Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/qzDX5popdDb1-nA9tvFUHH7D6uA.roa
File: qzDX5popdDb1-nA9tvFUHH7D6uA.roa (raw, json)
Hash identifier: 26zETCKwJ+U1DG4dA3aij6FL4Go3ZNdPNsIzNecJ+N4=
Subject key identifier: AB:30:D7:E6:9A:29:74:36:F5:FA:70:3D:B6:F1:54:1C:7E:C3:EA:E0
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: A6113D
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/qzDX5popdDb1-nA9tvFUHH7D6uA.roa
Signing time: Sat 01 Jan 2022 00:52:40 +0000
ROA not before: Sat 01 Jan 2022 00:52:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212435
IP address blocks: 193.163.76.0/24 maxlen: 24
2a12:4b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10883389 (0xa6113d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Jan 1 00:52:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab30d7e69a297436f5fa703db6f1541c7ec3eae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:c2:d0:ac:f3:1f:f8:bb:cf:ec:5a:7f:9a:
fb:7d:58:70:ed:48:d0:ff:eb:74:fa:fe:3f:d2:1c:
da:c9:ce:1e:2a:ce:d5:6d:6a:50:4e:c8:2a:f0:55:
f7:3e:9c:3b:a2:7d:3f:d3:a1:40:b9:62:88:cc:08:
a7:55:5a:4c:c5:17:c7:52:1f:1b:08:b9:60:08:3a:
77:6a:10:ec:3a:c5:22:c9:46:8b:4f:b9:de:a5:19:
da:10:7e:93:31:e8:47:45:3f:ba:f6:eb:5d:d6:b9:
06:72:60:b3:ff:72:68:d9:a5:ae:12:c4:7c:91:17:
f1:ec:a0:d1:ea:a6:17:2a:77:6a:f0:51:36:0c:44:
01:2a:23:4e:2b:2d:0d:1e:cc:28:f5:f1:a6:ab:5c:
02:09:5b:8d:d3:65:9a:a4:07:ce:2a:52:1b:4e:20:
04:ea:4c:7a:e7:51:e2:f4:dc:f7:53:cf:d5:d9:29:
e2:a4:d8:2c:56:f9:fc:0c:24:8d:aa:8b:fa:9e:62:
c7:04:a1:0c:ee:46:1a:53:9a:c2:82:02:90:b8:60:
50:64:a5:dc:b2:d0:11:e4:c2:c3:f2:4b:2a:78:d0:
07:e7:8f:27:aa:94:f1:04:54:ab:13:3d:d5:cc:31:
c5:59:f3:bb:ee:16:56:18:f3:d6:ac:00:09:5c:09:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:30:D7:E6:9A:29:74:36:F5:FA:70:3D:B6:F1:54:1C:7E:C3:EA:E0
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/qzDX5popdDb1-nA9tvFUHH7D6uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.76.0/24
IPv6:
2a12:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
69:9a:18:f2:fa:9f:8d:ea:ec:8c:a6:52:dd:32:dc:a0:e1:17:
dc:39:d2:46:52:e6:cd:55:80:af:5c:c5:0e:54:7e:50:f1:62:
a0:17:8c:ea:df:9b:cc:3c:c4:76:bb:c8:6a:98:e4:ba:ed:fd:
cd:f9:14:6b:20:31:e1:70:1a:3d:cb:e3:7d:fc:ab:1d:e2:a1:
8b:ec:6a:ee:fb:f2:04:ad:3d:30:51:b4:6b:b2:1a:22:ad:26:
50:42:3b:ad:a2:9a:92:31:86:f5:69:ec:3e:65:11:7b:a2:06:
5f:8f:d2:ab:f6:58:d9:d8:db:c9:0d:5a:21:8a:1f:65:bd:aa:
4c:dc:88:a7:13:d2:64:82:a9:f8:f7:b6:a8:44:28:42:ad:f2:
cf:87:f9:7d:03:43:c3:90:83:c0:29:d2:5d:6a:60:43:f5:45:
35:0a:e9:89:e0:0e:fa:0e:9c:3a:7b:3c:58:00:6b:51:9e:eb:
bf:40:a9:69:66:33:d6:74:07:4e:2b:54:36:b0:d8:20:98:6c:
a8:c1:93:46:26:40:a7:97:2e:80:7e:b3:6c:3e:13:18:c9:46:
5f:45:92:fb:8c:42:47:b0:50:af:ac:18:20:f8:98:48:8c:c4:
5d:c8:c7:bb:50:b6:9a:4e:90:44:49:4a:1a:49:67:48:ce:b9:
2b:b0:05:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:59 2024 by rpki-client on console-ams.rpki-client.org