Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/QI8PEehxIeEtUryYxEu8TiQLOj0.roa
File: QI8PEehxIeEtUryYxEu8TiQLOj0.roa (raw, json)
Hash identifier: FI/qx/4iRVHtwy9XxSacJTZo35XwyK6d86TBK6wFjmI=
Subject key identifier: 40:8F:0F:11:E8:71:21:E1:2D:52:BC:98:C4:4B:BC:4E:24:0B:3A:3D
Certificate issuer: /CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Certificate serial: 01851CFF0CCA9E0EE70731B70DD7303E862A
Authority key identifier: B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/QI8PEehxIeEtUryYxEu8TiQLOj0.roa
Signing time: Fri 16 Dec 2022 22:12:35 +0000
ROA not before: Fri 16 Dec 2022 22:12:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31173
IP address blocks: 193.25.177.0/24 maxlen: 24
193.25.176.0/23 maxlen: 23
193.25.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:ff:0c:ca:9e:0e:e7:07:31:b7:0d:d7:30:3e:86:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Validity
Not Before: Dec 16 22:12:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=408f0f11e87121e12d52bc98c44bbc4e240b3a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:b0:d7:fc:86:02:67:8c:08:67:4b:2a:83:
32:77:e7:ae:e6:f9:c4:57:ff:58:d3:1b:64:0f:70:
6c:b5:69:03:eb:9c:a4:2e:08:94:ce:a1:6d:72:99:
60:82:fe:e9:98:16:e3:1a:2d:3b:5a:12:71:72:65:
84:b0:b4:d4:56:92:10:df:3a:67:15:e6:51:df:22:
8e:84:5d:d8:09:ce:d7:fa:50:b2:ea:b7:5c:58:fa:
f1:76:72:f9:61:3b:f3:56:69:29:02:88:a2:71:0b:
ab:29:c5:10:52:d8:51:05:76:51:c8:3c:36:70:2f:
52:f5:ed:7c:14:ad:25:47:71:9b:b9:e5:b4:4f:47:
9a:ba:92:51:36:0b:d8:b1:f3:f6:38:6d:ea:4a:aa:
b1:d0:33:05:1e:73:00:a5:aa:5e:24:59:d0:26:0f:
a1:20:19:e0:d6:f1:4f:23:ea:a4:73:3d:32:a7:53:
96:de:ec:97:7b:8c:f5:a0:a6:d6:63:3c:e5:6e:35:
c1:25:09:10:bc:85:dc:b4:b0:71:fc:7f:9e:dc:6a:
db:8d:59:55:b4:fa:72:10:fe:da:93:52:e3:d9:18:
a2:46:31:37:28:04:ca:d2:09:15:1a:65:a1:f1:27:
7f:c6:0f:af:7f:ea:b4:a9:f9:00:38:50:42:27:33:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8F:0F:11:E8:71:21:E1:2D:52:BC:98:C4:4B:BC:4E:24:0B:3A:3D
X509v3 Authority Key Identifier:
keyid:B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/QI8PEehxIeEtUryYxEu8TiQLOj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.176.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:57:8a:29:87:02:a5:4e:c7:19:f7:27:c6:8b:1a:df:39:14:
0c:ef:16:72:18:72:17:99:1c:f0:cf:0c:c0:c6:3e:28:2d:e1:
fe:17:c5:a9:06:e4:19:af:e0:70:fb:d7:31:04:9e:3e:8d:a3:
60:dc:cd:0f:89:6c:73:e6:8d:bd:c4:c6:3e:9a:13:49:b5:d5:
a4:0e:6c:20:29:55:e4:61:44:09:ad:36:25:9d:61:ab:19:e8:
d3:52:b9:03:df:fc:56:c4:9f:32:ac:f7:b9:34:37:19:a7:6a:
af:e9:1c:af:e3:b4:b8:81:ee:7d:cd:f7:56:78:ea:ab:d8:fb:
94:23:c2:4f:8d:d2:6e:ce:bc:d5:cf:45:db:15:cf:b1:58:ad:
a8:8d:a8:55:b9:11:2b:8b:44:3b:a8:a0:12:cf:60:8d:12:be:
85:e8:78:ce:95:c2:a6:24:e9:59:81:94:b3:6f:b1:54:d0:cf:
29:ec:9d:b4:81:f0:47:72:66:47:54:45:f6:28:de:75:a1:84:
f7:20:21:46:b6:e1:7f:0f:f5:4b:32:a6:48:0a:5e:72:0e:7a:
68:23:42:83:84:30:86:ac:b7:77:fc:53:ea:09:66:30:e4:1e:
2d:3b:bb:29:18:4c:02:11:5a:91:63:85:9a:6f:18:45:0d:d7:
51:b0:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:00 2024 by rpki-client on console-ams.rpki-client.org