Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/qvL1NFAaKowl0EfGbVaGtCoJadU.roa
File: qvL1NFAaKowl0EfGbVaGtCoJadU.roa (raw, json)
Hash identifier: Cd+zwzSMZ2RfO0Q1UlEcbVUnFyAGKhWBK4cD7xhtBf4=
Subject key identifier: AA:F2:F5:34:50:1A:2A:8C:25:D0:47:C6:6D:56:86:B4:2A:09:69:D5
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 18CB2501
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/qvL1NFAaKowl0EfGbVaGtCoJadU.roa
Signing time: Sat 01 Jan 2022 13:57:42 +0000
ROA not before: Sat 01 Jan 2022 13:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5483
IP address blocks: 185.51.188.0/24 maxlen: 24
2a01:b5e0::/104 maxlen: 104
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415966465 (0x18cb2501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Jan 1 13:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aaf2f534501a2a8c25d047c66d5686b42a0969d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:04:1e:ab:63:2c:1b:69:70:66:36:70:37:
6e:58:73:3c:e2:37:c9:1c:fc:fa:e2:72:ba:8f:af:
af:7f:9d:e1:f7:8f:eb:4a:a7:e8:71:bb:e0:5b:c9:
56:36:02:7a:6e:be:32:30:a9:cd:b0:7c:cf:68:28:
fb:75:9e:80:88:0b:68:0e:17:21:94:8e:4f:2f:9b:
24:1d:fe:13:91:48:a2:a1:8b:62:9f:7f:c4:78:59:
70:2c:5a:99:46:37:f0:8d:a2:3d:ec:fd:cc:50:4b:
f9:b3:82:59:36:3b:4b:5c:57:80:a8:36:bd:29:6f:
c9:64:13:21:50:26:d0:d7:ba:4c:51:8d:d2:e1:cb:
48:c2:fb:50:13:23:0b:f2:6e:5a:d2:a8:34:91:b9:
2a:db:60:33:a2:58:f8:92:ea:d3:e9:1e:88:a3:ab:
80:c0:65:58:cd:a7:e2:8d:b0:31:a3:c4:c9:fb:54:
19:7a:26:22:f4:4c:83:cd:1b:8d:16:0f:62:21:7e:
0e:51:80:68:4e:7e:68:37:84:d4:4f:12:dd:3a:50:
67:23:16:ea:e2:9a:ef:c1:c0:de:69:13:03:00:4e:
9a:cc:52:4a:e0:f3:22:eb:36:ef:e9:61:44:86:8f:
5e:6d:4c:02:05:06:2f:1b:01:de:fc:60:80:e8:f2:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:F5:34:50:1A:2A:8C:25:D0:47:C6:6D:56:86:B4:2A:09:69:D5
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/qvL1NFAaKowl0EfGbVaGtCoJadU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.188.0/24
IPv6:
2a01:b5e0::/104
Signature Algorithm: sha256WithRSAEncryption
08:0f:2c:2c:8a:3b:19:36:f6:05:5b:fd:ba:20:7a:78:ea:93:
e1:df:1c:db:59:14:6c:99:36:24:8b:9d:24:74:2f:58:fe:33:
d5:82:98:2e:ed:00:3f:04:0d:91:60:0b:6a:a4:c0:d6:aa:ff:
ed:66:67:4a:41:9c:e8:96:f3:2c:94:89:33:a9:a0:ae:c6:23:
dd:75:a8:99:0c:ad:86:80:7b:9f:e4:c3:9a:8d:a6:33:62:a4:
43:56:45:d4:67:b0:24:1b:47:0e:78:ff:1f:fb:fa:62:88:38:
f8:ac:ee:ce:2b:99:96:73:07:77:a1:e4:73:fb:0a:c1:9e:28:
8e:b6:b6:88:61:74:e4:cd:0d:32:01:d3:e1:3a:fd:49:4f:be:
eb:d3:88:32:77:76:5d:fd:ff:ff:da:82:aa:d6:4c:53:e1:11:
79:8a:a5:8a:c5:68:59:93:2b:75:0b:83:00:15:ce:17:62:12:
f5:46:f9:75:68:8b:20:1d:b5:70:28:71:71:ba:0a:65:1f:e0:
42:cf:de:66:53:b2:a9:8f:ee:fd:68:00:2e:b1:cb:43:fc:ad:
ca:22:8d:74:9c:fe:ff:53:f5:f9:fc:82:c3:7a:fa:e3:33:95:
62:9f:2c:ee:ce:22:5d:5c:5d:4a:5e:0e:9c:47:69:8c:44:57:
56:b5:43:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:27 2024 by rpki-client on console-fra.rpki-client.org