Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/qm-BikXqh5FLnByGSna6F4g4m8w.roa
File: qm-BikXqh5FLnByGSna6F4g4m8w.roa (raw, json)
Hash identifier: sFv2VeeWaohwg3Js9ZEAx1AN3KMmNC7qQTZHaZi8e5M=
Subject key identifier: AA:6F:81:8A:45:EA:87:91:4B:9C:1C:86:4A:76:BA:17:88:38:9B:CC
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 021F136E
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/qm-BikXqh5FLnByGSna6F4g4m8w.roa
Signing time: Thu 02 Jun 2022 10:46:20 +0000
ROA not before: Thu 02 Jun 2022 10:46:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12297
IP address blocks: 87.241.128.0/18 maxlen: 24
178.160.192.0/18 maxlen: 18
212.73.64.0/19 maxlen: 24
178.160.245.0/24 maxlen: 24
178.160.252.0/22 maxlen: 22
178.160.248.0/22 maxlen: 22
178.160.251.0/24 maxlen: 24
46.70.0.0/15 maxlen: 24
2a00:f38::/29 maxlen: 29
2a00:f38:0:111c::/64 maxlen: 64
2a00:f38:0:111d::/64 maxlen: 64
2a00:f38::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35591022 (0x21f136e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jun 2 10:46:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa6f818a45ea87914b9c1c864a76ba1788389bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:27:e8:1f:31:ef:89:7f:30:3d:a2:fc:2e:
b2:80:6f:13:a4:05:fe:b1:d4:3a:33:b8:c9:95:99:
f3:5a:c1:ee:9a:44:b5:f0:32:a2:b6:d8:ed:e5:61:
8e:ce:6b:62:90:26:90:7f:24:0a:20:18:cb:38:fd:
b6:12:19:44:76:46:d4:c5:c6:f6:15:68:89:32:d6:
dd:d9:b1:49:c3:0c:27:34:cf:06:8e:af:38:36:85:
4d:fe:46:01:a8:dc:c6:8d:bf:84:58:56:fb:6b:f3:
94:8a:50:48:34:25:38:41:99:cc:9f:5f:60:0e:67:
72:94:34:11:7e:10:47:dd:a0:f6:9b:6e:4a:2e:14:
9a:39:e1:11:4c:f3:be:aa:4c:a6:f3:dd:54:58:21:
71:67:e1:89:4d:bb:66:93:22:f2:45:29:3e:51:91:
b5:2d:44:16:f9:f6:d4:a3:8f:7f:32:7c:7a:fa:a8:
b7:bb:80:06:63:63:f4:df:b4:9a:4a:d6:a2:76:a2:
74:e1:80:f4:26:93:e9:0c:47:cd:cb:49:4f:09:dc:
c9:e9:2f:a9:ca:82:75:c7:fe:94:3b:dd:5f:2b:61:
a3:3e:55:bd:29:97:6f:16:92:b7:2e:f3:7e:10:25:
ad:3f:9c:eb:13:8a:60:21:09:3d:6f:4e:9a:a8:7a:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6F:81:8A:45:EA:87:91:4B:9C:1C:86:4A:76:BA:17:88:38:9B:CC
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/qm-BikXqh5FLnByGSna6F4g4m8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.0.0/15
87.241.128.0/18
178.160.192.0/18
212.73.64.0/19
IPv6:
2a00:f38::/29
Signature Algorithm: sha256WithRSAEncryption
c8:71:fd:2f:c1:42:48:10:ea:0a:0a:b1:6c:d3:43:51:0f:eb:
9d:9a:e6:07:48:bb:1c:5a:44:d2:57:98:35:b2:34:7a:5e:b2:
70:78:2a:15:ce:a5:4f:af:91:f3:5d:6b:d8:fb:04:28:bc:ce:
d5:e7:1f:02:20:de:d1:b6:de:71:00:ce:70:f3:8d:8f:b6:15:
f5:97:44:33:7b:02:f2:11:9b:d0:83:25:2f:8e:c5:e2:95:d4:
fe:d8:3c:0f:92:5a:f7:b0:8a:6c:3e:22:75:68:60:1c:ba:13:
39:63:6e:d1:c7:d5:72:69:23:0d:2f:29:b4:14:fe:33:7a:05:
f9:2a:25:a2:2c:e3:2f:19:59:0d:4e:9c:7f:79:84:8d:71:c5:
d0:40:67:cd:da:f1:d3:b7:6e:a3:78:9a:a8:41:06:dc:12:da:
3e:dd:d8:da:97:48:46:73:88:92:2b:94:19:57:ad:7c:95:86:
bf:9d:1a:eb:44:df:84:69:64:f3:a7:7a:9d:e9:4d:23:6c:cb:
be:d2:3d:ba:9b:f2:c6:4d:3a:e4:a1:99:96:24:11:bb:86:6a:
0b:b7:78:3b:40:0f:8f:2d:90:ce:21:23:44:40:95:6b:d7:2f:
41:c3:8c:cf:19:98:1d:54:d7:a5:ab:80:12:79:35:23:ea:25:
ef:06:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:15 2024 by rpki-client on console-ams.rpki-client.org