Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/qpbABRdfmYtWfs7LNbo6xf8dpk0.roa
File: qpbABRdfmYtWfs7LNbo6xf8dpk0.roa (raw, json)
Hash identifier: mlZv44hBFy2GnrVA9ymC12QABMaMmm7FxMJFUv4dtMM=
Subject key identifier: AA:96:C0:05:17:5F:99:8B:56:7E:CE:CB:35:BA:3A:C5:FF:1D:A6:4D
Certificate issuer: /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial: 0AACA308
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/qpbABRdfmYtWfs7LNbo6xf8dpk0.roa
Signing time: Fri 10 Jun 2022 12:47:02 +0000
ROA not before: Fri 10 Jun 2022 12:47:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51580
IP address blocks: 185.212.16.0/22 maxlen: 24
185.143.152.0/22 maxlen: 24
5.172.96.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179086088 (0xaaca308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
Validity
Not Before: Jun 10 12:47:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa96c005175f998b567ececb35ba3ac5ff1da64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:c2:6e:e5:2c:92:c5:74:6f:0e:74:dd:9f:
54:f5:9b:95:b2:a7:b8:71:bf:6e:bf:ea:0e:a7:25:
6c:dc:cf:96:69:38:96:fa:a3:d0:ea:85:86:e5:52:
44:05:a7:27:51:da:76:b0:52:71:68:b1:90:be:81:
96:2e:ac:3c:c3:70:08:08:f6:bd:5b:30:02:53:bd:
fe:6c:3d:51:78:37:f4:09:66:e4:1d:92:ca:70:18:
72:f0:8a:dc:40:8c:65:ba:9e:f9:e3:3e:e9:d7:2c:
30:dc:03:1e:97:2f:f1:66:f0:84:4f:f3:42:c5:2e:
30:54:21:ee:04:76:8c:6a:9a:7d:16:15:3a:f5:15:
be:a1:13:01:02:60:6f:54:5a:f2:c0:58:a4:1c:4d:
0b:6c:82:64:ab:0d:29:d9:58:21:5a:89:7b:99:cd:
e1:e9:aa:52:08:4e:aa:2a:86:90:31:fc:04:1b:63:
4d:45:5e:f4:c4:e0:d0:db:8d:ef:24:d3:08:12:74:
9a:86:1f:09:94:0c:7b:c3:8e:bd:41:8b:12:cf:88:
11:70:82:9f:25:3c:f2:38:e1:a9:dd:34:24:71:37:
d6:6a:ad:3c:6a:63:4c:ef:df:f3:cf:22:8f:91:33:
ea:86:96:9a:51:93:bc:b3:f8:5b:a9:4a:fe:c6:ff:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:96:C0:05:17:5F:99:8B:56:7E:CE:CB:35:BA:3A:C5:FF:1D:A6:4D
X509v3 Authority Key Identifier:
keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/qpbABRdfmYtWfs7LNbo6xf8dpk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.96.0/23
185.143.152.0/22
185.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:ce:22:ff:fd:87:41:4a:06:96:9a:87:c0:ca:aa:33:a7:26:
b3:8b:13:81:4d:53:f6:6e:b4:01:bb:99:03:09:b6:0d:8e:c2:
10:18:35:30:1e:91:93:f0:b3:14:3a:1c:18:d3:5e:b8:bb:58:
66:4e:66:97:a0:99:c1:9f:c3:23:6f:bf:aa:8f:28:52:4f:7f:
8a:96:30:c3:3c:0f:7b:d2:0b:b9:83:db:27:ca:5d:f9:7d:dc:
9e:db:52:39:0e:a6:94:00:88:f9:a8:47:95:27:43:42:16:1e:
78:8a:ef:a5:fb:67:6a:e9:30:fa:f5:f9:41:54:62:f9:2f:ce:
cb:0e:84:49:55:b9:cc:ab:76:1c:28:29:c9:82:d0:c2:f8:22:
73:d3:68:d7:ef:9f:eb:12:b2:35:d3:b2:5d:64:d3:74:b8:45:
25:c6:46:4b:73:27:3b:01:56:b7:ee:a8:1b:a4:d4:aa:c9:3b:
37:66:d6:83:ae:70:31:fb:21:5a:a3:31:bd:5f:c5:d0:4d:e7:
3d:9b:43:d1:7f:34:16:df:60:e3:df:24:93:5a:57:8f:7b:c2:
93:29:39:00:6a:ad:a7:91:a8:e2:5d:0d:02:3d:b1:41:32:d2:
c8:bc:f6:8a:79:c2:a9:cb:2b:6e:3a:00:2a:6b:5a:a6:4b:ab:
9a:cf:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:22 2024 by rpki-client on console-ams.rpki-client.org