Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QKXlrtRIKp3MeycBM-n5rp2yUGw.roa
File: QKXlrtRIKp3MeycBM-n5rp2yUGw.roa (raw, json)
Hash identifier: hCb6G2kbQsKoDzxW+XUAAB4lqJGuxxlpSNYZHA+FdxQ=
Subject key identifier: 40:A5:E5:AE:D4:48:2A:9D:CC:7B:27:01:33:E9:F9:AE:9D:B2:50:6C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0181D82FA0D2DD3A20636CD12BAAA052B7DA
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QKXlrtRIKp3MeycBM-n5rp2yUGw.roa
Signing time: Thu 07 Jul 2022 10:23:28 +0000
ROA not before: Thu 07 Jul 2022 10:23:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16157
IP address blocks: 194.176.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:2f:a0:d2:dd:3a:20:63:6c:d1:2b:aa:a0:52:b7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 7 10:23:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40a5e5aed4482a9dcc7b270133e9f9ae9db2506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:94:ca:50:6b:3b:40:c6:1e:93:26:c7:7e:
7a:1d:7b:c9:c5:1b:3d:1c:50:9b:87:c3:8d:4e:b7:
7a:2b:fe:27:e9:23:10:cb:b3:6f:32:e8:2c:30:10:
b3:6b:48:b9:8d:76:78:e4:1a:df:bb:1d:a7:c5:a1:
48:85:90:52:63:2f:72:fa:18:97:4f:31:f7:bd:4e:
94:8a:a3:4b:43:3c:de:f0:11:9e:ac:ae:33:67:3f:
6b:df:8d:25:26:1a:0e:47:4b:a1:b3:e4:4b:dd:28:
a6:bf:bc:77:bf:09:f8:d3:db:91:6c:20:c6:f3:8d:
86:33:e4:19:81:0a:40:c4:93:9b:c0:ab:f9:c3:f6:
f5:1b:f6:04:b2:6b:80:07:ff:eb:8a:b5:43:b6:32:
25:e8:31:89:00:1f:21:39:02:3c:92:7e:58:e9:48:
2b:11:27:ae:c6:ca:1b:28:d5:92:42:41:d2:13:ea:
4e:3f:46:e8:7c:22:08:49:34:94:66:08:e7:64:67:
7c:41:bd:1c:c8:fb:73:30:3e:4e:d9:24:72:f1:9d:
94:15:a8:5c:b9:82:bd:1c:d6:83:62:77:7d:aa:fa:
ee:0f:f3:52:9c:65:91:af:6a:b4:79:7e:f3:a9:8c:
04:f7:6c:c1:12:4f:91:62:24:d4:cd:4a:37:e9:ac:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:E5:AE:D4:48:2A:9D:CC:7B:27:01:33:E9:F9:AE:9D:B2:50:6C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QKXlrtRIKp3MeycBM-n5rp2yUGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e6:55:56:df:ec:04:3b:f0:64:18:1a:50:d8:9b:94:27:a6:
9a:15:61:c3:b3:26:34:10:57:66:45:0a:08:3e:54:89:35:d2:
09:c6:68:9c:cf:a7:71:35:a4:ff:ff:24:b0:eb:c3:43:72:56:
84:56:d7:51:42:c5:c1:ce:52:24:c3:c0:57:ba:28:68:0b:d5:
d6:6c:e6:b1:cd:c4:5d:39:74:67:b8:bf:35:cb:77:11:7a:8b:
65:28:6f:5a:90:86:b1:2e:30:68:d7:4d:3c:8a:c2:48:9b:e9:
98:c8:b5:cb:6c:98:53:13:ae:c0:29:0c:8d:0b:1a:56:ad:20:
85:9c:3a:79:de:ca:ba:b1:d2:2b:08:d0:b2:ed:73:70:a5:f6:
cd:2b:58:fb:db:36:5e:22:af:7e:e8:bb:db:fd:9b:cd:30:3d:
1e:49:67:f5:87:88:30:ca:23:a0:5c:ba:3c:af:5c:30:cc:f7:
f7:b7:04:9b:5d:05:f7:5d:5c:e5:70:bb:09:31:e6:49:c0:7a:
50:07:e0:21:14:2b:91:9d:4b:57:3b:87:83:d3:77:87:bf:94:
93:16:04:ea:09:c0:90:4b:23:42:37:bd:59:a3:b8:25:75:b4:
d6:53:5f:8e:f0:dd:2b:80:2d:cd:e5:77:b8:39:40:70:38:a8:
c6:7e:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org