Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/QjTaimQmwpgcN1g6I7cnw9K9S3I.roa
File: QjTaimQmwpgcN1g6I7cnw9K9S3I.roa (raw, json)
Hash identifier: t9ZlXS9s7/pRhMEIaYmeFYSF/f1H71CkLpDYTaPBVRc=
Subject key identifier: 42:34:DA:8A:64:26:C2:98:1C:37:58:3A:23:B7:27:C3:D2:BD:4B:72
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 02603604
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/QjTaimQmwpgcN1g6I7cnw9K9S3I.roa
Signing time: Sat 01 Jan 2022 11:01:45 +0000
ROA not before: Sat 01 Jan 2022 11:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212271
IP address blocks: 2a05:4143::/32 maxlen: 48
2a05:4144::/32 maxlen: 32
2a05:4140:400::/40 maxlen: 48
2a05:4140:600::/40 maxlen: 40
2a05:4140:300::/40 maxlen: 40
2a05:4140:16::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39859716 (0x2603604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 11:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4234da8a6426c2981c37583a23b727c3d2bd4b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:c2:00:d5:83:d8:60:ba:52:a7:c4:bc:e2:
e5:9c:11:c1:7c:41:61:d5:d9:84:f6:1e:72:10:84:
64:72:e0:bf:df:e4:4b:bc:3b:9b:63:f0:5c:70:9c:
91:38:47:94:45:c3:ef:dd:38:ed:3a:34:74:65:dc:
37:08:e9:7a:a2:21:81:fe:1e:84:fe:89:bc:be:55:
62:db:d5:ed:05:53:a3:e5:47:18:c6:40:c6:38:25:
94:fb:28:63:a0:9e:d5:c3:7a:42:92:ca:02:14:8f:
d1:98:5c:59:10:4f:92:68:d9:f7:b8:6b:61:6a:1d:
0b:e1:14:eb:8b:ca:a1:8c:d7:a8:aa:68:79:5e:27:
be:ba:19:88:32:86:3e:8b:ea:1e:e9:51:d7:7b:18:
93:a9:5a:e6:fb:fb:56:3b:17:7e:88:4f:db:00:6d:
6c:8e:3e:78:ab:bc:95:21:47:c6:a5:8e:20:47:32:
7c:0e:45:f5:9a:e6:65:64:7c:05:75:fe:5b:00:d6:
ae:7c:51:e2:2a:fa:82:f8:ca:47:f0:1a:01:6d:24:
26:c4:a9:8a:8a:94:a3:23:d5:f1:0f:38:f4:73:01:
36:6c:28:96:8e:c1:c9:d7:12:5f:25:c2:74:91:93:
65:f8:6f:7c:c9:f9:d3:56:32:e0:56:30:af:07:84:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:34:DA:8A:64:26:C2:98:1C:37:58:3A:23:B7:27:C3:D2:BD:4B:72
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/QjTaimQmwpgcN1g6I7cnw9K9S3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:16::/48
2a05:4140:300::-2a05:4140:4ff:ffff:ffff:ffff:ffff:ffff
2a05:4140:600::/40
2a05:4143::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:3d:54:cc:dd:0b:9b:d8:8f:1b:a2:94:8e:64:16:50:63:a3:
47:ac:dd:4c:b4:43:ec:de:e1:04:e2:8a:67:73:f4:09:12:17:
3e:69:cf:a9:34:8b:82:79:69:60:4a:7c:92:78:db:e9:15:18:
7b:7f:83:f6:2a:06:ac:09:5e:fd:67:28:86:b4:c1:a4:ac:fb:
5e:73:ac:05:9e:fc:10:93:5b:e9:1f:ed:fb:8e:06:bf:f6:a0:
34:9b:76:c2:6b:21:70:a2:38:ce:d8:89:fa:d1:8d:6e:83:0e:
58:4e:21:bc:ce:58:65:9b:a1:42:34:94:2e:65:63:3a:b9:9e:
27:d5:7c:0d:94:1e:69:2f:f3:b7:de:8f:ca:f2:d3:e5:15:50:
a3:cc:d0:d1:4d:ea:65:63:4b:f2:c7:32:9c:83:4e:4c:cd:d7:
77:4f:7e:5d:11:be:1c:be:cf:67:ca:02:0c:08:da:f5:2a:e4:
2a:16:57:6e:cd:0c:7b:b7:64:43:36:da:81:da:db:4b:23:c0:
2a:91:99:68:f0:4e:63:91:f1:58:94:6c:f4:2c:43:1e:96:fe:
7a:73:62:48:08:22:b1:08:fd:08:ab:2e:23:b2:78:bc:c0:97:
c7:25:c8:ac:56:3f:b9:4f:89:9d:81:c4:27:65:c8:0d:16:7c:
f5:81:eb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:53 2023 by rpki-client on console-ams.rpki-client.org