Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/q_asCzAW0QBAFkoUngOgZueK0XE.roa
File: q_asCzAW0QBAFkoUngOgZueK0XE.roa (raw, json)
Hash identifier: znrdjnoijMPtGSWbLCKHYik+ydVGaM5dzHHEXHD66kY=
Subject key identifier: AB:F6:AC:0B:30:16:D1:00:40:16:4A:14:9E:03:A0:66:E7:8A:D1:71
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 0DD4EC46
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/q_asCzAW0QBAFkoUngOgZueK0XE.roa
Signing time: Thu 10 Mar 2022 15:14:11 +0000
ROA not before: Thu 10 Mar 2022 15:14:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31662
IP address blocks: 193.186.252.0/24 maxlen: 24
2001:67c:934::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232057926 (0xdd4ec46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Mar 10 15:14:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abf6ac0b3016d10040164a149e03a066e78ad171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:6d:e1:1f:25:a7:7d:7d:5f:a0:b3:8e:34:
c6:d5:ca:c3:9a:b9:88:a3:32:20:b9:e0:6c:9e:e4:
bf:e4:a8:ff:e9:9d:c5:1a:35:33:e2:44:7e:79:59:
a8:ae:14:a0:6f:5b:31:9d:5f:70:ca:dd:31:99:0d:
08:4e:6b:06:c0:6e:40:b4:2e:9c:cd:62:30:a1:41:
25:09:6d:0c:f4:db:10:76:ed:52:eb:86:8d:a3:fd:
72:b9:44:f0:37:9b:44:6c:e4:a4:c2:4b:80:2e:8f:
0d:27:53:45:1d:71:c8:45:92:6f:b8:fc:f2:8e:cc:
49:73:37:55:bb:3b:97:43:15:06:23:05:0b:3c:ba:
1c:08:c5:94:5b:c6:ce:6d:85:d6:60:75:28:b6:94:
85:01:ee:74:3b:23:54:05:1b:20:63:73:3f:4b:3e:
5d:de:d7:ab:ba:e4:63:40:ae:c0:56:c1:b9:89:e5:
1e:fe:90:79:e8:55:29:9b:94:aa:af:84:47:7f:1b:
09:1c:6e:e8:bf:69:94:c8:cb:7b:21:6d:39:30:11:
64:a2:b3:8b:10:92:5d:2c:e0:66:6b:a9:9e:67:ea:
df:cc:22:f2:6d:39:d9:09:66:ec:30:3a:78:95:1f:
85:2a:e8:5d:72:7b:b6:9f:b2:bd:fa:fe:57:67:9a:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F6:AC:0B:30:16:D1:00:40:16:4A:14:9E:03:A0:66:E7:8A:D1:71
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/q_asCzAW0QBAFkoUngOgZueK0XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.252.0/24
IPv6:
2001:67c:934::/48
Signature Algorithm: sha256WithRSAEncryption
c7:30:4a:fb:ae:33:6c:1e:de:b7:fd:2d:9c:d6:6d:e3:f5:13:
a0:01:a7:ef:fe:16:9f:0e:8b:53:35:0e:4c:3e:4e:e8:93:f7:
2c:ff:b0:0f:2b:b8:6e:1b:1a:f2:1f:63:8c:05:c4:f5:44:db:
28:8e:82:58:87:01:12:87:39:4c:d1:12:c3:e8:ac:c2:c0:1f:
b9:a3:ac:4c:db:17:fb:cd:c0:95:83:3c:d5:63:8d:42:42:39:
6a:e0:be:a3:b7:b8:ec:a6:25:52:d5:c5:70:db:50:14:2b:46:
93:c2:79:fd:8d:da:df:b9:d1:01:ca:d2:15:79:c6:b9:6e:9b:
8c:14:40:08:73:46:76:30:c0:ce:0a:aa:52:0c:0b:1d:8c:f9:
96:ca:c0:6a:40:4c:aa:96:f3:1f:07:9f:46:0c:d8:62:7a:64:
a8:f1:cf:22:4f:6b:c2:e6:ea:71:ac:84:2e:02:a9:cd:de:4a:
73:5d:a8:be:8c:32:92:1e:a4:45:61:ff:02:b7:67:29:b5:01:
db:4c:fb:20:e1:81:a0:28:3a:5f:99:f8:91:a0:16:ad:1a:f0:
7c:fa:a8:73:62:2f:a9:c3:14:25:bc:eb:46:10:e7:58:08:90:
14:cb:5d:94:d2:da:f6:f1:ab:60:f5:05:db:9f:c8:f9:a2:8f:
f4:d1:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:39 2024 by rpki-client on console-fra.rpki-client.org