Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/qy21pLPlLzQ_fHItZ-jPJfIEBOE.roa
File: qy21pLPlLzQ_fHItZ-jPJfIEBOE.roa (raw, json)
Hash identifier: PbsAozFadopH/pnEFF2Hmv0PZM1wAEhCobLeOOf9uqw=
Subject key identifier: AB:2D:B5:A4:B3:E5:2F:34:3F:7C:72:2D:67:E8:CF:25:F2:04:04:E1
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 018552CE2CF38F8371BC312AF9E0E649876B
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/qy21pLPlLzQ_fHItZ-jPJfIEBOE.roa
Signing time: Tue 27 Dec 2022 08:58:41 +0000
ROA not before: Tue 27 Dec 2022 08:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57665
IP address blocks: 185.226.44.0/22 maxlen: 22
31.222.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:ce:2c:f3:8f:83:71:bc:31:2a:f9:e0:e6:49:87:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Dec 27 08:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab2db5a4b3e52f343f7c722d67e8cf25f20404e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:ae:03:b0:a7:ae:cb:cf:04:9d:9d:de:93:
27:ae:d3:d3:b1:8a:d1:9e:58:26:52:c1:9f:db:09:
64:37:90:53:85:96:4c:aa:7a:da:4a:45:77:1a:55:
76:15:27:ff:95:7b:ca:2c:48:8e:ee:03:f3:6f:c9:
93:af:a8:8b:86:28:d8:05:c1:5a:85:ec:f6:5c:1d:
f4:f7:bd:ea:93:ea:84:d8:dc:7b:a7:4b:41:a3:a4:
7d:fc:9d:65:91:17:d3:09:c6:11:3f:b9:82:75:77:
7d:ed:81:b6:48:2f:6c:bf:6c:b8:45:83:48:26:79:
47:09:a0:50:a7:62:eb:6b:fe:4f:30:c3:99:e3:b7:
8d:9f:fd:3e:7c:75:cd:9f:2b:a2:32:35:17:21:b3:
84:5d:a8:67:be:6f:80:60:81:ea:2e:19:71:dc:59:
9b:9e:f5:4b:00:3a:f0:eb:85:dd:a1:e7:46:f5:5a:
7a:41:50:b3:4a:21:a8:5e:7a:56:e3:70:84:79:e9:
61:b0:43:69:9f:36:1c:bf:3e:c5:b4:40:84:02:6f:
f5:cf:3e:ff:20:9d:d6:e4:02:2f:55:ba:c6:96:af:
ee:7d:09:23:c8:59:58:dc:4e:62:e9:07:cc:31:a1:
9a:14:7a:6b:09:61:76:4e:b1:32:4c:01:56:78:23:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:B5:A4:B3:E5:2F:34:3F:7C:72:2D:67:E8:CF:25:F2:04:04:E1
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/qy21pLPlLzQ_fHItZ-jPJfIEBOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.16.0/21
185.226.44.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d9:eb:3c:de:ee:9c:73:eb:02:5e:f4:31:99:a8:03:23:7f:
63:d0:96:c1:61:20:2b:8d:4b:8f:e3:80:54:82:e7:be:4b:73:
9f:6e:d6:6f:6d:58:4b:92:a9:c2:7d:f5:68:47:f6:26:59:9e:
5a:14:54:53:60:9b:12:38:11:73:b2:dc:e6:cb:6a:c1:98:53:
6a:e7:bc:79:67:6e:50:89:8e:1e:b8:b1:9b:f7:57:93:9a:64:
a2:ea:61:e5:21:d2:26:24:5e:de:62:35:ae:ed:72:d2:ee:bd:
dd:2e:e7:03:9e:2d:e7:07:06:19:c8:a5:1c:20:8d:fe:bf:4d:
7c:c3:22:2c:a6:0b:c3:48:74:77:00:ea:76:e8:ff:b7:79:bf:
31:3b:4c:b2:26:af:08:22:41:a7:75:e6:3d:b4:f0:3d:05:8e:
62:61:bc:48:df:ae:a2:e3:c4:ff:58:e0:f6:9f:40:12:d7:d9:
50:6b:3a:8b:dd:d4:66:66:19:47:36:22:69:08:25:5f:72:86:
0e:6f:53:5e:ee:e4:b8:7b:a3:1c:b2:fe:24:52:14:7a:53:f2:
62:27:76:e1:b1:fb:35:dd:74:b7:df:3a:aa:9c:72:88:0d:27:
76:74:87:25:86:e0:d1:47:e0:88:d5:7c:e4:92:25:b7:8f:d3:
66:fc:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:09 2024 by rpki-client on console-ams.rpki-client.org