Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/QidAwNUDuIPDSrbwhFBYCWwZgQY.roa
File: QidAwNUDuIPDSrbwhFBYCWwZgQY.roa (raw, json)
Hash identifier: 0uC3XCpYSyBr3p9vRjKD/cBqGnaZoasEJ8SZeMuhwfo=
Subject key identifier: 42:27:40:C0:D5:03:B8:83:C3:4A:B6:F0:84:50:58:09:6C:19:81:06
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 08F2CA56
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/QidAwNUDuIPDSrbwhFBYCWwZgQY.roa
Signing time: Sat 01 Jan 2022 16:00:03 +0000
ROA not before: Sat 01 Jan 2022 16:00:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.140.220.0/23 maxlen: 23
185.242.225.0/24 maxlen: 24
77.83.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150129238 (0x8f2ca56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=422740c0d503b883c34ab6f0845058096c198106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:a6:e5:aa:8b:0d:86:56:47:e2:34:63:06:
e4:f2:9c:b5:d4:85:3f:4f:d7:85:9f:70:06:47:b5:
e7:f9:00:8c:d4:24:2f:c2:52:c0:d0:47:55:7f:90:
db:4b:1f:cb:e0:90:72:57:10:1b:ea:2e:78:5a:7d:
37:93:c9:0e:ab:69:9a:e6:3c:5c:b9:9d:5a:18:36:
3b:01:6d:a1:27:c6:a2:65:30:5c:aa:09:e0:3b:34:
e2:9a:67:3f:0e:20:b3:10:2d:62:17:27:17:b8:00:
72:d0:29:4c:a8:50:fe:e9:b6:8c:e3:9f:2b:04:e0:
44:f7:32:75:f7:38:94:05:96:0d:a7:a0:ce:6a:5a:
51:79:ad:1a:6d:9e:c0:a6:bb:22:48:7d:06:bf:9f:
80:85:2f:5b:ff:06:29:c0:7d:67:c3:62:14:ec:2b:
d4:d7:f6:6a:20:5b:00:36:23:44:5c:e2:0b:46:0a:
7b:a1:b3:8c:66:54:ea:f5:7e:1e:f9:3f:83:aa:9d:
7f:ed:04:2b:8d:6a:16:f8:0a:a0:94:13:97:35:f5:
37:85:ad:8a:35:23:c3:c1:91:78:05:0a:a0:ee:d5:
a1:cc:5a:7b:f1:ad:0e:96:56:03:94:36:e2:5c:ca:
ca:6c:5a:6d:5d:d4:8f:76:94:32:4e:e8:4b:71:1f:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:40:C0:D5:03:B8:83:C3:4A:B6:F0:84:50:58:09:6C:19:81:06
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/QidAwNUDuIPDSrbwhFBYCWwZgQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.220.0/23
77.83.241.0/24
185.242.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5f:b3:79:3c:f2:dc:a4:4e:c8:52:f8:48:45:82:25:15:b0:
90:d8:7e:59:d1:b3:25:c1:86:69:f3:09:68:1e:60:4b:c6:9b:
7e:6e:6b:03:5b:27:07:07:ac:c3:62:a6:77:4c:92:ed:22:9a:
cb:c5:1f:3c:5c:bf:21:1d:b9:42:00:c9:7c:f8:05:db:43:ce:
18:1f:59:49:58:ff:a1:28:ae:86:d4:36:f7:29:7e:2a:16:4d:
1c:92:4e:9f:f9:d6:42:cb:9f:dc:91:38:ab:53:16:e1:01:ee:
a5:05:46:44:20:5c:49:a9:3c:d9:2c:73:a0:84:b5:21:54:e8:
81:e0:6c:f4:96:29:2e:04:dd:ee:57:77:4d:d6:48:94:21:37:
26:dd:42:11:12:39:87:66:95:02:5b:5b:af:2d:b6:e6:1a:9d:
59:0a:72:57:cb:24:c1:51:9f:8c:c4:07:cd:83:01:42:4a:d7:
c3:00:6c:0c:b8:ca:fb:6c:a6:4a:df:2f:f5:2e:9f:15:e3:36:
d7:87:de:2b:15:7b:05:39:e2:56:5e:1f:81:cd:19:c1:f6:7e:
49:7c:c5:7a:35:0e:f6:2e:83:b9:fc:af:d5:9c:3b:73:ae:cf:
a3:95:1e:76:bb:a5:8a:f2:4d:88:e2:c2:33:de:e9:99:69:fd:
ff:9a:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org