Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/qvyM8_OpBR_EoD4Of-eq2qcxhE4.roa
File: qvyM8_OpBR_EoD4Of-eq2qcxhE4.roa (raw, json)
Hash identifier: E2DMlhrveg9eJjJzYU5mtPSY1+jeaZ1Y9EH06lgqxEg=
Subject key identifier: AA:FC:8C:F3:F3:A9:05:1F:C4:A0:3E:0E:7F:E7:AA:DA:A7:31:84:4E
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0184C7F78F8F8CC9DDE6F4E4A7A3A0749FC5
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/qvyM8_OpBR_EoD4Of-eq2qcxhE4.roa
Signing time: Wed 30 Nov 2022 09:56:40 +0000
ROA not before: Wed 30 Nov 2022 09:56:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 31.129.21.0/24 maxlen: 24
31.129.30.0/24 maxlen: 24
45.8.99.0/24 maxlen: 24
77.83.116.0/24 maxlen: 24
77.83.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:f7:8f:8f:8c:c9:dd:e6:f4:e4:a7:a3:a0:74:9f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Nov 30 09:56:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aafc8cf3f3a9051fc4a03e0e7fe7aadaa731844e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:7a:17:a7:18:a7:bc:64:ac:ea:7d:1e:c6:
c9:4d:2a:08:11:41:c0:d9:b5:86:58:5a:e2:43:b4:
41:fc:12:1b:f2:3f:0b:6b:e5:da:94:8c:75:99:01:
ce:95:34:82:da:1f:47:dc:0e:68:2b:30:9f:fe:b3:
de:ce:1f:7c:12:24:12:9f:56:f1:94:34:97:3e:b9:
b3:a8:bb:64:fc:12:45:4b:34:a4:ef:9b:cb:79:28:
25:cc:66:ae:3d:b0:64:13:0f:07:77:34:1b:57:f9:
bd:64:c6:72:b0:63:09:0d:2b:95:67:2a:68:58:de:
e0:05:8c:b7:4f:d9:06:4d:dc:bd:2b:02:de:45:7e:
30:25:c2:49:f1:40:57:91:fb:9d:6d:2d:6d:b2:d5:
ba:47:d6:d9:66:ae:64:6d:4f:d3:cf:a6:8a:b7:bf:
99:43:0a:eb:41:02:07:34:a2:e8:05:d6:b4:62:88:
6a:05:4a:3d:51:2d:39:2e:4d:2f:93:67:0e:40:21:
e5:61:df:f7:65:81:b7:c9:17:95:bf:61:fc:db:4b:
0a:62:5b:73:da:e9:ca:3a:4b:57:7c:ea:74:4b:43:
7b:aa:8f:93:0c:8b:89:0d:3d:13:30:df:25:97:57:
eb:b8:dd:2e:66:6c:2c:26:34:bd:44:ee:e1:33:a8:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:8C:F3:F3:A9:05:1F:C4:A0:3E:0E:7F:E7:AA:DA:A7:31:84:4E
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/qvyM8_OpBR_EoD4Of-eq2qcxhE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.21.0/24
31.129.30.0/24
45.8.99.0/24
77.83.116.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:fc:e2:b6:a1:69:cd:94:ed:0f:ba:16:4a:19:0e:f2:b2:63:
5f:b0:5b:8e:dd:c8:c2:bc:90:3f:da:88:09:09:87:e4:25:b7:
70:e1:a8:3e:b5:57:ad:99:a8:60:7e:45:2b:d1:9d:5c:20:82:
cc:d8:97:a5:3b:80:ae:84:50:88:50:66:2f:75:cf:38:47:58:
ca:69:63:ed:3c:42:bc:29:52:ac:f4:c0:fc:58:8e:54:41:0b:
a9:c7:39:0d:7c:c5:4c:20:af:04:05:cf:3b:ab:ef:ca:e4:72:
44:e4:8e:8d:29:8c:9d:16:68:23:39:68:25:db:32:db:97:7c:
3e:72:6a:f4:c2:fe:3d:f5:c7:79:27:ea:7c:6f:c4:40:72:72:
aa:56:c0:36:2c:fd:71:95:d5:21:be:8d:7f:78:74:19:03:81:
ea:ef:80:3f:87:83:8e:e6:7c:c2:98:f8:59:3e:6b:db:e0:c7:
e9:86:3d:41:4b:ec:8d:aa:c6:f1:aa:1e:67:5e:45:77:11:d3:
e8:cb:85:ae:7d:41:f5:f7:54:5b:dd:68:bd:85:2e:d5:4a:2e:
00:93:08:91:d1:c1:0e:36:2e:47:2a:64:8b:89:bd:f2:af:c8:
47:52:81:ca:4f:fa:c0:ff:2a:73:90:57:ab:ce:4b:e6:06:93:
2b:8e:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org