Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/QWHMjVmv5S2Fl1RruOMBsKWjxrs.roa
File: QWHMjVmv5S2Fl1RruOMBsKWjxrs.roa (raw, json)
Hash identifier: BpCqojxoiFTRobGhFPLRnLFBPxn4kqasfB3GJyFa/NM=
Subject key identifier: 41:61:CC:8D:59:AF:E5:2D:85:97:54:6B:B8:E3:01:B0:A5:A3:C6:BB
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1D24ED15
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/QWHMjVmv5S2Fl1RruOMBsKWjxrs.roa
Signing time: Tue 03 May 2022 12:09:23 +0000
ROA not before: Tue 03 May 2022 12:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6282
IP address blocks: 64.43.100.0/22 maxlen: 22
64.43.108.0/22 maxlen: 22
64.43.112.0/22 maxlen: 22
193.36.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488959253 (0x1d24ed15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 3 12:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4161cc8d59afe52d8597546bb8e301b0a5a3c6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7a:69:8b:74:f7:f8:1d:34:aa:2f:2b:ca:cf:
ad:1e:3b:cb:a9:f7:28:43:ed:d4:63:f7:26:6f:e8:
34:9f:95:c3:9e:8e:71:be:ed:68:39:e8:69:69:0c:
45:e1:c1:a6:d4:f4:69:fd:81:8e:0d:2e:72:db:56:
aa:47:04:86:30:97:44:bd:5c:f2:70:2b:a6:f0:27:
08:1d:4a:b8:83:2f:34:2a:2a:cb:90:ea:4f:eb:be:
b9:a1:60:91:11:f8:6c:44:82:a3:20:a4:53:ee:04:
c9:11:f1:8c:d7:65:76:bf:3e:22:53:00:41:c8:07:
2f:6e:8f:25:1a:8c:8a:c3:6c:ee:13:03:a1:c2:86:
d6:d6:76:ae:ca:8b:18:71:57:06:43:05:74:29:72:
a6:bc:09:34:84:ad:c0:28:61:a1:db:84:ba:f9:6a:
a4:a2:f0:b1:d2:08:b2:81:83:70:1b:78:be:d8:27:
20:77:df:d8:9f:44:ce:5a:9e:76:d8:51:73:90:14:
3d:77:eb:31:cd:b1:5c:09:f3:c0:0c:32:52:00:9c:
74:84:2c:62:e0:60:58:82:5a:bd:42:3a:13:29:7e:
e0:91:de:69:ec:cd:79:6a:39:55:04:a9:ec:64:44:
fb:52:6c:1a:43:2d:48:df:e6:4b:9b:09:ab:5e:84:
c8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:61:CC:8D:59:AF:E5:2D:85:97:54:6B:B8:E3:01:B0:A5:A3:C6:BB
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/QWHMjVmv5S2Fl1RruOMBsKWjxrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.100.0/22
64.43.108.0-64.43.115.255
193.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
99:33:0e:54:3a:3c:b2:c5:d9:07:66:5c:c2:41:23:5e:4e:8f:
7f:e1:fe:8a:c2:a3:15:fa:0a:4f:62:da:c2:61:8e:7d:1c:db:
36:12:cc:55:bf:3f:eb:32:df:e4:f4:1d:55:8b:de:65:de:7b:
d5:f3:c0:2d:9e:08:78:72:8e:bf:30:1c:8b:cb:06:16:d3:e3:
fb:d4:fb:84:00:b5:1e:4e:d2:ca:b3:07:f7:9b:2f:84:dc:5c:
6e:e9:d0:48:1d:cb:da:cf:82:33:99:6f:2b:4b:67:0a:a7:17:
24:bc:44:3c:6b:b2:80:98:cb:f4:90:e3:f6:ef:de:76:ca:2c:
dd:ce:8b:27:f7:a9:7f:2f:05:c4:7f:44:59:08:ef:de:84:8e:
b4:9c:aa:22:df:99:6b:30:b7:5a:31:6e:87:ac:94:20:63:4d:
d9:a9:0c:16:1f:64:8e:15:f8:9e:de:c7:c1:b9:d3:b7:da:6f:
20:c3:34:10:ba:f2:8d:b1:83:7d:1d:04:3e:54:11:23:8c:90:
3f:74:da:88:27:07:f8:aa:3c:50:bb:c0:6b:7c:41:47:89:35:
04:dc:0f:b3:8c:fc:77:62:2e:30:e9:33:ff:81:2f:5d:6c:d8:
1f:53:a0:86:b0:32:49:71:27:fe:3a:0f:d3:cb:ab:c4:fc:d6:
fd:de:cb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org