Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/QGedWEt1-jpqUdJ98s5_boFTdtE.roa
File: QGedWEt1-jpqUdJ98s5_boFTdtE.roa (raw, json)
Hash identifier: xilCkf+snDE6FdvFF+ab+h/DBoo8MuYTuMFmEfq8lLs=
Subject key identifier: 40:67:9D:58:4B:75:FA:3A:6A:51:D2:7D:F2:CE:7F:6E:81:53:76:D1
Certificate issuer: /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial: 08C18C37
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/QGedWEt1-jpqUdJ98s5_boFTdtE.roa
Signing time: Sat 01 Jan 2022 12:03:04 +0000
ROA not before: Sat 01 Jan 2022 12:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58262
IP address blocks: 185.73.112.0/24 maxlen: 24
185.73.114.0/24 maxlen: 24
5.61.24.0/24 maxlen: 24
5.61.25.0/24 maxlen: 24
5.61.31.0/24 maxlen: 24
92.119.58.0/24 maxlen: 24
5.61.26.0/24 maxlen: 24
5.61.28.0/24 maxlen: 24
5.61.30.0/24 maxlen: 24
92.119.57.0/24 maxlen: 24
5.61.29.0/24 maxlen: 24
92.119.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146902071 (0x8c18c37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Validity
Not Before: Jan 1 12:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40679d584b75fa3a6a51d27df2ce7f6e815376d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:5f:5f:0b:de:3c:9c:15:af:5f:88:18:76:
11:89:98:43:9d:f6:84:bc:d8:1d:c2:2c:f6:54:23:
54:b9:60:0c:7f:73:51:1b:31:35:99:0d:c9:ae:27:
50:17:26:ca:16:19:28:98:19:d1:59:f4:0c:bc:f6:
0b:66:77:4b:ef:45:7c:42:ba:f1:cc:29:9a:e5:8d:
bf:96:f0:61:d2:68:54:62:25:87:0d:03:c6:ba:9f:
62:ea:52:20:e2:f1:bb:2f:e4:71:5e:71:31:f8:09:
2c:20:62:c1:32:f6:e1:4a:d9:5d:1c:a8:9a:26:20:
a8:48:34:a8:b3:da:67:89:ef:55:ff:54:6e:7e:97:
38:94:3f:cf:de:7c:54:fa:8d:74:da:19:91:da:a1:
e3:79:b8:2c:3e:8e:7f:40:13:5c:a6:9e:7b:b0:2e:
19:fa:bf:0e:64:f9:d1:15:e7:5f:73:89:c3:70:86:
ae:c8:d2:fc:ef:a7:26:d6:ee:55:f5:88:a1:a2:30:
f5:0e:1c:15:1c:df:6c:b6:51:1a:72:24:49:78:83:
6e:ff:7b:ba:f6:20:16:d3:a7:06:66:3c:0a:85:f7:
a3:a9:4a:41:d1:08:56:17:1b:83:37:e5:f7:d2:03:
07:2f:75:11:34:8d:b6:7f:62:0f:f3:05:75:24:c6:
a5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:67:9D:58:4B:75:FA:3A:6A:51:D2:7D:F2:CE:7F:6E:81:53:76:D1
X509v3 Authority Key Identifier:
keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/QGedWEt1-jpqUdJ98s5_boFTdtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.24.0-5.61.26.255
5.61.28.0/22
92.119.56.0-92.119.58.255
185.73.112.0/24
185.73.114.0/24
Signature Algorithm: sha256WithRSAEncryption
87:7d:24:0d:0a:89:28:80:12:32:2d:02:60:2d:91:b7:33:25:
76:0c:38:6b:23:56:48:45:3b:90:84:90:4f:32:f3:c7:f1:c0:
88:bf:36:89:25:b1:31:24:00:5b:1c:bf:03:6a:bd:55:82:ab:
32:9a:56:0b:cc:47:3e:58:15:a3:08:a6:f1:70:f3:76:a8:1e:
7e:6f:97:32:7e:0d:4e:5b:2e:83:c1:97:f1:e7:86:10:a5:fd:
7d:6a:1d:dc:27:32:2c:4d:d9:0d:3b:4f:b9:6b:6f:47:c5:48:
42:19:85:b2:67:9a:b9:e4:29:e5:b5:f2:7e:87:3d:10:ea:5d:
30:0c:00:18:8f:37:9e:d2:c2:dc:d8:ae:a0:de:8d:f3:f2:1a:
ee:a3:b9:be:77:ac:f0:01:b8:9d:b2:0d:b6:8c:50:a5:a2:de:
1c:d2:1b:0b:75:64:65:fe:54:40:f4:a7:93:c0:89:f3:9c:21:
ac:a2:1b:2f:ee:26:b0:6f:a6:e5:17:08:13:28:bb:cc:ef:c2:
21:04:11:4f:d0:20:7b:a1:fc:2c:bc:10:46:7a:8e:f7:56:0f:
ec:25:fe:5a:47:64:cb:ae:d8:28:25:19:24:a7:4b:f3:b9:f6:
80:72:e3:3e:2c:66:1e:20:c9:0e:bf:a3:65:f6:65:70:52:3b:
3c:14:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:55 2023 by rpki-client on console-ams.rpki-client.org