Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Qd5R45ohR1oJWX29LAUwneVmG5w.roa
File: Qd5R45ohR1oJWX29LAUwneVmG5w.roa (raw, json)
Hash identifier: yEXFgNSZqba+jUFOoYxAkpnKozKMl8NjozHsCYmu8p0=
Subject key identifier: 41:DE:51:E3:9A:21:47:5A:09:59:7D:BD:2C:05:30:9D:E5:66:1B:9C
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 14786FD3
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Qd5R45ohR1oJWX29LAUwneVmG5w.roa
Signing time: Sat 01 Jan 2022 06:54:31 +0000
ROA not before: Sat 01 Jan 2022 06:54:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41310
IP address blocks: 89.249.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343437267 (0x14786fd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Jan 1 06:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41de51e39a21475a09597dbd2c05309de5661b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:a0:a4:7d:e2:e8:d3:87:7a:d3:d3:3f:1b:
77:0e:7f:59:02:e2:18:f3:a6:57:44:d6:44:60:d0:
15:56:cb:8f:8f:cc:24:c4:af:ba:63:ab:07:fc:04:
b8:b0:91:7f:59:bf:6c:06:89:85:ca:60:8a:ff:21:
8e:a5:ed:ad:08:1c:1f:da:8c:1e:91:76:f8:ed:2a:
9e:df:9c:09:f0:6b:86:2a:24:1b:71:82:4b:cb:7c:
57:ee:11:f2:1f:ed:54:67:91:a7:c4:d9:a1:4b:83:
36:02:e0:78:e2:11:73:f7:8e:9a:e8:4e:e9:32:d3:
0f:0a:b5:7b:6c:50:f6:db:73:c9:aa:2a:99:06:18:
ce:66:34:c0:08:28:cf:72:25:2f:1e:97:94:a3:cd:
c8:4d:a1:43:3b:66:51:38:17:6c:80:ca:ba:a0:3b:
c6:6a:f9:cf:7c:ab:7d:24:82:c2:84:80:35:63:c6:
b2:8f:f5:c0:d0:69:b1:14:e0:85:78:13:0d:0c:4f:
6b:5a:98:82:71:e1:1e:f8:d8:1a:14:f6:c9:3e:1c:
df:4d:a2:f9:77:86:43:fe:b8:70:92:d1:dd:ac:b1:
79:6e:10:14:be:9c:8b:ad:d3:57:f2:fc:86:6c:88:
f6:d8:9e:ac:19:e0:4f:9c:44:bb:85:01:91:4c:be:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DE:51:E3:9A:21:47:5A:09:59:7D:BD:2C:05:30:9D:E5:66:1B:9C
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Qd5R45ohR1oJWX29LAUwneVmG5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:18:df:5a:fa:88:1c:b1:7f:3e:58:fa:9d:62:da:96:04:5a:
1b:c8:8f:4b:ee:42:bd:ad:8a:3b:1a:9e:99:a4:db:64:48:e8:
8b:08:3a:25:93:5d:56:ea:c4:85:29:eb:2d:9b:75:d5:9a:ed:
18:18:41:8e:63:e6:68:bc:09:37:4a:b8:09:82:2f:a6:cc:39:
11:b4:00:77:a8:04:b8:51:0f:23:97:2e:d6:94:3f:0c:de:67:
e6:1a:d5:ce:a4:b4:55:60:76:22:29:07:86:c6:31:4c:0f:df:
2b:58:c4:f1:fd:a9:ba:3f:57:f3:7f:35:f8:29:6f:86:4f:cc:
e7:f1:a7:ea:a9:92:d7:82:4b:05:81:36:b7:28:46:66:2e:e1:
2c:ab:3c:a8:13:47:1e:a0:81:bb:59:c2:ac:8f:ac:3d:d6:31:
4f:42:89:6c:17:a0:a9:b4:45:e1:f6:7b:a2:b7:ba:26:1a:4d:
4e:5c:16:76:ca:73:fe:29:5d:11:0d:92:6c:cf:cd:8e:7c:c4:
4e:89:f3:e8:84:b4:0c:a4:4b:16:26:66:e9:30:e3:6e:20:ac:
82:fc:5a:31:09:fd:53:7c:a8:b7:ed:96:bd:f3:04:9d:2a:b2:
4b:e5:af:a2:1b:c1:b2:25:59:25:b8:e3:33:0e:3d:5d:d5:f3:
59:e9:e9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:00 2024 by rpki-client on console-ams.rpki-client.org