Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/Qi_KfAtlMP8dsL-WukpH8YTabgk.roa
File: Qi_KfAtlMP8dsL-WukpH8YTabgk.roa (raw, json)
Hash identifier: jrllaWwOVZqr/w7uFCIsz6pn2sgibfc4Bv9qzGZuH7o=
Subject key identifier: 42:2F:CA:7C:0B:65:30:FF:1D:B0:BF:96:BA:4A:47:F1:84:DA:6E:09
Certificate issuer: /CN=732944a8538355b2aec76645fd9494488ae702e7
Certificate serial: 01850C358BC01B244189F514B99B161E3250
Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/Qi_KfAtlMP8dsL-WukpH8YTabgk.roa
Signing time: Tue 13 Dec 2022 15:58:33 +0000
ROA not before: Tue 13 Dec 2022 15:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200559
IP address blocks: 2001:67c:2edc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:35:8b:c0:1b:24:41:89:f5:14:b9:9b:16:1e:32:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7
Validity
Not Before: Dec 13 15:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=422fca7c0b6530ff1db0bf96ba4a47f184da6e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:68:23:9f:f2:68:a1:89:04:4f:12:67:dc:5c:
14:55:3b:9b:cb:1a:e7:40:dd:29:78:64:61:e4:5f:
a4:ac:af:8b:64:9f:e8:88:d7:f7:90:71:6d:39:74:
87:c6:2f:37:c2:35:96:41:fc:d3:45:e8:3e:69:7a:
a2:c8:7e:9e:b6:33:fd:97:38:01:2f:21:9e:ad:e0:
c2:d1:1d:15:f2:10:b3:bd:7a:8e:78:d9:29:21:4a:
3f:9a:90:ad:a8:2a:cf:f9:76:4e:c9:6d:e5:94:81:
68:5a:02:63:09:71:b6:5c:65:60:39:cc:8c:1d:89:
34:50:0c:cc:8d:15:d1:3b:de:53:ad:9e:2a:5e:6a:
0e:28:86:aa:b8:b1:bf:94:98:1e:75:10:11:52:af:
f9:54:44:1e:89:b2:8a:4e:88:fa:dd:90:3a:91:ca:
1a:d7:10:32:57:e7:f2:fc:06:82:40:75:40:c1:b2:
6d:31:f1:67:91:3e:37:db:1b:8e:6b:89:8a:47:0a:
af:02:16:ed:03:38:3c:6a:1d:7c:f4:e0:06:50:90:
f2:22:cd:18:06:2e:0c:98:1d:0d:17:25:f0:bf:38:
ac:84:09:22:eb:66:7b:85:2d:0c:d9:ba:02:d4:98:
48:f8:6d:27:70:56:1b:6d:7e:5e:b0:7c:bf:25:cd:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:CA:7C:0B:65:30:FF:1D:B0:BF:96:BA:4A:47:F1:84:DA:6E:09
X509v3 Authority Key Identifier:
keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/Qi_KfAtlMP8dsL-WukpH8YTabgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2edc::/48
Signature Algorithm: sha256WithRSAEncryption
a0:a2:b2:44:ca:33:91:ce:e4:e9:e1:9d:46:32:3a:62:18:61:
41:e7:cb:86:72:b8:69:53:ed:ce:4f:4e:4d:ae:08:fc:ab:6e:
eb:c1:da:f9:9b:f3:1e:c3:a8:bc:32:eb:8d:bf:8e:2e:61:b9:
21:9b:ca:05:0e:a6:c5:72:28:f7:83:37:8e:c9:e4:ab:e5:56:
1b:e4:4a:f9:4c:9d:db:74:a9:c6:67:51:dd:ab:24:01:90:56:
50:95:6a:da:aa:27:ed:de:60:3d:54:98:3e:76:00:f5:dd:a1:
d3:f0:ef:64:67:7d:e7:ed:7c:9e:98:91:85:f7:28:eb:61:ac:
95:5a:26:ba:c0:cf:d7:6e:8f:6b:09:e0:7c:c4:0b:7f:52:93:
56:95:c7:03:9d:99:fc:90:09:9d:22:f7:95:b0:4a:45:b3:f1:
da:1b:27:f2:24:19:85:28:4a:f8:3b:ac:f4:1f:63:bb:16:e5:
5b:3f:26:04:d6:54:cb:a2:aa:af:4f:18:b3:30:83:97:63:32:
d0:23:5e:9a:e3:25:de:f4:65:ac:a0:52:40:74:74:a3:bd:69:
e2:e5:13:03:6f:68:24:cc:30:63:f1:e9:9e:ab:e7:39:80:69:
6d:d6:c7:97:a6:48:78:45:3d:ca:65:b9:89:5e:2d:3b:63:29:
58:6a:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:02 2024 by rpki-client on console-fra.rpki-client.org