Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/QpTRBLSw2plvQGlMxH53N4Tfl5k.roa
File: QpTRBLSw2plvQGlMxH53N4Tfl5k.roa (raw, json)
Hash identifier: wj4aB4AoDORKeA025vjYYYJXTQFqbQN8Frtj91NwR20=
Subject key identifier: 42:94:D1:04:B4:B0:DA:99:6F:40:69:4C:C4:7E:77:37:84:DF:97:99
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 171E3EBE
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/QpTRBLSw2plvQGlMxH53N4Tfl5k.roa
Signing time: Sat 01 Jan 2022 05:58:02 +0000
ROA not before: Sat 01 Jan 2022 05:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1764
IP address blocks: 185.57.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387858110 (0x171e3ebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jan 1 05:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4294d104b4b0da996f40694cc47e773784df9799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:1e:9c:21:90:1e:38:f7:9c:eb:bc:d3:1f:
ce:93:d9:9f:29:d4:f9:fa:c8:dd:59:20:ee:3d:bb:
45:cd:aa:c8:db:69:a6:22:1c:ea:50:5d:ee:d2:f8:
d5:a1:ce:07:2b:49:d8:a1:37:f7:f3:76:65:d4:fb:
42:e4:31:e0:c2:cd:12:74:30:14:7c:a2:7f:c4:7a:
95:00:6a:ba:f4:d2:bd:2e:43:e1:38:51:bc:88:b5:
66:84:e2:cf:a5:04:bd:7c:a5:19:9b:79:0e:0f:a1:
d5:1e:81:cd:1d:a2:bb:3f:3b:26:4c:b0:8a:34:f3:
3a:d2:2a:dc:6e:47:1c:20:90:ac:2c:6f:27:5e:9b:
83:02:b3:d3:f2:4e:da:1d:67:de:5f:e9:1d:a2:0c:
b4:81:31:51:0c:71:ed:ba:0b:19:7a:53:fc:7e:05:
e0:57:be:d8:67:c4:f6:83:f0:85:8d:ef:26:dd:aa:
7e:b8:da:77:d4:62:b0:fa:0f:af:68:f3:43:53:ba:
61:7e:8e:59:a2:da:89:8f:1a:49:16:fe:c9:4c:d8:
c6:64:96:d5:b6:56:ed:b3:30:31:8e:dc:67:5e:e5:
c4:bf:f0:fb:d8:d7:a3:f0:6d:bc:be:a9:06:dc:5b:
3f:24:99:54:4e:04:17:a4:97:5a:c3:eb:73:14:48:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:94:D1:04:B4:B0:DA:99:6F:40:69:4C:C4:7E:77:37:84:DF:97:99
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/QpTRBLSw2plvQGlMxH53N4Tfl5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:71:9f:61:ad:48:ff:d0:56:46:1d:7e:5c:6d:b0:2b:ab:83:
17:11:80:ab:38:66:e5:34:66:eb:b0:c6:d6:74:68:16:ce:c5:
0f:65:9d:6b:c6:75:69:12:41:44:c4:53:58:b0:99:50:da:8e:
a6:16:57:a4:2a:b8:04:fd:65:5e:60:b0:ca:f5:9d:84:d0:b5:
b6:46:d7:f3:53:af:b1:1c:3d:de:0a:eb:a3:a8:44:d1:7c:01:
65:7c:4a:26:45:7b:86:64:e9:76:0c:9a:e3:18:b2:00:9d:04:
f8:d4:65:73:01:3c:a7:17:17:e1:14:21:cf:b7:f5:d4:c9:78:
6d:27:2d:a4:12:a1:f2:3c:dd:43:c0:e8:96:81:cc:7f:98:19:
18:9e:04:16:bc:2b:cd:2f:84:18:6e:b6:fe:6b:07:e7:a7:ad:
63:0e:02:c2:8c:42:8a:e2:9f:6f:75:60:0a:e7:61:6e:85:3d:
27:b7:e9:91:73:b5:fa:f9:78:b8:aa:11:1c:04:1b:a0:80:ee:
42:f2:57:5b:4f:d2:c8:1f:31:a7:bb:40:af:27:0e:10:b6:5b:
23:b9:d7:c7:57:82:78:b1:11:3a:46:94:f4:eb:08:62:d5:42:
29:df:c8:c3:80:6f:26:67:bd:ca:9f:64:0c:76:a9:5e:e7:64:
a7:0c:83:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:18 2024 by rpki-client on console-ams.rpki-client.org