Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/qvnO-PW2_obeo96e2SR1VTtbYMA.roa
File: qvnO-PW2_obeo96e2SR1VTtbYMA.roa (raw, json)
Hash identifier: JlDU1iRbSueV7RZVRfBfQtI3lGnP3/F6Qbx6wKUQ3bc=
Subject key identifier: AA:F9:CE:F8:F5:B6:FE:86:DE:A3:DE:9E:D9:24:75:55:3B:5B:60:C0
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 0C064907
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/qvnO-PW2_obeo96e2SR1VTtbYMA.roa
Signing time: Sat 01 Jan 2022 10:05:03 +0000
ROA not before: Sat 01 Jan 2022 10:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49028
IP address blocks: 193.203.52.0/22 maxlen: 22
185.252.236.0/22 maxlen: 22
185.252.236.0/24 maxlen: 24
185.252.237.0/24 maxlen: 24
185.252.238.0/24 maxlen: 24
185.252.239.0/24 maxlen: 24
2.59.188.0/22 maxlen: 22
2a0c:2dc0::/29 maxlen: 29
2a09:f7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201738503 (0xc064907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Jan 1 10:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aaf9cef8f5b6fe86dea3de9ed92475553b5b60c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:fd:cf:35:cb:e6:b2:a9:86:8f:d1:33:94:
04:70:d1:44:44:19:34:d5:33:5c:15:c6:ac:f9:a4:
c2:2c:ff:33:98:29:91:b0:b1:3b:ba:14:aa:d7:b5:
33:3f:94:63:db:5e:f9:a1:88:af:dd:ad:41:c8:3a:
51:1f:44:17:ab:56:af:53:bc:41:a0:e3:11:1d:4c:
8e:8c:fa:10:28:ce:1c:2d:eb:0e:6d:55:82:74:c8:
78:a7:84:07:34:1f:66:4f:4c:be:0b:7f:a7:0f:24:
e4:09:e6:f3:a6:a3:81:c7:6a:e9:69:f5:f9:50:db:
dc:06:03:f3:6a:d6:7f:db:16:fb:60:00:74:49:93:
35:9a:82:81:0d:65:f1:b7:c6:45:99:ac:46:b3:54:
a7:73:e7:ee:74:a7:58:f5:5e:00:2e:1f:87:9a:cf:
6b:b6:d7:89:da:54:1b:33:70:f0:d2:61:b7:a5:33:
a3:00:c8:63:25:25:ef:34:d8:76:1a:f2:8d:44:16:
6c:8f:6d:f0:9f:00:23:5b:64:b1:f6:89:4e:80:48:
83:93:35:93:bf:5f:82:2c:15:92:1b:41:3d:d2:d3:
9a:ea:7a:d8:4a:0f:9f:35:a3:3d:fb:79:74:a9:d7:
c9:23:d1:b9:34:e7:ff:dd:23:ea:18:ff:a6:00:2c:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F9:CE:F8:F5:B6:FE:86:DE:A3:DE:9E:D9:24:75:55:3B:5B:60:C0
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/qvnO-PW2_obeo96e2SR1VTtbYMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.188.0/22
185.252.236.0/22
193.203.52.0/22
IPv6:
2a09:f7c0::/29
2a0c:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
30:8b:f0:9f:26:1d:9a:0f:b3:b2:b8:5d:95:fd:5c:e4:03:85:
5b:7d:ed:0d:de:08:50:e0:fc:81:f0:95:dd:6c:98:03:70:f2:
b7:9f:1e:66:8c:7b:e9:a2:63:07:72:77:35:3d:75:5c:f1:95:
ee:67:21:b0:a7:ce:97:1f:63:b0:c8:81:9f:bb:66:35:33:50:
2f:6e:ba:ea:c4:70:e9:60:4e:a4:b3:c2:fb:ba:14:05:2d:05:
df:ec:c5:cb:a6:4c:a0:3f:d7:4e:26:07:ca:70:b1:9b:21:de:
89:fe:ef:7d:3b:2d:81:a4:09:1b:f1:bb:1f:ed:4a:fa:ad:71:
62:bc:a7:a1:49:65:90:13:43:cf:0f:84:88:97:a2:18:1a:9e:
5b:30:c9:e0:f8:a8:52:45:81:f8:56:75:f9:2d:d7:b2:a9:9c:
40:9c:ed:eb:0c:f5:5a:b3:72:da:bd:7a:4f:37:34:31:85:d9:
36:8e:5e:28:b3:8c:dd:5e:74:54:15:61:4a:f8:9e:66:bc:f3:
d0:64:14:cc:29:bf:5c:26:d1:95:35:1a:55:48:0d:39:1c:2c:
01:3e:8d:a4:85:ff:5c:7f:5e:1c:26:3f:2c:11:70:9c:9b:69:
48:ad:3b:79:d3:da:99:06:52:c5:8d:9e:72:70:6c:20:fd:1f:
15:6e:6a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:46 2023 by rpki-client on console-fra.rpki-client.org