Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/qM-XiZA0kDgq091qQuSIGyvKR3Q.roa
File: qM-XiZA0kDgq091qQuSIGyvKR3Q.roa (raw, json)
Hash identifier: VWMFCYi8/6F0N3uF82Ik1xGtEmuzvt+LT+ula52AG7Y=
Subject key identifier: A8:CF:97:89:90:34:90:38:2A:D3:DD:6A:42:E4:88:1B:2B:CA:47:74
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 0185368B63912F606503A22E60B50867B461
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/qM-XiZA0kDgq091qQuSIGyvKR3Q.roa
Signing time: Wed 21 Dec 2022 21:16:22 +0000
ROA not before: Wed 21 Dec 2022 21:16:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 195.234.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:8b:63:91:2f:60:65:03:a2:2e:60:b5:08:67:b4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Dec 21 21:16:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8cf9789903490382ad3dd6a42e4881b2bca4774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:19:58:93:85:ad:82:ea:36:19:41:b8:59:
86:cf:5b:94:a7:4d:52:b6:31:0f:fd:f3:8a:97:90:
52:7f:5d:60:59:75:00:fd:46:fe:e7:b5:e5:3f:0d:
2a:ac:df:06:f8:3b:19:5d:60:e6:71:08:4e:69:dd:
d6:5f:5a:e1:ad:50:89:88:e8:2a:27:e7:80:11:e1:
4b:76:be:f6:e8:51:7f:9a:fd:fb:36:48:c1:c5:14:
b7:73:e4:39:e6:a2:f9:60:47:16:a5:81:28:d5:8e:
ba:2c:67:4e:e7:e3:62:52:ba:30:72:01:65:b9:5d:
bb:98:d9:0f:0f:e5:4f:41:40:17:6e:df:5a:a8:d0:
34:5e:1a:8d:96:68:cf:03:27:42:7a:34:e7:07:0d:
7d:0f:ab:37:70:52:d3:ac:bb:25:e6:df:9f:79:91:
16:ac:44:0b:98:d6:c7:21:65:40:92:ad:d0:c1:6e:
02:5f:2c:cd:7b:b0:a3:c1:14:75:2a:eb:aa:13:06:
6a:90:4e:42:03:88:47:2f:89:eb:5c:70:ec:b3:04:
39:04:1c:73:6c:17:f6:19:72:ac:f0:43:43:16:f7:
2a:22:c3:e1:f7:47:b4:35:97:86:61:1b:27:cc:b5:
a9:8b:f4:36:97:19:43:c8:6f:aa:cb:c1:bc:db:05:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CF:97:89:90:34:90:38:2A:D3:DD:6A:42:E4:88:1B:2B:CA:47:74
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/qM-XiZA0kDgq091qQuSIGyvKR3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.153.0/24
Signature Algorithm: sha256WithRSAEncryption
09:cf:05:10:f3:5f:1e:1e:06:6b:c3:cf:66:bd:8a:69:37:8a:
bb:20:d1:0a:35:df:ae:22:5d:db:41:ea:5d:d0:1d:95:77:46:
bd:7e:6d:df:e8:b0:1d:f0:9c:3d:5d:f1:81:d7:9c:08:fa:d0:
97:72:03:6a:a1:f0:3b:d7:af:b6:3b:f1:eb:9a:8e:a8:b1:99:
06:26:97:6b:3d:98:7a:91:ce:ba:1a:a3:43:58:89:d5:d1:f0:
40:fa:0c:88:1f:34:e7:ee:88:2f:f2:ec:c8:d8:0c:0b:b1:1d:
fd:09:cc:b7:32:e8:a2:2b:3b:38:ec:9a:3b:97:27:32:c9:4f:
bd:4b:b9:f1:3b:bc:74:57:21:62:ee:7f:27:9e:c9:86:49:7a:
ed:78:84:35:eb:01:46:ab:c0:21:63:99:dc:98:56:01:5e:fc:
e7:49:75:da:42:ec:b8:15:a0:6d:ae:69:af:2f:90:cd:12:a2:
2f:89:73:df:a5:14:08:a8:6f:b2:5b:ca:56:24:48:1f:a5:22:
69:d1:ba:7a:c7:47:40:65:00:4a:b3:0f:e9:8e:17:7b:16:ab:
55:d3:64:85:f1:bb:b9:30:93:83:a0:8b:96:42:e9:c4:da:a6:
b6:d5:3e:d6:01:17:9a:e3:4b:85:4a:93:08:9f:d8:9d:ce:56:
57:20:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:18 2024 by rpki-client on console-ams.rpki-client.org