Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/qfy1bh05ZQy8vGQlJcmAMfwB0a4.roa
File: qfy1bh05ZQy8vGQlJcmAMfwB0a4.roa (raw, json)
Hash identifier: gU5lzvJRY0WjL7tgSYZASeSExlmMLcGa8I+xPPyp5NQ=
Subject key identifier: A9:FC:B5:6E:1D:39:65:0C:BC:BC:64:25:25:C9:80:31:FC:01:D1:AE
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 231A35D7
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/qfy1bh05ZQy8vGQlJcmAMfwB0a4.roa
Signing time: Sat 01 Jan 2022 02:02:04 +0000
ROA not before: Sat 01 Jan 2022 02:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12933
IP address blocks: 193.41.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588920279 (0x231a35d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Jan 1 02:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9fcb56e1d39650cbcbc642525c98031fc01d1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:9f:0d:b0:be:45:c2:e1:d3:fb:89:d5:2c:
9d:aa:27:23:96:13:48:bb:04:0e:3b:8f:71:fc:6b:
85:0b:41:d9:2c:21:be:4e:77:c5:cd:f8:44:04:d3:
eb:59:95:8b:17:85:79:37:86:3e:17:cb:f4:60:fc:
9f:48:64:36:e8:21:ba:53:19:5c:7d:36:be:4c:00:
44:02:25:3b:55:e0:f3:b6:5b:7b:e0:f0:4c:44:30:
a2:06:8c:00:8b:57:68:cc:89:64:a7:e1:c8:af:59:
a7:f7:45:8c:df:a8:5f:8b:6f:98:53:b8:8c:4a:7b:
de:7d:5e:90:6c:e7:58:02:db:9f:e3:ad:86:94:94:
57:8d:f3:8a:27:f1:da:51:e7:55:7f:41:38:9f:fb:
b5:b7:e1:88:da:12:d2:24:b9:89:b3:1d:ec:05:89:
84:53:82:df:84:79:70:7b:61:ae:db:09:3d:3a:f2:
8a:b3:81:a5:2b:32:79:ea:ac:3f:d7:4c:ae:eb:5d:
7c:38:8d:b6:7c:2c:7f:37:b6:52:dc:e6:ae:13:90:
fd:d9:46:ce:bd:fc:80:26:36:27:93:99:a6:d5:ca:
b6:54:86:37:47:e1:90:33:e0:94:ed:4a:85:01:ea:
a1:c0:7c:d1:78:93:ee:67:88:a2:04:03:4c:a5:b8:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:B5:6E:1D:39:65:0C:BC:BC:64:25:25:C9:80:31:FC:01:D1:AE
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/qfy1bh05ZQy8vGQlJcmAMfwB0a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.80.0/24
Signature Algorithm: sha256WithRSAEncryption
14:25:df:e8:b2:4e:76:8f:bb:00:5f:9e:aa:ef:25:5d:b7:27:
26:58:41:42:95:1b:5c:d8:1c:4a:29:0a:6e:89:d7:7a:6d:62:
5d:72:f1:a7:9a:62:64:8d:6c:ba:a9:77:c0:c9:a6:73:7f:6f:
24:f2:57:ba:e2:ec:b4:df:09:56:56:90:6b:f9:c6:2f:6a:94:
13:6d:69:4b:6d:0c:dd:56:89:d0:48:f6:23:d1:e6:39:53:6b:
58:da:5e:37:74:a8:5e:a3:ac:b1:5e:05:b7:3c:95:c6:d7:6c:
82:db:5e:d3:0b:32:46:a9:53:51:22:86:d4:8c:1c:7c:bc:fa:
82:39:41:76:ad:86:86:6d:fa:7a:9c:e9:b4:86:07:9e:8a:a1:
08:ca:1e:9f:1c:c5:71:f1:ae:5c:b8:56:f1:d9:c2:d8:62:d5:
51:e6:59:dd:32:49:42:d6:b6:f9:9f:ed:c0:cc:db:56:d3:1d:
d8:0c:07:2c:b5:0e:83:27:1a:d9:3a:d3:b5:6c:2c:13:92:bf:
5a:52:9d:4d:ad:5b:19:43:3c:b1:31:70:f2:78:57:c9:06:43:
07:09:56:31:31:15:82:a6:d1:43:15:af:7a:48:1b:1f:bc:f7:
14:29:f1:2c:15:29:71:0c:68:d3:fc:43:56:25:b4:ca:b3:94:
ba:21:a0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org