Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/qc-BcshQEo2WtA3tn5H2O3ySXCA.roa
File: qc-BcshQEo2WtA3tn5H2O3ySXCA.roa (raw, json)
Hash identifier: C7EcPFLkxFlWoI8bpOJ6gyLTpHK73ForMHE7y6voR7o=
Subject key identifier: A9:CF:81:72:C8:50:12:8D:96:B4:0D:ED:9F:91:F6:3B:7C:92:5C:20
Certificate issuer: /CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Certificate serial: 01824A44DD3F8472CC3299AA0E24AB21E0D2
Authority key identifier: B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/qc-BcshQEo2WtA3tn5H2O3ySXCA.roa
Signing time: Fri 29 Jul 2022 14:03:23 +0000
ROA not before: Fri 29 Jul 2022 14:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39307
IP address blocks: 185.222.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:44:dd:3f:84:72:cc:32:99:aa:0e:24:ab:21:e0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Validity
Not Before: Jul 29 14:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9cf8172c850128d96b40ded9f91f63b7c925c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ad:a1:8b:99:8a:f3:e4:8a:c8:b4:86:d4:16:
d4:20:7b:94:a1:a0:34:9b:5d:b9:74:fb:2f:3b:bd:
30:4f:56:14:63:66:32:26:e3:08:81:61:30:f8:67:
65:a8:c5:87:9a:f9:55:72:1d:67:8e:95:29:c1:b0:
44:e8:8b:80:d4:ff:03:33:c2:ce:86:d7:e9:fd:62:
39:8c:a8:9b:c6:12:a2:a5:33:65:e1:64:aa:6f:3c:
fe:a7:7c:0d:97:6c:95:0c:9a:41:ef:3a:c9:e2:2d:
4a:79:7d:72:eb:ff:a4:d5:5f:34:4f:8f:4d:a6:d5:
d5:2f:42:65:a0:d7:71:7b:97:9b:e9:0f:ef:0b:79:
2e:f1:e7:49:0b:f1:56:30:d2:30:12:b3:7e:a4:f5:
66:86:a8:de:b3:c9:bf:11:5c:83:df:8e:de:62:bb:
1b:e1:12:b3:87:9e:fc:44:42:b3:6f:59:24:87:43:
f7:49:e9:48:4a:5a:9a:53:8e:ed:a8:6a:0b:07:ef:
2c:7e:5d:67:ae:4c:f0:31:4a:ad:b6:fe:d6:e2:c3:
2b:4d:bc:8c:1e:35:8f:24:d0:ad:84:3d:c9:59:d8:
7d:04:1f:a6:1a:89:9b:61:b1:c7:71:d2:0f:a8:9b:
c4:22:f2:9a:c2:30:12:f9:86:e5:92:f2:25:32:c6:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:81:72:C8:50:12:8D:96:B4:0D:ED:9F:91:F6:3B:7C:92:5C:20
X509v3 Authority Key Identifier:
keyid:B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/qc-BcshQEo2WtA3tn5H2O3ySXCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.23.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fd:b0:2d:5a:f3:7f:22:12:b9:db:3f:36:ec:e7:64:cb:63:
5e:d2:c4:63:13:d7:39:f6:63:52:a4:b2:ea:21:bd:c7:f5:e3:
e2:8b:ff:e3:94:9f:21:61:db:f2:fd:93:01:d4:fc:d4:a9:8f:
55:2a:28:f6:99:f1:40:9c:f5:c5:9d:10:7f:cb:f3:dc:a2:41:
72:b4:b5:ab:52:a9:fd:bb:5a:4e:6d:e4:8e:c2:00:de:20:e1:
29:fe:b4:0f:19:5e:54:4d:8c:6e:e8:7f:3f:4e:48:20:2a:9a:
7f:15:5d:50:c7:1a:b8:5b:6f:37:c4:b6:d5:ea:37:1f:6c:b5:
3e:ac:d2:b3:74:f0:d9:fc:b1:72:c9:64:fb:89:0d:a3:13:c6:
58:99:2b:f0:30:db:e4:2e:33:e4:9b:23:c5:ba:fc:a3:96:28:
58:28:bf:08:5c:cd:8a:e9:19:01:7f:1c:ba:17:c8:ac:f8:d7:
2b:b7:35:98:c5:5a:ff:4c:a6:f9:4b:58:54:84:fe:d3:f7:9b:
a9:45:3a:10:d6:6d:41:28:6b:19:c9:32:b5:5f:dd:e1:41:26:
45:b9:af:db:0e:58:3b:7d:db:b9:25:0f:ff:9a:e5:47:52:ba:
b2:08:99:46:87:89:89:6a:c0:e8:1b:9a:43:fd:33:ad:f1:14:
9e:b1:e2:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJKRN0/hHLMMpmqDiSrIeDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDcwMWFmNDNmZDdmODZjYjNlMDRjZTNhYjU0MmU1NTlj
NmQ0YjcwHhcNMjIwNzI5MTQwMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWNmODE3MmM4NTAxMjhkOTZiNDBkZWQ5ZjkxZjYzYjdjOTI1YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh62hi5mK8+SKyLSG1BbUIHuUoaA0
m125dPsvO70wT1YUY2YyJuMIgWEw+GdlqMWHmvlVch1njpUpwbBE6IuA1P8DM8LO
htfp/WI5jKibxhKipTNl4WSqbzz+p3wNl2yVDJpB7zrJ4i1KeX1y6/+k1V80T49N
ptXVL0JloNdxe5eb6Q/vC3ku8edJC/FWMNIwErN+pPVmhqjes8m/EVyD347eYrsb
4RKzh578REKzb1kkh0P3SelISlqaU47tqGoLB+8sfl1nrkzwMUqttv7W4sMrTbyM
HjWPJNCthD3JWdh9BB+mGombYbHHcdIPqJvEIvKawjAS+YblkvIlMsaO/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKnPgXLIUBKNlrQN7Z+R9jt8klwgMB8GA1UdIwQY
MBaAFLjXAa9D/X+Gyz4Ezjq1QuVZxtS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5jQnIwUDlmNGJMUGdUT09yVkM1Vm5HMUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jN2RkMzUtZWYwZi00YzVlLTliYTYt
MDA4NmEwYzRlMThjLzEvcWMtQmNzaFFFbzJXdEEzdG41SDJPM3lTWENBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jN2RkMzUtZWYwZi00YzVlLTliYTYtMDA4NmEwYzRlMThj
LzEvdU5jQnIwUDlmNGJMUGdUT09yVkM1Vm5HMUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud4XMA0G
CSqGSIb3DQEBCwUAA4IBAQBk/bAtWvN/IhK52z827Odky2Ne0sRjE9c59mNSpLLq
Ib3H9ePii//jlJ8hYdvy/ZMB1PzUqY9VKij2mfFAnPXFnRB/y/PcokFytLWrUqn9
u1pObeSOwgDeIOEp/rQPGV5UTYxu6H8/TkggKpp/FV1Qxxq4W283xLbV6jcfbLU+
rNKzdPDZ/LFyyWT7iQ2jE8ZYmSvwMNvkLjPkmyPFuvyjlihYKL8IXM2K6RkBfxy6
F8is+NcrtzWYxVr/TKb5S1hUhP7T95upRToQ1m1BKGsZyTK1X93hQSZFua/bDlg7
fdu5JQ//muVHUrqyCJlGh4mJasDoG5pD/TOt8RSeseLq
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:01 2024 by rpki-client on console-fra.rpki-client.org