfU2A.roa
Signing time: Sat 01 Jan 2022 11:56:25 +0000
ROA not before: Sat 01 Jan 2022 11:56:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208042
IP address blocks: 185.243.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322590799 (0x133a584f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Jan 1 11:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a862a48a8e8adc35e7d7d69b6a959f6ac29f5360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:1c:e8:5f:21:0c:75:c5:ad:8e:5e:50:df:
07:24:65:e3:dc:97:11:d9:0a:59:fb:61:0f:11:db:
62:62:68:8d:95:d7:a1:52:e4:dd:a8:b5:28:5c:5c:
9e:f8:80:ac:36:ef:59:50:6b:8f:38:73:66:c9:55:
23:a3:7d:82:f4:53:be:03:c1:3a:a6:8d:a0:65:4a:
27:8d:4a:49:11:d5:73:4b:b1:01:de:a5:a0:b3:3a:
6d:b8:ff:41:8c:5b:87:3d:98:9b:20:0b:d2:8d:4e:
13:ec:e2:58:85:2b:e7:59:26:58:10:15:7d:d8:31:
14:54:c5:95:b0:b0:27:b4:00:9f:9a:f0:c5:51:64:
6e:1f:98:3e:9c:16:4e:ef:84:31:62:29:a4:66:50:
87:ef:2a:2f:a8:d6:6a:47:dc:fc:dc:8d:11:13:ad:
78:7c:70:b9:d8:a2:3f:6d:c7:c9:88:fc:5d:70:21:
69:da:de:aa:2c:7e:59:e7:d4:02:fe:3b:2e:16:91:
ea:39:93:75:66:14:20:1c:12:70:83:77:a3:a8:85:
0b:11:6a:9b:90:47:4d:1c:4c:c8:5c:98:e4:36:56:
3f:97:df:c9:48:d8:f4:3b:57:c5:cc:05:0a:76:e5:
75:15:50:29:fe:85:5d:17:ad:e3:3a:ab:76:73:9d:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:62:A4:8A:8E:8A:DC:35:E7:D7:D6:9B:6A:95:9F:6A:C2:9F:53:60
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/qGKkio6K3DXn19abapWfasKfU2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.219.0/24
Signature Algorithm: sha256WithRSAEncryption
96:48:79:a0:6f:e2:75:c1:a2:1b:bb:b4:19:93:45:a5:be:d6:
a7:7b:c6:4e:43:cb:6a:4d:d0:ce:43:0f:d7:c6:cf:db:0d:33:
56:5b:e7:0c:68:48:45:1f:81:13:b0:8c:41:66:98:ea:29:46:
43:36:d0:d0:4e:5d:b7:b4:e2:56:ef:09:bb:f6:54:e6:89:e0:
ba:76:b7:e7:ef:55:39:22:fa:74:5f:b1:64:0a:3b:1f:23:2f:
40:43:30:d5:2b:9a:9c:e0:bf:41:57:41:32:ae:5a:74:57:17:
90:52:0b:09:8f:61:b4:d5:8d:70:a5:68:e0:e7:61:48:a2:55:
81:53:51:d6:bc:f6:4b:58:fc:c2:a4:b8:ba:e6:2c:ec:f5:a3:
8e:ed:b0:6e:e4:74:01:c9:15:d2:20:75:bf:26:d1:d2:d6:ee:
59:21:29:1c:44:b0:06:f3:8e:06:01:9d:19:f0:68:59:10:e5:
51:c4:3a:7c:aa:e1:20:38:f1:d2:b2:1b:0b:c9:6d:f8:e0:6c:
39:f3:57:da:dc:4e:c4:1c:65:72:bb:48:30:ba:f7:9f:96:4c:
20:d9:f9:18:24:a8:e0:9b:56:bd:88:b3:05:00:88:82:2d:62:
42:55:14:1a:6d:15:38:26:98:57:6c:2f:9f:01:1a:61:54:2c:
d1:04:01:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org