Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/qmYWVFlIy55SJcoKrshD9OCx2KA.roa
File: qmYWVFlIy55SJcoKrshD9OCx2KA.roa (raw, json)
Hash identifier: a5pNvt3GeAL3i4ZDEb2i43djZ4xwYgFEBq8ij+I7/QQ=
Subject key identifier: AA:66:16:54:59:48:CB:9E:52:25:CA:0A:AE:C8:43:F4:E0:B1:D8:A0
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 0B9481DF
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/qmYWVFlIy55SJcoKrshD9OCx2KA.roa
Signing time: Sat 01 Jan 2022 05:06:05 +0000
ROA not before: Sat 01 Jan 2022 05:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31615
IP address blocks: 178.224.0.0/13 maxlen: 24
95.98.0.0/15 maxlen: 24
89.205.128.0/17 maxlen: 24
91.141.128.0/17 maxlen: 24
84.241.192.0/18 maxlen: 24
188.88.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194281951 (0xb9481df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Jan 1 05:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa6616545948cb9e5225ca0aaec843f4e0b1d8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:ab:69:cd:d2:8d:b1:85:ec:64:e4:c9:e7:
6e:7e:90:33:34:72:79:8b:72:28:ff:a5:d9:d7:e4:
d3:26:56:fd:99:1d:d0:6b:04:8f:e2:89:29:83:07:
5b:d3:e3:7f:40:7a:d4:75:4a:5f:26:fd:f8:c1:64:
de:eb:cf:ad:3d:9c:f3:86:bf:d0:ba:d8:1b:18:2a:
ff:1b:2d:62:ca:6e:cb:c8:b6:e1:4e:50:56:f7:66:
ce:40:28:15:11:5e:40:d1:9e:31:e4:6f:b6:4f:1d:
08:ce:8f:1f:68:45:a5:d8:90:0c:1d:1c:6b:f0:74:
c4:62:cb:b5:69:6b:d6:60:3e:1e:ed:86:f1:87:6c:
a6:02:21:c6:f2:8a:b4:1c:f3:cf:60:e9:15:37:df:
4e:e6:15:d3:5f:b7:51:7a:5c:b7:bf:b5:e2:11:ec:
60:12:4d:b9:53:29:02:03:27:09:e0:c8:62:74:60:
27:7e:45:c7:95:98:f7:41:6b:d6:27:fd:19:70:ad:
26:ca:58:2c:f9:a6:2f:f3:38:63:f4:64:16:44:31:
9a:3d:a4:74:d5:fe:59:19:3c:c8:63:3f:7c:5b:20:
21:78:eb:89:f3:c0:43:c0:be:e2:dc:32:9a:9d:bb:
2e:fb:11:0d:bd:aa:5e:b9:ff:7d:55:2f:d6:b1:a6:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:16:54:59:48:CB:9E:52:25:CA:0A:AE:C8:43:F4:E0:B1:D8:A0
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/qmYWVFlIy55SJcoKrshD9OCx2KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.241.192.0/18
89.205.128.0/17
91.141.128.0/17
95.98.0.0/15
178.224.0.0/13
188.88.0.0/14
Signature Algorithm: sha256WithRSAEncryption
78:c4:22:be:4d:6c:f8:3a:1e:b5:7d:49:09:4b:9a:3d:a5:2a:
a8:dd:96:3b:b5:cd:02:f0:d5:57:3b:52:e0:86:30:24:c2:ba:
34:c3:bf:c7:d1:05:11:35:71:de:d1:a1:83:e1:6c:6a:bd:e9:
a6:f4:78:f0:13:db:a0:a5:c4:c3:ea:a8:be:c7:0d:eb:ad:b5:
e6:27:2f:9d:21:6b:14:d6:97:38:64:fd:9b:24:c2:27:7a:92:
91:57:f6:f5:4a:df:4c:45:6c:a2:12:ee:68:7e:54:7d:54:ac:
28:4f:4a:bf:67:ef:a4:83:ca:b0:42:5b:3d:da:6b:6d:c3:ed:
f2:e6:31:d4:b7:a4:bb:81:74:d4:02:39:dc:c6:ae:ff:fa:20:
ba:54:b3:33:b3:8d:d1:49:b9:bd:93:8c:1e:72:f9:71:0d:d9:
98:c9:01:c6:a0:90:cf:92:9f:3a:dd:21:4d:83:95:fb:2c:c1:
db:cf:72:4a:ff:70:f5:d3:21:f4:d7:a4:39:23:ba:1f:20:91:
fb:a9:29:78:e7:c9:1a:e4:7c:18:83:53:bc:67:da:d3:9d:09:
cc:80:f8:d2:77:18:de:18:9e:b5:63:ed:39:f6:18:5c:f8:ba:
62:41:cd:d5:02:68:be:60:ce:d3:82:d6:03:b2:8d:59:22:d4:
1a:43:b8:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org