Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Q7H3hDS5TVr6kkzyT0zZ6xz2qnA.roa
File: Q7H3hDS5TVr6kkzyT0zZ6xz2qnA.roa (raw, json)
Hash identifier: GKDqOaUgmvaYlAtOXjKCcWpJttsuOWfo67EwN0CWQRo=
Subject key identifier: 43:B1:F7:84:34:B9:4D:5A:FA:92:4C:F2:4F:4C:D9:EB:1C:F6:AA:70
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17E32EF1
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Q7H3hDS5TVr6kkzyT0zZ6xz2qnA.roa
Signing time: Sat 01 Jan 2022 03:59:52 +0000
ROA not before: Sat 01 Jan 2022 03:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25374
IP address blocks: 90.154.225.0/24 maxlen: 24
213.91.189.0/24 maxlen: 24
213.16.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400764657 (0x17e32ef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 03:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43b1f78434b94d5afa924cf24f4cd9eb1cf6aa70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b4:7a:60:11:68:99:89:d9:db:c1:c1:64:4f:
ec:8d:21:b6:e6:8a:98:b7:c7:d6:41:6d:3a:ef:8f:
ac:4c:d2:81:c0:28:b8:a1:35:48:eb:cf:60:1e:93:
6f:63:8a:98:b3:30:c4:f1:c5:5d:a8:94:07:45:99:
99:d4:b5:4e:b8:0b:75:55:c1:77:d8:df:8f:92:53:
04:c6:f3:2e:d3:2f:61:70:f1:31:02:54:a9:5e:bf:
f4:d9:0c:e7:83:b5:c6:39:a3:39:96:9e:39:74:c1:
90:9d:16:e3:bd:12:7e:a1:85:f6:d1:0f:97:ba:b3:
3a:0a:ac:11:29:fb:17:0d:6a:08:63:24:de:65:fe:
8c:ac:29:7d:63:fb:05:bc:e5:35:97:17:e5:dc:b2:
43:5d:36:d2:1c:ce:24:f1:5f:89:0e:46:c4:fb:75:
ff:6d:68:cb:4a:47:a4:b3:be:c1:04:69:6d:b5:73:
c9:13:91:e5:e4:35:03:cf:bf:66:b0:f4:96:07:b9:
c2:61:8e:90:af:2c:a5:f1:27:53:54:a2:60:8b:9b:
ad:b7:bc:ca:37:92:22:5a:bc:92:af:3b:f9:f5:13:
44:64:6e:a1:af:b1:a9:2d:a8:1d:02:98:39:b5:ec:
a4:fd:16:aa:63:93:e7:b1:5e:fd:38:32:31:02:99:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B1:F7:84:34:B9:4D:5A:FA:92:4C:F2:4F:4C:D9:EB:1C:F6:AA:70
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Q7H3hDS5TVr6kkzyT0zZ6xz2qnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.154.225.0/24
213.16.41.0/24
213.91.189.0/24
Signature Algorithm: sha256WithRSAEncryption
38:28:e6:85:67:ff:78:5b:01:cd:35:10:28:01:8a:08:bc:73:
08:9e:b5:ed:e1:24:65:b1:20:4d:20:a0:c9:bd:6d:34:73:5f:
2f:9f:9a:be:ee:71:b3:07:7d:c6:b1:74:54:26:e5:99:e3:03:
c3:e0:a0:44:64:62:85:60:91:ec:6a:93:4f:47:06:ac:41:d4:
4d:9b:41:56:fc:01:61:e7:27:c5:89:5d:be:fc:21:4d:aa:f2:
0c:96:f6:51:48:2b:5a:cb:66:f4:8d:a2:d8:6e:ee:5a:a3:10:
5f:ff:35:04:5c:ee:32:aa:61:ff:51:80:66:0a:db:1c:d0:b3:
f3:a1:e6:61:1d:b8:bc:30:2d:8c:52:fa:1d:da:21:ad:8d:a3:
8d:df:4d:bc:0f:b2:e2:f1:1f:04:c5:ab:a6:d9:fd:3a:e1:e7:
1d:6b:f7:8c:19:f7:b5:a6:1c:f5:5b:f7:86:a4:14:43:c7:bf:
f2:52:61:a7:22:01:27:ff:5e:9c:dd:de:85:7a:a9:73:56:43:
54:e9:08:3f:5d:0e:6d:ba:0f:e7:95:ae:16:a6:cc:df:ea:06:
78:76:72:3d:bf:c3:a5:76:04:27:ea:a4:7e:27:00:8a:36:94:
ca:6c:43:5a:c2:80:eb:e9:3d:d5:0a:be:0c:5c:94:ae:27:03:
b0:ed:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org