Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qzYpZuYbZ8iUMVhfAYn9zd9Iq6o.roa
File: qzYpZuYbZ8iUMVhfAYn9zd9Iq6o.roa (raw, json)
Hash identifier: ksExEDElrS/3Xr2Glv5vUYzrDUstCdjPOz4YQPGySY8=
Subject key identifier: AB:36:29:66:E6:1B:67:C8:94:31:58:5F:01:89:FD:CD:DF:48:AB:AA
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C686FFD
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qzYpZuYbZ8iUMVhfAYn9zd9Iq6o.roa
Signing time: Fri 04 Mar 2022 22:11:32 +0000
ROA not before: Fri 04 Mar 2022 22:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207898
IP address blocks: 194.233.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208171005 (0xc686ffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Mar 4 22:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab362966e61b67c89431585f0189fdcddf48abaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:45:04:e3:84:90:86:47:a1:46:da:01:71:
b1:df:29:ee:dc:82:ce:b9:3c:6e:5e:ea:c1:b5:c2:
ce:16:f7:5a:3a:cb:3e:0e:42:94:72:fd:37:f4:6c:
25:94:0a:33:10:dc:d3:72:79:61:ac:b0:7e:d0:90:
a8:eb:af:5b:83:b6:7d:2e:47:53:6c:d8:a0:45:f4:
d5:e5:6a:31:8c:25:f8:09:3c:6e:2e:52:89:72:41:
a0:5b:9a:4a:1e:2d:6d:a8:d0:d1:fa:d4:06:19:fe:
95:7f:34:e0:21:f2:9b:8b:41:0a:61:1a:af:23:e3:
83:1e:d9:8e:a4:06:28:80:a1:1d:07:da:76:c4:5b:
60:9d:90:00:03:c2:bc:f5:3f:b1:a7:b8:1b:dc:fd:
d7:0c:6a:f9:a8:7a:82:b3:c5:0b:3d:40:01:e8:28:
82:e1:b8:b5:3a:c8:f8:96:35:2e:10:3d:e8:df:27:
b3:02:9a:39:90:e0:9d:69:23:b8:7c:f5:ad:ff:19:
dd:48:ec:f7:e6:48:88:3d:95:79:e3:fd:91:93:4c:
04:7b:9d:64:06:36:7c:ab:2a:33:12:57:6c:31:51:
39:c5:9e:6e:ee:17:1a:08:39:03:7b:f8:fa:84:5b:
78:37:3f:ff:44:f2:ff:73:37:93:e5:ba:12:6b:cc:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:29:66:E6:1B:67:C8:94:31:58:5F:01:89:FD:CD:DF:48:AB:AA
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qzYpZuYbZ8iUMVhfAYn9zd9Iq6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.5.0/24
Signature Algorithm: sha256WithRSAEncryption
73:75:76:ba:e3:3d:5c:2b:b9:13:af:62:a8:d2:92:24:63:c5:
f0:d0:9a:ab:f7:0a:c1:21:fe:be:2d:7a:30:6f:e1:26:b8:8a:
e3:ff:2d:63:94:05:52:6a:4a:a7:86:55:fb:62:cf:fd:af:07:
83:e9:5c:d8:44:f1:84:7b:de:04:23:9a:14:f6:dd:ad:36:ee:
6b:77:13:3c:0d:04:4d:15:ce:e8:7b:2a:f9:fc:48:f5:91:f2:
18:9c:95:f7:fb:93:01:ac:30:8c:71:1e:cd:6a:53:85:e4:33:
d5:80:23:bb:0d:a0:c1:26:ac:e1:38:49:3d:33:be:8f:8a:0d:
bc:9f:a3:2b:d6:83:c2:7b:35:94:49:18:8a:c7:c4:39:60:3e:
f3:f3:27:93:b3:0b:78:8a:50:1e:46:28:1a:c4:3b:5f:bc:47:
4f:1c:77:d6:6a:44:ad:f5:b4:57:ee:36:f6:17:53:7e:04:1f:
d4:39:98:13:a3:72:b4:c5:20:b7:7e:ef:df:79:65:dd:d4:85:
5c:70:12:a3:28:5f:da:cd:2a:a0:96:7f:5c:a2:3c:6b:23:3c:
78:9f:4d:cb:e7:1f:45:ea:13:d4:04:81:44:6f:ad:54:c4:49:
ba:3d:9b:97:10:2a:a8:b4:8b:37:fc:20:e4:9d:1f:0e:70:6b:
ab:d9:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org