Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/Q4HByoRi3hFfZKJInLVltlxSovU.roa
File: Q4HByoRi3hFfZKJInLVltlxSovU.roa (raw, json)
Hash identifier: ix9FcfgAf6s/hm9DIVZSc8gu41f/Xbmb0qObNT9+OGY=
Subject key identifier: 43:81:C1:CA:84:62:DE:11:5F:64:A2:48:9C:B5:65:B6:5C:52:A2:F5
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 0733BC9B
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/Q4HByoRi3hFfZKJInLVltlxSovU.roa
Signing time: Sat 01 Jan 2022 07:57:23 +0000
ROA not before: Sat 01 Jan 2022 07:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198398
IP address blocks: 95.156.216.0/22 maxlen: 22
194.110.155.0/24 maxlen: 24
185.184.22.0/23 maxlen: 23
185.184.20.0/23 maxlen: 23
185.184.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120831131 (0x733bc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Jan 1 07:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4381c1ca8462de115f64a2489cb565b65c52a2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:b8:bd:fe:fa:fb:b2:5e:fe:79:44:3e:04:
e4:db:f6:81:7f:31:b4:50:80:1d:99:d0:77:a0:47:
7e:b4:8a:0a:17:17:85:5f:12:44:06:2e:5d:8d:86:
0e:9e:bc:92:0f:e5:52:cb:31:91:66:55:c9:75:e6:
38:a9:02:27:2f:3d:f4:fc:3c:4b:2d:51:c3:da:45:
d5:ec:82:1e:d6:7e:db:1b:44:a2:2a:78:07:13:79:
44:3b:3c:ea:60:97:34:96:c7:0f:d6:8b:6f:01:40:
e8:81:b0:f1:aa:67:59:4e:02:54:aa:2d:23:ba:a3:
03:6a:e9:54:ae:cf:60:f3:3a:89:87:1f:71:c6:af:
71:06:e8:09:d5:76:8c:27:79:32:cc:e7:30:d4:9f:
87:3a:4e:64:8d:38:c1:ae:13:1c:3c:cc:23:de:a4:
a9:f3:31:df:fd:f8:99:7c:d8:40:a2:bd:2f:d1:29:
80:79:56:91:12:7e:46:57:b4:1a:be:8f:b9:10:a3:
72:33:f0:4b:79:24:ea:db:19:ec:5a:98:dc:2d:4f:
00:79:06:77:78:8a:ea:e8:a1:5b:51:24:df:2f:34:
2b:ed:3c:a1:3d:9e:9c:22:98:4a:9d:29:01:0a:4e:
d5:1b:99:b3:a4:37:db:0f:73:d4:32:b3:9f:8d:79:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:81:C1:CA:84:62:DE:11:5F:64:A2:48:9C:B5:65:B6:5C:52:A2:F5
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/Q4HByoRi3hFfZKJInLVltlxSovU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.156.216.0/22
185.184.20.0/22
194.110.155.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:3b:56:21:f3:a6:c7:fd:40:00:a8:93:75:a2:bb:40:d3:cf:
e5:77:bf:b2:7f:f0:30:49:80:0c:9b:34:12:57:5a:e1:5c:d2:
16:01:fb:b0:ad:37:c1:90:2f:62:69:6f:01:2d:c0:a4:5d:bd:
87:fe:c8:a2:d1:bd:d5:66:8d:ee:bc:96:10:de:31:2e:76:9d:
80:09:c3:f7:90:1e:e3:27:76:38:9e:64:7d:7b:37:0d:35:bd:
60:0d:fd:85:a6:9c:34:c5:88:33:1a:6f:39:39:02:d3:ac:20:
43:2c:3a:4f:b1:51:39:7c:36:6c:90:56:eb:52:ed:d9:13:7b:
fe:76:0f:4a:ca:8e:55:2f:1f:4a:86:55:ff:73:ef:15:d5:b2:
1d:11:42:ef:5b:0a:ab:cf:5b:c9:a0:7a:53:a4:89:b8:7e:00:
19:e8:2b:46:9f:52:ad:c5:67:52:f7:d5:ef:bf:dd:e8:33:7b:
42:52:70:52:31:99:93:96:91:f6:77:fb:1d:58:d4:07:c3:4a:
37:7a:17:d9:22:49:0d:da:30:71:d1:a2:ae:c9:ad:3c:6a:00:
f2:4a:dd:05:3e:b3:d4:b6:05:cd:42:6f:d6:b4:2a:1f:65:13:
19:45:3b:e0:14:70:ae:83:26:8c:40:a0:a5:f7:c2:c0:25:22:
f9:4a:a8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:51 2023 by rpki-client on console-ams.rpki-client.org