Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/Q7G39s3qJ0XZ-d53LqYWG2F8yOs.roa
File: Q7G39s3qJ0XZ-d53LqYWG2F8yOs.roa (raw, json)
Hash identifier: gL49QuLh61SwP1vboqSDJUHpFTjGYUsYU3o1v3vhFY8=
Subject key identifier: 43:B1:B7:F6:CD:EA:27:45:D9:F9:DE:77:2E:A6:16:1B:61:7C:C8:EB
Certificate issuer: /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial: 1B9EECC2
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/Q7G39s3qJ0XZ-d53LqYWG2F8yOs.roa
Signing time: Sat 01 Jan 2022 01:01:48 +0000
ROA not before: Sat 01 Jan 2022 01:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25509
IP address blocks: 213.190.96.0/19 maxlen: 24
2a00:5380::/29 maxlen: 32
2a00:5380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463400130 (0x1b9eecc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Validity
Not Before: Jan 1 01:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43b1b7f6cdea2745d9f9de772ea6161b617cc8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:8e:7a:45:d6:5c:f1:93:a7:6e:e6:3f:c7:
0a:dc:82:b4:42:a9:03:90:d8:61:65:15:66:10:b7:
99:d5:fa:6a:4f:05:b5:8d:30:33:09:03:6e:ab:e6:
b0:30:0b:78:3e:ba:4b:ba:c1:1d:8e:bf:99:d2:4a:
83:a1:eb:81:fc:c2:41:42:86:c4:50:b4:c4:41:b4:
96:e0:04:75:2b:9f:6c:f5:ae:ac:a1:fc:f0:95:2c:
16:8e:b4:71:9c:c5:b9:83:61:17:24:88:7a:62:dc:
0b:a4:1d:a5:48:61:6d:9e:3e:d1:24:4e:0d:77:70:
55:80:a9:3f:2b:cb:52:7f:d9:b6:28:bc:f1:9a:28:
b0:7c:8e:c0:24:ef:82:bf:e1:b3:bb:7f:66:39:4b:
b2:32:fe:8f:c7:4b:84:2a:37:60:a9:f2:67:06:cd:
65:fc:eb:9a:70:a3:14:e4:fa:92:80:a9:46:6c:bb:
25:6f:31:fb:50:bc:0b:61:c6:36:6c:d5:48:f8:8c:
d2:4b:73:7f:41:95:05:d2:b4:a6:7b:f0:9e:d2:65:
a3:cd:c8:d5:ca:2b:a6:ad:2d:58:26:fd:f9:26:92:
e9:32:30:81:0b:75:ac:0e:fa:af:a9:bb:06:49:89:
4e:7f:04:eb:c1:58:93:e6:4b:28:13:66:47:56:6c:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B1:B7:F6:CD:EA:27:45:D9:F9:DE:77:2E:A6:16:1B:61:7C:C8:EB
X509v3 Authority Key Identifier:
keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/Q7G39s3qJ0XZ-d53LqYWG2F8yOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.96.0/19
IPv6:
2a00:5380::/29
Signature Algorithm: sha256WithRSAEncryption
00:ca:eb:25:5a:71:92:e8:62:2f:4f:b4:cf:d9:81:d2:20:38:
4d:b3:4c:8f:d9:98:d1:02:9e:de:61:6e:d4:7e:4c:cd:ca:df:
62:43:14:4c:be:10:74:31:85:68:3d:21:58:05:58:bd:7a:f2:
00:ea:86:d9:78:55:82:96:73:f5:25:68:d6:8c:ad:d8:15:34:
03:74:50:f9:09:05:96:db:9b:24:85:ad:00:3a:d1:c6:81:87:
0b:39:59:c3:c9:30:bd:f6:9b:a5:49:49:65:b8:4f:9a:a5:36:
4a:c4:8b:2a:66:92:69:15:a2:3a:73:82:8b:7b:e9:e6:39:a3:
af:0f:81:b3:a6:5e:c8:7d:86:93:fd:b1:ba:e0:c2:d2:f1:75:
2e:08:de:87:96:89:ef:80:da:28:df:43:2d:44:a8:12:97:69:
ab:b6:a7:f2:50:2b:5f:b0:80:6a:7c:1d:f0:82:bd:ef:4b:95:
1d:4e:52:21:6d:70:a6:17:de:da:8b:d0:ea:a9:f1:4a:19:f2:
35:74:7b:fa:33:84:84:de:f2:d7:19:7d:61:bd:77:2b:3b:e1:
63:67:3c:0b:a8:29:ce:90:37:6d:5f:88:03:11:82:a0:76:e6:
f5:c5:5b:e2:5d:28:7b:a8:2f:ec:3b:bf:0b:8e:ca:96:b1:90:
e1:21:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org