Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qjexSxNxb1bbAtVfREDidXdkAKc.roa
File: qjexSxNxb1bbAtVfREDidXdkAKc.roa (raw, json)
Hash identifier: DGojnga/PjFUqEctMkCOgES3fkOmHiIrkNb//+RuM1Y=
Subject key identifier: AA:37:B1:4B:13:71:6F:56:DB:02:D5:5F:44:40:E2:75:77:64:00:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1DCDB139
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qjexSxNxb1bbAtVfREDidXdkAKc.roa
Signing time: Fri 08 Apr 2022 12:51:02 +0000
ROA not before: Fri 08 Apr 2022 12:51:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397373
IP address blocks: 194.180.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500019513 (0x1dcdb139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 8 12:51:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa37b14b13716f56db02d55f4440e275776400a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:7f:cc:2e:1a:0d:8f:89:5f:ea:33:89:1c:
99:a7:b9:b0:ff:e2:99:32:c5:78:5c:1a:49:1b:e0:
0c:66:24:76:a6:dc:3f:5e:68:ab:83:e4:5d:2c:d3:
11:59:c1:01:b1:0a:33:e8:ba:77:b0:af:a8:60:1e:
3e:d1:96:f9:a7:9c:01:ee:a2:92:79:26:a6:cb:03:
67:b7:40:c5:27:81:6c:47:aa:e9:85:f7:d8:aa:aa:
ae:77:2a:f0:79:be:a2:5c:14:a6:13:e2:79:25:45:
52:d6:85:eb:bf:64:86:ea:7e:b7:46:70:be:58:dc:
53:7d:2c:16:ac:a1:aa:fe:3c:6b:4a:50:4d:f0:47:
c6:2a:6f:42:01:cb:9e:8a:58:3e:5c:e1:8f:f1:69:
60:8a:f7:7c:40:8f:e2:3b:33:4d:7c:ac:02:b7:3f:
0b:a2:35:c1:83:0c:04:07:d7:55:e1:79:da:bd:ba:
56:1e:54:7e:82:d9:0d:a6:ee:d8:dd:53:79:18:7a:
3a:a9:16:d1:8b:35:df:7f:28:ef:90:48:e8:ab:93:
5e:a8:3d:e1:94:42:88:de:1e:a2:f6:38:bc:82:90:
65:d9:c3:bf:b5:3b:27:1f:b2:b0:d5:3f:b0:4f:29:
a2:af:c2:cd:09:e9:a3:2c:2f:f5:e8:b8:14:76:ec:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:37:B1:4B:13:71:6F:56:DB:02:D5:5F:44:40:E2:75:77:64:00:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qjexSxNxb1bbAtVfREDidXdkAKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.36.0/22
Signature Algorithm: sha256WithRSAEncryption
17:29:58:c8:19:ee:ee:e4:ae:08:a1:a1:0d:67:c4:a9:2f:45:
ab:58:37:81:05:54:19:50:7e:72:89:99:03:2f:fa:66:6b:2c:
7f:75:50:df:3f:50:35:64:c7:97:8e:eb:b8:e5:67:f4:6b:28:
79:3d:be:00:fb:77:12:7b:8f:d4:d5:65:15:e9:f5:c0:df:e5:
32:48:1d:ff:22:41:23:e8:e5:9d:fa:48:15:b1:78:ca:36:2f:
47:d6:81:0e:7c:01:9f:14:13:04:16:1c:48:cd:7d:44:30:fd:
c9:9d:06:72:bc:1e:8c:17:70:0d:86:8d:aa:88:95:10:94:c0:
99:ac:fc:40:bb:36:6e:55:27:c5:8b:0b:18:e1:a9:ce:23:e4:
e0:dd:f6:8d:03:d0:55:ef:77:3d:77:a6:82:45:83:55:0f:1d:
90:de:40:77:e8:37:a6:47:34:27:6e:80:15:96:27:8b:4a:d7:
43:5e:67:87:63:e9:eb:70:9f:cd:b8:13:31:d3:b0:16:de:45:
2a:6a:15:d4:7b:4a:43:10:e7:bd:2c:b1:4e:00:4f:33:eb:ba:
1d:a8:7a:de:25:50:d8:93:58:e7:46:d3:77:1b:bc:b1:e4:da:
b3:1e:00:9d:5d:95:7f:e5:2f:ce:5e:ae:ac:0b:fc:51:6b:d8:
f3:ae:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org