Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QZ6CPf6dZmEQc2sLJlxtOzy0kIs.roa
File: QZ6CPf6dZmEQc2sLJlxtOzy0kIs.roa (raw, json)
Hash identifier: yJ2HQbMlcHBbMvYBaLrkFmfrmbZIVaWSEFJhdwwkm0E=
Subject key identifier: 41:9E:82:3D:FE:9D:66:61:10:73:6B:0B:26:5C:6D:3B:3C:B4:90:8B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1EE99322
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QZ6CPf6dZmEQc2sLJlxtOzy0kIs.roa
Signing time: Tue 07 Jun 2022 08:01:20 +0000
ROA not before: Tue 07 Jun 2022 08:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 87.121.124.0/23 maxlen: 24
87.121.122.0/23 maxlen: 24
185.207.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518624034 (0x1ee99322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 7 08:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=419e823dfe9d666110736b0b265c6d3b3cb4908b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:40:d0:8b:2c:72:18:74:d4:f3:18:ad:b5:
85:07:e9:47:92:be:e5:7d:0b:e8:cb:7e:cb:72:19:
2c:d4:1f:ce:23:df:24:cb:94:da:24:99:e0:b9:3b:
16:9f:c9:32:95:7d:0f:51:1f:60:c0:90:5d:ab:d8:
34:ba:c8:bb:40:e6:f1:72:65:e0:f0:f4:80:98:ec:
f2:62:d2:0b:00:0f:40:9d:ec:e9:4e:f8:d7:ce:fe:
f3:5d:7f:29:1a:15:7c:6f:d9:02:19:c6:48:9d:d3:
0b:a4:25:bd:a2:9a:7c:68:c9:30:d2:19:46:07:45:
c7:e8:6a:88:39:40:46:bf:24:5a:b0:e1:82:c8:9f:
bb:d3:11:e8:a7:e0:fb:70:a7:34:86:fd:eb:74:01:
3c:9e:af:a3:5e:42:fe:17:a6:09:24:9f:ca:e6:b9:
24:cd:ca:d6:33:e0:6d:17:dc:51:52:c1:db:4d:ca:
a2:64:5d:23:fd:fe:7e:3c:d9:53:b6:f8:32:1f:1e:
70:6e:02:bf:5f:8e:6e:46:17:44:72:6a:32:51:9b:
cb:fb:eb:78:84:d9:75:64:33:45:03:ad:e6:b8:2e:
b8:b9:d0:e3:16:ce:ba:b5:a8:c0:48:3b:7f:28:e1:
05:ce:58:d4:f2:36:9c:42:9b:0a:29:01:da:76:63:
9c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:82:3D:FE:9D:66:61:10:73:6B:0B:26:5C:6D:3B:3C:B4:90:8B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QZ6CPf6dZmEQc2sLJlxtOzy0kIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.122.0-87.121.125.255
185.207.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:7d:9e:ab:b2:34:be:f1:7c:fe:25:f7:17:d5:2e:c6:93:d6:
0c:c9:28:fc:49:85:b8:57:3b:22:b0:56:ee:71:0f:6b:7a:b2:
10:6b:9a:99:a4:7d:d2:33:60:94:3b:f2:eb:ec:55:34:4a:85:
61:9e:3c:d4:62:26:6c:f1:ec:3c:b9:dc:de:02:7f:6d:5a:b3:
8b:56:fa:c9:92:ce:ca:e1:58:17:8e:71:ef:9a:08:00:10:83:
3e:10:ea:30:a5:7d:0e:8e:fc:13:95:86:30:1f:6d:b0:86:dc:
df:66:9b:e5:ba:e8:23:16:3c:ac:dc:a2:b1:90:d0:45:ec:a1:
a3:fd:89:84:60:d2:7f:96:b5:b1:51:c5:e4:ed:51:61:a5:d4:
b7:bd:a4:31:bb:f8:72:1e:67:23:cd:f4:55:a8:85:69:ac:da:
fe:28:ce:8c:97:76:0a:de:a4:e0:85:4f:c8:a2:5b:84:f7:ef:
57:9f:a6:87:0f:97:3e:a8:2a:d1:9c:f1:1c:91:61:99:74:9e:
a3:e0:8b:a6:47:c8:f1:3b:ca:40:20:e7:a6:83:6f:c9:17:8d:
cf:d5:85:60:2b:9a:c4:bb:a4:ff:0a:4b:26:4e:cb:85:58:60:
ac:b4:7b:a7:c5:e4:3d:b3:13:e3:a8:5a:f4:3b:f3:24:56:e1:
47:a9:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org