Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/qP54u7-0N_4TdOG7_PlB_kXB2Os.roa
File: qP54u7-0N_4TdOG7_PlB_kXB2Os.roa (raw, json)
Hash identifier: kdc8FdayAbKMiZ5fqcA/A/olrLREn9m9SAbrBTP8nAk=
Subject key identifier: A8:FE:78:BB:BF:B4:37:FE:13:74:E1:BB:FC:F9:41:FE:45:C1:D8:EB
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 0181D2E763F93BA4FD7283199B3FA9A603C2
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/qP54u7-0N_4TdOG7_PlB_kXB2Os.roa
Signing time: Wed 06 Jul 2022 09:46:28 +0000
ROA not before: Wed 06 Jul 2022 09:46:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 185.236.125.0/24 maxlen: 24
185.236.124.0/24 maxlen: 24
185.236.126.0/24 maxlen: 24
185.236.127.0/24 maxlen: 24
212.1.219.0/24 maxlen: 24
212.1.218.0/24 maxlen: 24
212.1.222.0/24 maxlen: 24
212.1.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:e7:63:f9:3b:a4:fd:72:83:19:9b:3f:a9:a6:03:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Jul 6 09:46:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8fe78bbbfb437fe1374e1bbfcf941fe45c1d8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:1e:66:47:37:14:27:ef:61:60:ee:e8:8f:
ab:fe:bf:3a:12:4b:73:d1:d0:07:b6:a2:56:38:5a:
6e:b2:c3:db:60:57:14:7d:1e:01:7f:e5:b3:7b:ae:
b8:32:ca:85:31:e3:dc:b0:d8:dc:2e:00:f4:af:68:
99:3b:4a:59:cc:f3:90:36:b4:dc:52:b2:91:cf:47:
00:bc:61:21:3c:e0:38:a1:56:6f:26:f4:20:4d:9b:
33:0c:6b:62:6f:b5:7e:e0:73:d4:db:e5:ae:08:be:
08:ca:67:7f:b0:a8:a7:9b:39:11:b1:96:95:70:7c:
ef:3f:d1:f4:57:5e:58:da:99:4e:0b:9e:2b:f1:60:
0d:ed:f1:28:71:59:10:d5:25:1e:61:41:b0:f7:87:
bb:6f:b7:f9:7e:74:96:da:0a:0c:25:a8:05:82:0b:
6a:e2:a0:2a:99:14:85:f8:3c:30:b2:11:63:f8:da:
86:8e:de:f4:63:51:9c:4b:b9:28:36:c5:04:e7:fe:
75:ed:ef:ce:5e:7a:f1:ec:2d:da:6d:da:f7:87:cf:
24:e5:de:b2:56:9a:14:dc:b0:3e:53:92:ec:db:60:
4f:73:b3:4c:55:f5:bf:ed:ee:ee:57:a8:cf:54:29:
10:2e:a7:e5:38:b6:87:3f:3d:b5:8d:b5:f4:15:2e:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:78:BB:BF:B4:37:FE:13:74:E1:BB:FC:F9:41:FE:45:C1:D8:EB
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/qP54u7-0N_4TdOG7_PlB_kXB2Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.124.0/22
212.1.218.0/23
212.1.222.0/23
Signature Algorithm: sha256WithRSAEncryption
01:69:44:71:bd:11:14:94:5b:a2:a9:02:a3:f2:a6:e0:13:5a:
8d:40:fe:0a:0b:53:5f:f5:a4:2a:93:06:82:6c:83:34:3a:cf:
e4:b4:0e:4c:3a:95:a2:ac:2d:d5:fc:cc:d9:8b:91:dc:a9:27:
84:dc:ca:2b:1b:b3:ad:5b:4d:33:01:90:93:35:6b:17:d5:6f:
61:cb:a5:4c:35:db:63:29:42:cd:df:f9:c5:e5:6c:ba:1f:c1:
5b:d4:10:44:b1:12:ce:1f:7d:11:48:96:c8:88:e0:85:c4:09:
65:6d:2e:65:be:56:b0:b6:d0:f8:15:f6:1e:21:3d:66:46:15:
ce:b2:2c:9f:0f:23:2a:f3:91:34:fb:eb:a7:76:73:cb:45:3e:
06:58:ba:80:46:91:cb:2f:7f:98:95:5e:5a:54:f7:1b:b3:ad:
95:d7:e3:05:05:99:a7:5e:67:d4:d7:ae:b3:d8:98:32:31:8a:
f6:cf:3c:f8:42:9d:b1:dc:a4:17:ff:af:cd:7c:46:8e:e6:3d:
67:71:20:f9:b0:4a:8f:05:df:bd:9d:36:0e:e4:f7:24:9c:46:
a8:84:17:95:87:b7:2a:bf:6c:b7:19:f5:a5:00:9a:e0:b5:3b:
78:9f:90:b0:ef:e0:35:73:87:6c:3b:f9:1a:db:dd:14:18:e2:
6f:d1:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:12 2023 by rpki-client on console-fra.rpki-client.org