Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/cqMPJhwB6UV6M04734JJ7flqzuw.roa
File: cqMPJhwB6UV6M04734JJ7flqzuw.roa (raw, json)
Hash identifier: 2hgarsyxdxgur8Rir5Y9kBYlPnN0CfEQfWIQsVwdig0=
Subject key identifier: 72:A3:0F:26:1C:01:E9:45:7A:33:4E:3B:DF:82:49:ED:F9:6A:CE:EC
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 292AF338
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/cqMPJhwB6UV6M04734JJ7flqzuw.roa
Signing time: Sat 01 Jan 2022 12:07:04 +0000
ROA not before: Sat 01 Jan 2022 12:07:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60717
IP address blocks: 176.111.206.0/23 maxlen: 23
185.55.104.0/22 maxlen: 22
185.80.183.0/24 maxlen: 24
2a04:d340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690680632 (0x292af338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Jan 1 12:07:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72a30f261c01e9457a334e3bdf8249edf96aceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:08:69:f1:92:0b:79:b6:78:bb:f3:0e:00:
99:f7:39:78:51:3e:0d:40:9c:87:b1:7c:50:2f:79:
66:d4:4c:bc:f8:ef:13:ee:69:34:63:5c:02:a9:ba:
52:05:dd:71:5a:d8:d6:2b:10:f5:77:04:4a:db:aa:
05:b4:22:a1:1f:06:c9:4a:28:c2:0e:90:40:dd:1b:
5f:e4:c8:c6:2e:2d:20:64:1f:b2:e1:58:56:eb:3f:
6d:17:86:b2:0d:1a:25:98:d4:9f:9a:c0:e6:1e:2c:
2a:55:e2:6c:f1:a2:23:97:a9:2f:eb:93:21:cf:9f:
6a:15:78:49:8b:3d:47:63:86:6e:18:35:dd:98:20:
36:56:d8:8c:34:81:3e:a2:f3:eb:c9:9d:38:dc:e0:
84:ef:e2:b9:29:d1:15:ab:01:bd:5f:4a:85:18:74:
8a:5b:0c:56:20:e5:2d:51:d5:65:d0:92:9c:44:78:
76:9a:1a:8d:b8:91:3a:9c:51:30:9e:41:51:48:86:
88:c5:52:39:50:e0:c8:4b:72:eb:36:52:90:2a:f9:
54:0b:90:16:70:2a:65:1f:d0:18:c7:2a:75:af:af:
e2:55:b9:1b:1c:43:f4:c9:e5:5b:cf:7b:73:f2:44:
a4:a2:1e:7d:55:66:38:05:86:77:a0:af:f9:8f:5d:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:0F:26:1C:01:E9:45:7A:33:4E:3B:DF:82:49:ED:F9:6A:CE:EC
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/cqMPJhwB6UV6M04734JJ7flqzuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.206.0/23
185.55.104.0/22
185.80.183.0/24
IPv6:
2a04:d340::/29
Signature Algorithm: sha256WithRSAEncryption
44:9c:94:ae:d4:a1:4a:8a:db:75:ba:7e:90:ba:20:82:b4:27:
30:d9:ea:a2:92:7c:cd:e6:81:49:6a:f9:11:da:31:64:5e:84:
53:e0:d5:28:dd:90:2f:da:26:3a:b2:6b:2b:81:b9:86:90:b2:
3a:b9:d8:1b:d5:b7:75:7d:93:10:f9:42:6d:06:39:56:e5:82:
f9:65:c6:a0:70:d6:8b:d2:60:a7:d8:2c:3f:91:30:09:42:f9:
f6:44:ef:06:6c:99:02:3d:a3:c6:a8:d0:34:07:fe:43:db:58:
36:31:02:b5:12:21:a9:a7:4b:33:9d:ea:a8:b4:2b:52:75:f7:
fa:f1:c8:c4:52:56:46:b1:38:d2:d2:2c:0a:d6:6a:82:e2:7e:
cd:6f:b2:a8:ce:11:54:a1:ab:e5:93:a5:5a:bc:74:d6:20:6f:
7a:7c:f0:07:0a:c5:01:e6:f4:df:4d:e4:10:fb:15:72:2f:c0:
c8:7a:68:86:bb:60:32:94:33:e6:99:4f:83:b9:ee:dc:08:03:
7d:ea:f3:5e:82:89:14:9c:5b:ea:b7:d3:d8:6b:3c:cc:63:91:
d6:1b:7a:39:57:57:22:cf:3c:ad:7e:d8:36:be:12:72:98:5a:
6c:f1:fb:21:6d:d5:9d:39:c2:78:88:cc:37:1b:b5:e0:84:bb:
e4:ab:e0:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org