Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/q26nnUMRzeg5RNQRO9H-PLjlLjk.roa
File: q26nnUMRzeg5RNQRO9H-PLjlLjk.roa (raw, json)
Hash identifier: 0dD55gg4pBdLkvxaMsycoIpptW1BGyVYyT+a4tDPEcc=
Subject key identifier: AB:6E:A7:9D:43:11:CD:E8:39:44:D4:11:3B:D1:FE:3C:B8:E5:2E:39
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 01150A11
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/q26nnUMRzeg5RNQRO9H-PLjlLjk.roa
Signing time: Tue 28 Jun 2022 09:32:02 +0000
ROA not before: Tue 28 Jun 2022 09:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206143
IP address blocks: 185.195.63.0/24 maxlen: 24
185.195.62.0/24 maxlen: 24
185.195.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18156049 (0x1150a11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Jun 28 09:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab6ea79d4311cde83944d4113bd1fe3cb8e52e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:56:81:e3:01:2e:fe:bb:30:e2:83:e2:02:
91:ce:70:20:87:cc:68:c9:30:bd:34:2c:bd:2f:63:
b2:45:d9:75:59:f6:64:f0:97:0b:5d:09:ce:25:c5:
eb:d4:d5:8c:67:25:f7:a5:24:f6:0e:e4:3b:b4:b4:
69:02:51:f7:37:ff:bd:fe:53:eb:82:ee:ee:35:b7:
67:d6:d0:56:63:96:c7:3b:30:de:8d:2c:5a:1e:83:
a7:9f:f1:d2:49:99:c5:0a:b0:01:5c:92:e2:94:90:
e9:fe:68:0a:e1:a6:5b:f1:66:57:1d:3a:ac:c5:fd:
5b:66:f8:f2:b8:c4:78:7d:4e:f9:0d:2f:35:06:89:
58:fd:7b:bd:88:b8:ba:f3:e8:d6:a9:12:3a:0b:60:
0f:f4:95:52:5b:be:79:8e:1e:ec:c3:fd:1b:d8:a2:
e3:ed:57:e7:75:49:d1:fc:a3:07:7a:e3:af:70:63:
71:ab:e2:25:39:17:18:11:4f:3e:f2:92:1c:27:39:
26:d2:cd:a9:62:1f:cc:1e:69:6b:20:01:97:34:29:
ce:36:85:fa:00:96:1b:4c:38:a0:a7:36:b9:c8:18:
ab:c0:b4:5c:b5:dc:34:2a:16:dd:dc:fc:a8:a1:d9:
cf:4b:eb:cd:e0:3b:6c:e9:15:70:9e:e8:f7:ca:7f:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6E:A7:9D:43:11:CD:E8:39:44:D4:11:3B:D1:FE:3C:B8:E5:2E:39
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/q26nnUMRzeg5RNQRO9H-PLjlLjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.61.0-185.195.63.255
Signature Algorithm: sha256WithRSAEncryption
b5:79:67:f8:ce:0e:15:da:31:73:97:f1:cd:dd:0d:40:6b:c0:
4f:ea:e9:3d:ae:07:f8:d7:80:d0:15:12:49:eb:f2:a7:b8:d4:
43:d8:05:cf:8b:e7:83:b7:4f:8c:6a:ef:ce:64:8f:c0:fd:94:
94:51:d1:b1:47:44:1f:3e:ce:ba:d9:1f:e6:f2:51:44:7a:26:
25:0f:d1:7d:44:dc:11:f8:28:67:7c:41:51:e0:8f:60:40:d7:
c7:12:11:83:96:64:7b:d6:2c:4e:3c:12:2c:e1:52:9a:7d:9f:
68:84:bd:79:7d:8c:3e:5d:ea:99:d9:f7:e2:5e:df:78:e5:c0:
6c:55:88:c2:78:78:a1:98:26:4b:e3:ce:e6:b0:9a:ae:95:b2:
c3:6c:e1:93:91:a3:61:4c:b4:9c:d7:f9:78:1a:1d:39:a7:64:
e1:6f:66:54:20:e1:a5:2b:5a:18:f2:4b:5c:db:7d:0f:9e:c2:
e7:ac:04:b2:f2:6a:86:c2:2b:60:42:53:3f:c3:a3:28:58:67:
8d:68:8d:7b:55:9e:82:84:96:21:b5:15:77:9b:e9:14:a3:51:
2b:f8:2a:ab:01:c5:0c:10:d9:92:9f:aa:8c:52:f2:81:c9:ab:
04:14:13:0d:a5:4d:db:d5:03:aa:08:4a:93:5a:7e:30:dd:02:
21:9b:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:25 2023 by rpki-client on console-fra.rpki-client.org