Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/sq535vMRrQKViuOOevvhIDQWWt0.roa
File: sq535vMRrQKViuOOevvhIDQWWt0.roa (raw, json)
Hash identifier: COD800YUwBh3X69yKImKdor9uUkE4jOMrpRBeqbMYgk=
Subject key identifier: B2:AE:77:E6:F3:11:AD:02:95:8A:E3:8E:7A:FB:E1:20:34:16:5A:DD
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 099D765D
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/sq535vMRrQKViuOOevvhIDQWWt0.roa
Signing time: Sat 01 Jan 2022 11:01:51 +0000
ROA not before: Sat 01 Jan 2022 11:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197099
IP address blocks: 193.7.192.0/24 maxlen: 24
193.7.194.0/24 maxlen: 24
193.7.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161314397 (0x99d765d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Jan 1 11:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2ae77e6f311ad02958ae38e7afbe12034165add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:6a:b3:33:a8:8f:66:03:ce:e8:ab:36:13:
b9:fd:dc:ba:66:48:78:cb:2e:c7:9a:c1:c4:43:8d:
04:40:57:34:f9:86:67:30:d7:71:80:a7:93:dc:a2:
43:86:bb:e6:64:b0:0d:d2:e0:92:f8:f4:06:a0:27:
35:dc:b9:ef:a8:63:f9:75:8c:38:fa:4a:f8:ac:ef:
16:39:f0:c3:f9:6d:a8:46:a5:3e:0d:a0:c6:63:34:
7e:2b:13:6c:a3:75:07:fe:00:0c:eb:89:c5:2d:e3:
25:f5:fa:ce:4a:ff:41:aa:7f:e2:ec:ba:89:52:e1:
fa:f6:9d:6a:9d:d2:0b:9e:f5:2f:5d:f3:3f:0d:bc:
30:20:08:c1:10:2d:3f:61:d7:8d:5d:d1:42:64:9e:
c7:b6:46:41:c9:c8:d7:3b:36:73:8e:15:9e:62:b5:
90:18:30:6b:cf:1b:e3:9b:bf:91:63:77:fc:39:9b:
41:0c:7e:12:50:6f:7d:d2:70:ba:89:54:35:df:34:
d9:3d:7c:db:fb:3e:b5:a5:21:2f:d4:29:1f:62:96:
05:6f:92:d6:6c:85:9d:7c:7e:48:28:6a:df:d1:48:
7e:f9:a4:28:a6:5f:c6:83:55:39:b0:e2:80:52:d7:
9e:ea:2a:e5:ee:44:6c:f8:0f:57:52:54:2e:8d:45:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AE:77:E6:F3:11:AD:02:95:8A:E3:8E:7A:FB:E1:20:34:16:5A:DD
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/sq535vMRrQKViuOOevvhIDQWWt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.192.0-193.7.194.255
Signature Algorithm: sha256WithRSAEncryption
0c:fa:b9:f4:fb:93:d2:48:d9:80:e0:a2:64:63:a4:b7:6a:d1:
df:40:3c:7d:3c:d0:87:a0:0f:53:7b:48:61:41:86:11:d5:e6:
b4:0f:f5:f0:53:66:9c:83:91:ee:c1:ef:3d:28:45:ac:d1:eb:
4a:84:d6:62:e5:65:30:05:60:0f:2e:f6:4c:d8:6d:67:e6:90:
74:8c:7b:41:64:88:68:85:91:c3:cd:36:c0:56:bb:29:1c:07:
68:5b:87:44:4b:1f:36:ec:e7:71:45:97:30:1c:b5:3c:fc:d7:
8a:cb:c8:1d:6d:c5:59:5a:83:d6:cd:b9:9c:c1:b3:8b:a5:aa:
9f:7c:53:fd:c7:ee:60:09:a3:ea:a1:07:ad:f5:07:22:22:6b:
17:3b:81:2a:c6:5c:43:07:c8:8e:fd:89:f6:c9:37:fc:d5:e4:
09:16:6e:2c:0f:c6:89:51:80:b8:05:d4:96:13:80:9a:7e:2f:
1f:74:cb:2e:76:26:0c:a1:4f:1e:c2:5c:f5:8d:83:cc:12:20:
e8:00:68:3d:5f:a5:fd:b7:ce:ed:6a:3c:36:4d:0d:8c:de:ec:
98:7c:22:fd:c7:08:f5:87:c3:25:3d:47:e6:62:6f:99:68:ae:
47:e4:b8:10:7a:2a:1b:a4:d4:40:49:4b:a7:7f:be:e5:16:a8:
87:25:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:42 2024 by rpki-client on console-ams.rpki-client.org