Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/qtOQgUP4fzrRYsl_iap3sddpNnE.roa
File: qtOQgUP4fzrRYsl_iap3sddpNnE.roa (raw, json)
Hash identifier: xhdlAIM+HJW6Z6E/25dFBkyph99+SwnUgsuWrCOFKnY=
Subject key identifier: AA:D3:90:81:43:F8:7F:3A:D1:62:C9:7F:89:AA:77:B1:D7:69:36:71
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 03D36908
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/qtOQgUP4fzrRYsl_iap3sddpNnE.roa
Signing time: Tue 15 Feb 2022 11:41:23 +0000
ROA not before: Tue 15 Feb 2022 11:41:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15704
IP address blocks: 185.195.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64186632 (0x3d36908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Feb 15 11:41:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aad3908143f87f3ad162c97f89aa77b1d7693671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:ed:cd:16:d0:a8:13:9e:37:60:30:ea:6e:
57:e7:1d:59:d2:fe:8c:5c:40:c9:d2:fe:1c:74:81:
68:c6:25:7a:d9:1a:1e:33:8b:84:e0:1a:bf:b3:db:
7b:46:d2:7e:d7:7e:0b:2c:8a:59:36:0f:f8:35:6b:
49:fb:d0:d0:f1:67:38:da:6f:59:6a:af:5c:62:40:
7a:c6:b6:88:08:39:17:7f:af:cc:1b:2d:33:c8:d1:
d9:be:38:9e:79:ae:a1:be:1f:14:1c:29:df:bf:b8:
20:05:a0:42:79:37:3b:30:92:58:6c:a5:a3:a8:1c:
df:65:e9:ba:09:f5:40:fc:ed:97:17:21:cd:ed:76:
d2:63:30:d2:13:50:f1:76:e4:e3:78:20:bd:fa:e4:
37:5c:bc:fb:1a:5f:af:4b:24:ca:0c:56:50:f5:c2:
87:41:9a:6a:f8:d7:6a:00:f7:3d:2d:6f:89:78:06:
85:45:a8:3e:73:dc:30:a0:df:ef:96:3b:b2:33:bd:
51:b0:fc:66:b9:31:83:d4:5a:25:ec:35:98:51:e8:
a2:4b:22:cc:6a:7e:b7:1d:ba:83:7f:7b:20:dc:71:
86:da:16:3d:38:76:2c:42:e0:fb:c5:4f:88:23:c7:
be:e6:d8:4b:32:6a:a4:5d:93:63:29:29:2b:c5:9a:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D3:90:81:43:F8:7F:3A:D1:62:C9:7F:89:AA:77:B1:D7:69:36:71
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/qtOQgUP4fzrRYsl_iap3sddpNnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.176.0/22
Signature Algorithm: sha256WithRSAEncryption
35:a1:ce:2d:5a:ad:b3:0f:41:a3:5e:0c:af:00:bb:0c:7e:f0:
0d:8d:77:57:23:74:a1:76:4b:ed:c7:66:f0:84:82:03:22:58:
8b:39:71:1a:ee:62:69:ea:ff:51:c5:b8:0c:1d:f0:ab:3b:6b:
60:49:74:9c:2e:11:44:14:29:da:e7:e1:42:7a:68:89:e3:76:
0d:71:5d:c7:4a:9a:85:da:0f:a4:da:6e:d9:12:d6:9c:9e:26:
bd:00:7c:a3:e1:38:63:c0:0e:7a:b1:e9:b3:5f:12:fd:2b:d2:
3f:c3:d1:5d:e9:e3:d2:67:37:16:ab:8a:f5:b2:22:df:f4:64:
62:0e:84:65:49:c3:6f:d6:87:4a:44:30:3f:95:6d:36:04:c7:
3e:66:13:b1:bb:ef:c5:10:a9:80:75:4d:ff:0f:8d:7e:96:6f:
f5:3a:80:6a:db:b9:da:65:2c:b3:1b:ee:4a:1a:6e:ed:b8:cd:
00:ac:27:75:c5:bc:f8:38:89:1c:b1:74:9e:f7:30:49:63:66:
32:38:0b:9d:2f:40:d3:ec:eb:15:46:03:09:da:0b:b8:ac:f0:
a4:8c:53:2d:fd:1b:1a:7d:f1:6b:df:92:60:3c:b4:91:86:06:
23:88:36:dc:e6:32:45:d7:44:3b:03:07:90:07:03:66:c9:a1:
b4:01:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org