Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/QNa-RbLQEW8b7rCiulzwi-RCZeM.roa
File: QNa-RbLQEW8b7rCiulzwi-RCZeM.roa (raw, json)
Hash identifier: N1PLbDKrEN1Om6LgdtmivEWfWJtBahETp04jdKeRMew=
Subject key identifier: 40:D6:BE:45:B2:D0:11:6F:1B:EE:B0:A2:BA:5C:F0:8B:E4:42:65:E3
Certificate issuer: /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial: 0183EB3523FD0160A8CEE260542C6269D008
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/QNa-RbLQEW8b7rCiulzwi-RCZeM.roa
Signing time: Tue 18 Oct 2022 13:07:51 +0000
ROA not before: Tue 18 Oct 2022 13:07:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 193.169.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:35:23:fd:01:60:a8:ce:e2:60:54:2c:62:69:d0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Validity
Not Before: Oct 18 13:07:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40d6be45b2d0116f1beeb0a2ba5cf08be44265e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e0:df:ca:14:66:02:fb:b9:39:d0:19:40:38:
f9:1e:14:ee:eb:e2:fa:e3:70:57:7f:7d:fb:0d:72:
3e:83:4d:79:d9:b4:99:83:aa:e9:e6:07:78:f1:64:
a2:d0:ad:33:b3:49:bc:66:7d:68:4e:03:87:d4:d5:
8d:5e:47:6d:f4:74:4c:5f:33:43:a1:5e:75:7b:2e:
e0:34:40:c7:5c:81:08:88:bf:27:07:27:de:86:21:
24:ec:c5:2b:82:cb:46:ca:d7:ed:d1:a4:a1:e9:c1:
79:79:ca:30:df:5f:43:f9:aa:a0:1a:16:a9:75:87:
f7:f1:43:72:a8:9f:83:17:4a:cc:f0:6e:fd:78:2e:
1e:c3:6d:30:79:74:a5:a0:f8:0f:a5:97:ad:cc:ed:
89:c9:1f:ad:48:41:de:5a:35:b6:a8:d9:43:d6:85:
cb:30:e5:51:d5:9c:9d:cd:5e:c9:cb:4a:40:c6:3a:
41:8c:b7:a8:83:aa:84:c4:e7:05:d6:d8:8b:c2:1f:
0c:ea:4e:b7:f4:b3:5e:25:da:0b:14:85:70:84:1c:
28:84:14:10:68:85:d1:84:6e:65:af:ae:0b:aa:7a:
32:ad:29:7e:f2:f0:4d:1c:e3:b9:79:31:40:eb:b8:
4f:d7:46:29:ca:42:c3:4a:d0:7a:51:5c:4c:ee:dd:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:BE:45:B2:D0:11:6F:1B:EE:B0:A2:BA:5C:F0:8B:E4:42:65:E3
X509v3 Authority Key Identifier:
keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/QNa-RbLQEW8b7rCiulzwi-RCZeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.59.0/24
Signature Algorithm: sha256WithRSAEncryption
14:96:02:1e:35:a9:6f:ac:fb:c3:28:9e:7d:92:51:29:ac:91:
2c:26:05:bd:20:41:b7:0f:fc:f5:d2:29:7a:c9:cd:9c:f0:f4:
d0:d0:21:84:9a:52:76:3d:b6:d0:8b:99:74:63:5e:9c:ce:d6:
88:cb:70:85:b0:75:5c:a6:e4:da:dd:49:6f:0b:e2:97:d6:ba:
27:3b:11:e3:7e:65:f7:a2:ab:83:4c:d8:f6:f8:7f:36:e3:ea:
2f:5f:1d:01:28:0e:4c:b9:22:46:0d:31:4b:ed:f0:bf:f2:c5:
68:87:fb:4b:da:9c:50:bf:3f:ea:60:ed:e1:80:1c:1a:d5:07:
81:59:bb:a2:95:73:96:82:1c:58:2b:e2:15:65:79:d1:ae:58:
43:53:5b:84:54:f7:c2:a4:7c:57:97:a4:5d:4d:4c:52:f4:e4:
e1:c2:27:a6:6b:c7:00:e2:46:53:a8:cd:14:30:17:c6:4c:e8:
a9:31:6d:14:2b:05:a3:60:c5:1a:4a:d5:a2:8e:e7:98:6b:65:
81:e2:fd:e3:47:76:02:7a:c7:89:8d:17:bb:28:88:c0:ec:44:
4f:31:3f:41:35:96:87:87:85:01:69:48:92:ee:d1:64:7d:55:
17:77:70:f8:49:f0:60:1b:eb:a8:97:e8:3a:69:c0:bb:ce:4a:
b6:46:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:58 2024 by rpki-client on console-ams.rpki-client.org