Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/qzZ-FtjrsFqHmrBfYZYVMyP6XPQ.roa
File: qzZ-FtjrsFqHmrBfYZYVMyP6XPQ.roa (raw, json)
Hash identifier: sW64q63zPive+OMghsQKes9vPubMsN+2uena9SyMrzE=
Subject key identifier: AB:36:7E:16:D8:EB:B0:5A:87:9A:B0:5F:61:96:15:33:23:FA:5C:F4
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0E3A1937
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/qzZ-FtjrsFqHmrBfYZYVMyP6XPQ.roa
Signing time: Wed 20 Apr 2022 06:37:53 +0000
ROA not before: Wed 20 Apr 2022 06:37:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50374
IP address blocks: 109.236.240.0/24 maxlen: 24
109.236.241.0/24 maxlen: 24
185.216.100.0/22 maxlen: 22
45.146.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238688567 (0xe3a1937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Apr 20 06:37:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab367e16d8ebb05a879ab05f6196153323fa5cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:f5:c7:8a:79:ff:b1:3a:6e:d8:3e:ee:55:
98:66:5a:82:ba:25:87:3a:38:28:34:c3:4c:df:85:
db:1e:52:d9:cc:a2:1d:31:46:95:2c:6c:4e:62:16:
40:4b:18:dd:24:4b:72:e8:45:40:31:77:9c:ea:45:
fe:b1:9f:4e:92:5f:d4:e8:e2:e7:e2:10:0a:d3:a6:
af:84:52:5e:c5:6d:98:10:ff:7f:80:66:e8:a4:3b:
4e:19:6a:27:25:68:77:5f:98:4d:57:ce:b5:01:a0:
8a:8c:1e:e2:ac:57:99:2b:01:be:a2:21:c4:a4:7b:
9f:19:62:99:bc:ad:97:ae:ec:9d:5c:3c:d9:ec:df:
9a:a1:a5:73:44:61:2b:ea:96:89:bd:6f:1a:a1:1d:
df:0c:4f:f4:f1:fa:f2:9a:42:03:d6:ed:8f:a8:59:
32:2f:43:6a:2b:91:e7:f8:bc:cb:7a:83:e2:fe:82:
4a:00:dc:8f:44:e7:c3:10:a1:f6:34:56:ca:01:47:
ea:7c:39:b5:d7:ba:8a:e1:58:6b:12:1e:f8:12:00:
e5:43:c9:e4:96:49:b1:21:ad:4f:04:c3:76:ff:76:
22:cf:8f:8a:25:b8:a3:0b:78:51:bb:04:c2:10:dd:
99:11:41:8b:e2:0c:e0:2b:92:53:26:5f:1c:de:48:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:7E:16:D8:EB:B0:5A:87:9A:B0:5F:61:96:15:33:23:FA:5C:F4
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/qzZ-FtjrsFqHmrBfYZYVMyP6XPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.64.0/22
109.236.240.0/23
185.216.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:2f:43:5d:9b:f8:08:52:0d:25:89:8e:59:d9:b9:1c:fc:76:
b8:58:e4:6f:ab:23:68:9e:ef:12:4b:3d:e2:a5:a1:5c:89:02:
84:aa:29:2b:af:e3:b9:68:dd:bc:d8:4a:7b:2b:10:f3:45:19:
ee:87:0d:c1:39:c1:cb:8f:e6:35:d2:e3:f4:68:aa:a9:4b:b5:
b8:ed:9a:d0:b8:39:8e:2b:5c:8e:7d:8b:ca:10:0e:d8:2c:b9:
3f:c6:33:f6:3e:28:98:35:15:3f:11:c7:d5:4e:6d:9a:fd:89:
18:3e:cb:2f:d1:6e:ad:0f:56:b3:6b:f2:ae:2f:58:f3:29:f8:
cc:fd:66:79:b4:2d:16:53:a5:e7:1c:ec:d5:71:73:72:0c:2c:
bd:b6:4e:15:e8:c6:52:e5:cb:ba:f2:a3:15:56:96:dc:6c:85:
67:a2:0a:8d:78:50:b8:c9:e5:eb:b3:39:9f:c1:88:e2:e3:ae:
e6:01:db:02:0b:5d:a9:bb:4d:f2:79:79:bb:d0:48:ba:c0:ae:
6d:ed:1e:14:59:ce:00:c7:65:96:24:f0:7b:4c:3c:2f:c7:a8:
95:3f:61:e3:6e:d1:7a:c3:c3:ca:bd:a3:68:d6:fb:3c:5f:84:
e3:ca:4c:31:6a:d5:24:9d:40:9d:6e:05:4a:a2:00:76:4b:8a:
90:52:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:28 2024 by rpki-client on console-ams.rpki-client.org