Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/QXdFalAZKCDc50p-0zHEJo07mEU.roa
File: QXdFalAZKCDc50p-0zHEJo07mEU.roa (raw, json)
Hash identifier: wBoQ3tsoddQqestFc1/DcKtnrXaJAIG/yCWU+YRSLQQ=
Subject key identifier: 41:77:45:6A:50:19:28:20:DC:E7:4A:7E:D3:31:C4:26:8D:3B:98:45
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 08CA37D7
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/QXdFalAZKCDc50p-0zHEJo07mEU.roa
Signing time: Sat 01 Jan 2022 07:04:35 +0000
ROA not before: Sat 01 Jan 2022 07:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213360
IP address blocks: 193.38.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147470295 (0x8ca37d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 07:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4177456a50192820dce74a7ed331c4268d3b9845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:d1:60:ab:14:86:fa:a4:c8:02:41:23:d4:
f9:aa:7f:25:93:e7:a8:e1:0a:ed:cb:a8:c4:1f:9d:
06:c9:44:0d:45:8b:b4:74:ae:5e:fd:92:24:88:d2:
ee:75:05:1e:0a:00:b2:33:77:75:3b:31:e1:a1:3e:
e5:23:89:84:af:49:56:30:58:25:43:0f:7b:32:ac:
28:fc:a9:06:aa:aa:ac:0c:b1:13:cb:ba:4b:22:8b:
6e:69:6a:6f:4d:72:a2:d4:14:28:0e:bb:90:b7:05:
97:f3:ac:36:56:4d:3c:a4:41:32:74:0e:9d:89:f4:
25:b8:da:b4:3f:76:0d:23:5c:9c:a4:d1:26:ed:b4:
07:fd:34:a0:4b:71:3c:33:a5:c7:26:37:da:0d:2a:
0c:da:dd:d3:d1:ea:df:64:19:96:e6:c8:c4:66:f8:
4d:33:2d:54:f8:e1:b9:d1:3b:b2:fa:13:ad:56:56:
d2:35:3e:4c:b7:b5:d8:42:7c:c4:7c:27:ab:8f:8b:
af:74:fe:4c:48:56:5d:54:f3:4e:89:a8:ef:b5:10:
97:ee:33:7f:5b:bd:c0:e6:e0:b8:29:59:b3:a3:bd:
4a:90:99:4c:fb:37:b3:53:df:a9:22:e1:ce:eb:9f:
c5:47:7f:ca:b8:02:e5:a6:35:df:09:df:9d:24:e9:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:77:45:6A:50:19:28:20:DC:E7:4A:7E:D3:31:C4:26:8D:3B:98:45
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/QXdFalAZKCDc50p-0zHEJo07mEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:91:90:af:d2:32:dd:4b:ad:f3:25:1e:3a:2f:ed:97:10:a0:
1a:68:db:62:9c:c8:48:f3:a6:32:5e:b0:e1:4e:61:80:91:eb:
ea:a0:f0:16:70:fd:f4:27:0d:6a:0f:45:3e:f3:f4:2d:12:9a:
50:62:58:8e:74:61:95:05:e5:61:c8:5c:4b:d7:39:5c:56:c0:
28:5f:83:89:50:0b:3a:f2:33:67:c5:82:1c:37:68:73:53:1f:
e2:55:30:06:fd:6c:ce:f1:33:96:51:24:d7:25:ec:8a:f6:72:
07:8b:57:30:b8:b8:3c:43:a8:ec:79:c4:c6:4c:83:19:15:69:
42:4e:8b:63:1c:12:62:3e:ab:40:b4:63:be:3d:14:e9:f9:d9:
54:bc:1b:e5:9a:33:ce:5f:c4:a8:8c:9f:e6:59:3f:07:64:09:
9f:ac:d2:47:b5:98:85:a9:5f:55:8d:11:67:1b:6f:2a:f9:eb:
64:c9:cd:73:e3:c0:5c:c1:fc:28:11:58:bb:bc:8c:fa:54:dc:
2e:fe:95:c6:88:a1:d8:6e:c8:6e:b7:fa:a9:5c:ba:06:0c:22:
ea:d4:8f:d4:d2:18:cf:5a:f8:8c:ae:42:a1:1c:cc:78:c9:5b:
96:de:6d:41:02:62:a0:d0:64:55:70:a3:31:bd:df:17:fa:d9:
1e:bc:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:27 2023 by rpki-client on console-ams.rpki-client.org