Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/Qtp5gh9CIOcPijaLITpEABps-4E.roa
File: Qtp5gh9CIOcPijaLITpEABps-4E.roa (raw, json)
Hash identifier: ba0rDGHvmXa7ypoI4JmWbUi1ZWis5fqoprbOR0LDIXk=
Subject key identifier: 42:DA:79:82:1F:42:20:E7:0F:8A:36:8B:21:3A:44:00:1A:6C:FB:81
Certificate issuer: /CN=d464fcbe7e193d272130756634f6474307480151
Certificate serial: 02392AC7
Authority key identifier: D4:64:FC:BE:7E:19:3D:27:21:30:75:66:34:F6:47:43:07:48:01:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GT8vn4ZPSchMHVmNPZHQwdIAVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/Qtp5gh9CIOcPijaLITpEABps-4E.roa
Signing time: Sat 01 Jan 2022 11:57:06 +0000
ROA not before: Sat 01 Jan 2022 11:57:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211677
IP address blocks: 178.216.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37300935 (0x2392ac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464fcbe7e193d272130756634f6474307480151
Validity
Not Before: Jan 1 11:57:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42da79821f4220e70f8a368b213a44001a6cfb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:df:2e:c4:fb:d9:c2:cb:f1:3e:0c:74:15:
16:b1:40:2f:f1:c1:09:18:9c:32:24:e2:13:c8:7e:
dc:bf:d4:b9:68:91:c4:ba:92:7c:f9:00:7d:58:ae:
27:96:31:ce:db:64:c5:b6:d0:b1:88:e4:88:3b:7b:
a2:81:33:20:9b:61:1f:fa:f1:33:5e:0b:e7:91:55:
4a:cf:b7:7a:68:bc:99:34:8d:84:25:68:e4:68:b4:
eb:74:2b:ce:69:55:2f:a3:fd:44:b9:0d:ef:ad:6c:
2f:70:b9:8a:ac:e4:e1:ee:61:cc:f8:62:1c:7f:76:
f6:b8:98:5b:2b:6c:f1:0d:53:47:cf:75:6f:f2:26:
6f:08:4e:d6:75:9e:24:89:20:40:74:31:01:e1:16:
08:44:59:ef:3a:60:56:73:85:63:5e:cf:16:c1:dc:
2b:3d:8a:e6:c6:a7:a7:28:d7:8f:2f:65:e5:bd:8a:
0e:ac:e6:82:07:bd:7d:bf:20:2a:00:32:19:c7:9c:
9a:f4:1f:d7:89:4d:02:b7:1a:b9:01:a6:83:f5:8c:
0e:4e:b7:43:80:c4:04:b8:5d:ff:c0:c0:8e:62:a0:
fc:a3:08:40:32:f6:20:1d:07:31:7d:f8:17:16:d2:
bf:2f:3d:da:04:12:c6:45:d7:30:bb:41:89:05:6a:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DA:79:82:1F:42:20:E7:0F:8A:36:8B:21:3A:44:00:1A:6C:FB:81
X509v3 Authority Key Identifier:
keyid:D4:64:FC:BE:7E:19:3D:27:21:30:75:66:34:F6:47:43:07:48:01:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GT8vn4ZPSchMHVmNPZHQwdIAVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/Qtp5gh9CIOcPijaLITpEABps-4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/1GT8vn4ZPSchMHVmNPZHQwdIAVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.246.0/24
Signature Algorithm: sha256WithRSAEncryption
94:68:4d:e1:04:3d:55:06:f7:ec:25:a2:9b:48:ab:5d:5e:a7:
df:02:e4:bc:99:82:7f:74:ca:5d:6c:15:d2:e7:6a:5f:ef:5d:
ea:88:59:46:07:65:bd:a5:63:d6:20:60:b4:c7:90:c2:90:a8:
64:08:da:f0:7b:47:61:aa:f0:7f:0a:39:5e:17:04:02:fe:35:
09:ed:42:ab:7e:cf:e9:c0:b4:d4:08:2b:fe:0b:dd:63:16:61:
bb:cf:ef:4a:d9:ae:7b:d1:00:8b:8a:22:55:ec:cf:c8:74:ba:
07:92:9d:e5:c4:15:64:a2:a8:c3:39:54:b9:7f:45:ba:30:f3:
5e:91:ba:a9:83:b1:0f:98:cd:a5:82:0a:a8:76:02:a7:57:ae:
de:db:e2:62:58:31:7c:9c:66:23:60:88:5a:df:db:55:43:53:
66:01:84:93:ed:a9:78:de:fc:3f:6a:7b:dc:69:7d:fa:86:6e:
78:27:85:a3:33:25:d9:a2:01:82:05:99:3a:6b:74:08:47:d4:
c7:16:96:45:45:88:17:d0:3d:0d:ab:ce:4b:af:ec:04:d9:ee:
6a:a3:b3:c6:5d:09:2e:6e:e2:b4:a0:9c:df:39:6c:3a:b5:3a:
41:51:05:0e:67:7a:27:bd:94:77:23:3f:70:79:25:62:dd:cc:
9c:47:d8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:30 2023 by rpki-client on console-fra.rpki-client.org