Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/qPcfW9uE2OZrWpTz3RuXUkwA7wY.roa
File: qPcfW9uE2OZrWpTz3RuXUkwA7wY.roa (raw, json)
Hash identifier: 41IEsBi7CzM3B7WyVYfc8IB5Sfl76gXsK9suZwpPJTw=
Subject key identifier: A8:F7:1F:5B:DB:84:D8:E6:6B:5A:94:F3:DD:1B:97:52:4C:00:EF:06
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 1687D20C
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/qPcfW9uE2OZrWpTz3RuXUkwA7wY.roa
Signing time: Sat 01 Jan 2022 06:01:55 +0000
ROA not before: Sat 01 Jan 2022 06:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399641
IP address blocks: 213.170.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377999884 (0x1687d20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 06:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8f71f5bdb84d8e66b5a94f3dd1b97524c00ef06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:09:cb:66:22:29:64:f8:76:b7:64:6a:37:
3f:ae:d3:18:0c:56:f6:9b:49:13:07:c8:71:97:1b:
31:37:18:a0:22:94:30:ad:20:d3:d9:69:eb:32:02:
5d:9a:1a:29:e9:30:a1:68:2f:56:f8:f9:b3:d4:db:
70:d3:1a:bd:14:8d:fe:61:64:9b:11:bc:9f:95:1e:
ee:ed:4e:18:2b:95:35:b4:64:86:4e:e9:68:9a:9d:
cf:fe:9d:99:e6:87:be:14:10:66:19:4c:ac:e6:15:
bf:b5:8d:33:ca:ae:15:98:32:6d:bd:96:05:7c:f7:
95:04:53:3b:24:01:10:a6:0c:9f:bb:b2:e0:54:f7:
1a:76:30:3e:a0:54:70:2c:c9:7e:08:54:1c:12:ce:
2c:7f:56:5a:65:c5:88:71:65:3e:c7:08:fc:be:ac:
98:ec:87:96:c6:6c:2e:0a:c2:1f:3d:8a:fd:a1:86:
80:5a:64:cf:75:c2:e9:44:10:e3:7b:35:b7:db:71:
c6:67:45:27:e5:ca:06:30:93:34:96:9a:6d:8f:91:
fe:f5:c4:67:1c:ba:31:37:63:e5:3e:3b:bf:44:3b:
37:b2:1b:05:53:d4:5c:64:e7:54:92:74:63:20:09:
42:6a:a8:5c:11:84:ba:7d:74:64:90:bf:60:5d:ae:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F7:1F:5B:DB:84:D8:E6:6B:5A:94:F3:DD:1B:97:52:4C:00:EF:06
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/qPcfW9uE2OZrWpTz3RuXUkwA7wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.145.0/24
Signature Algorithm: sha256WithRSAEncryption
44:75:7d:0d:f2:51:4d:ee:3d:52:aa:3f:b3:4e:af:5f:e1:4f:
d3:69:dc:a6:30:9f:2d:19:9b:5a:f0:04:b6:9a:fd:1e:97:19:
e4:62:45:73:5d:b5:0a:cd:bc:c9:04:d7:01:c2:78:56:2b:7d:
3a:17:dd:a4:8e:5a:0b:bf:53:73:c0:48:ed:82:3b:1a:89:a7:
c8:7d:e2:43:07:25:f1:ef:7b:85:2a:59:07:ec:39:55:69:4e:
5d:c7:1f:48:f8:f7:4e:94:d7:34:60:dd:6f:74:50:55:7c:16:
66:93:93:06:6f:f8:48:2f:c9:0a:ea:ab:1a:05:bc:88:df:23:
78:85:b9:8e:bc:54:2d:00:ef:5f:b2:66:36:8f:69:46:33:c3:
0f:6c:c7:26:0e:f1:c4:0b:b6:6f:28:b0:86:88:3a:54:47:83:
0a:cf:d9:4e:48:1f:65:2b:fe:a3:af:74:07:03:5b:7d:b9:41:
1f:b6:a4:01:0b:0a:5e:32:d8:5f:2f:32:59:88:e1:57:6d:72:
d6:37:57:ca:9b:72:82:a1:42:42:8e:6c:3e:13:d2:4b:55:53:
58:00:b7:f4:d8:14:49:7d:a9:ff:4c:82:52:af:83:1f:ae:90:
50:a2:5c:40:c1:fe:99:61:d8:c6:c0:cd:26:b7:3d:65:58:56:
4f:5f:c7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:24 2024 by rpki-client on console-fra.rpki-client.org