Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/QTvK_JGal9VfipD_6lt8YhPhlsw.roa
File: QTvK_JGal9VfipD_6lt8YhPhlsw.roa (raw, json)
Hash identifier: w0ISK2aHB/DFQmPNybY8zK/lFtVXQAe6DLjNjVt61/g=
Subject key identifier: 41:3B:CA:FC:91:9A:97:D5:5F:8A:90:FF:EA:5B:7C:62:13:E1:96:CC
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 2373BB1A
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/QTvK_JGal9VfipD_6lt8YhPhlsw.roa
Signing time: Sat 01 Jan 2022 03:54:19 +0000
ROA not before: Sat 01 Jan 2022 03:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22616
IP address blocks: 147.161.253.0/24 maxlen: 24
147.161.255.0/24 maxlen: 24
147.161.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594787098 (0x2373bb1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jan 1 03:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=413bcafc919a97d55f8a90ffea5b7c6213e196cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:89:6e:6e:a5:81:5c:f9:f2:48:ec:91:1f:f5:
c9:5d:0d:8c:d1:62:34:0f:e6:f3:a2:ed:8e:69:54:
52:f1:fb:cf:6e:c8:eb:cb:8b:ed:ce:e8:aa:b5:06:
45:53:a8:87:f1:50:0a:f1:ed:f0:17:a8:02:44:2c:
c7:97:45:88:e7:02:74:5f:0e:9e:0d:a7:d7:79:32:
ab:91:bc:bb:26:84:21:fb:bd:4f:a4:f0:32:2e:d5:
b3:37:71:03:9c:ec:c5:35:80:f1:46:b8:d1:93:e7:
aa:f4:8a:4f:72:04:4d:54:52:fa:ca:95:49:e9:f3:
c5:29:13:77:ff:29:47:fb:f6:ce:94:8e:8b:22:64:
a0:a5:2e:4d:40:00:6b:1b:6f:40:93:f8:42:65:f0:
fa:c7:a8:a6:fe:2e:89:62:10:4c:dd:4d:19:08:e3:
48:49:ed:55:f4:1b:7c:36:05:79:fe:37:1d:91:cb:
09:6d:40:03:08:59:33:8f:e6:a3:47:51:bc:c5:5d:
32:e5:11:1d:66:60:3a:8c:74:e4:ae:2e:a3:cc:69:
a5:8d:bb:3a:08:88:0a:6d:e3:ee:56:4a:b4:97:fe:
2a:60:b5:a6:6a:4a:9c:b4:17:df:f4:65:77:59:a7:
0b:80:bc:2c:1e:53:6c:1d:11:bb:b0:f4:2a:82:bc:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3B:CA:FC:91:9A:97:D5:5F:8A:90:FF:EA:5B:7C:62:13:E1:96:CC
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/QTvK_JGal9VfipD_6lt8YhPhlsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.253.0-147.161.255.255
Signature Algorithm: sha256WithRSAEncryption
76:11:a2:91:cd:58:c3:03:8a:8f:14:90:49:2c:a6:90:10:7b:
a3:47:87:a5:ed:dd:f6:31:42:de:ea:0c:5e:93:81:f4:50:fe:
01:ac:0d:3e:bc:62:67:2b:81:85:b8:5f:54:29:a4:47:3f:7f:
ab:ca:31:31:5c:bb:70:d2:55:3f:c3:9d:0b:1a:50:75:6c:30:
48:98:46:21:e8:73:7b:ea:75:de:08:1e:16:a4:b0:d3:38:70:
47:1a:49:61:97:32:a6:1b:de:74:8d:f5:63:b8:cf:40:1f:58:
cb:dc:c5:e7:8d:4e:21:3b:d9:97:b6:ca:3f:1a:68:6a:a0:44:
91:78:66:6c:9f:1b:9d:48:7a:05:d2:56:30:dd:b8:15:94:93:
0a:26:3e:bf:67:84:a7:d6:d6:7c:79:73:05:63:bd:63:01:dd:
5e:fa:68:9e:03:4c:eb:28:65:79:31:13:96:d2:40:e1:b4:35:
9b:24:d5:7e:d0:ad:ee:26:3b:51:ba:6c:fc:f3:2b:d7:f1:c7:
28:b8:0c:22:f7:3d:ec:5f:ca:8b:0d:0e:04:63:56:66:17:f1:
ca:b8:f2:20:b4:de:45:fc:a1:e7:02:f7:0c:22:04:2e:f7:2c:
2e:c0:5b:80:6e:de:45:33:70:be:cb:22:76:29:7d:21:b5:e0:
c6:76:73:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:09 2024 by rpki-client on console-fra.rpki-client.org