Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/CqKP99VF-yjUBg7kbgYs-FI7DZA.roa
File: CqKP99VF-yjUBg7kbgYs-FI7DZA.roa (raw, json)
Hash identifier: 7Dj1Af0Xv1OQX4rJhf8b6xEqv2iNMawYGWTL7xeupBc=
Subject key identifier: 0A:A2:8F:F7:D5:45:FB:28:D4:06:0E:E4:6E:06:2C:F8:52:3B:0D:90
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 12724033
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/CqKP99VF-yjUBg7kbgYs-FI7DZA.roa
Signing time: Sat 01 Jan 2022 14:56:56 +0000
ROA not before: Sat 01 Jan 2022 14:56:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58331
IP address blocks: 193.242.195.0/24 maxlen: 24
193.242.194.0/24 maxlen: 24
185.75.205.0/24 maxlen: 24
185.75.206.0/24 maxlen: 24
185.75.207.0/24 maxlen: 24
2a05:5445::/32 maxlen: 32
2a05:5441::/32 maxlen: 32
2a05:5444::/32 maxlen: 32
2a05:5442::/32 maxlen: 32
2a05:5447::/32 maxlen: 32
2a05:5446::/32 maxlen: 32
2a05:5440::/32 maxlen: 32
2a05:5443::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309477427 (0x12724033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Jan 1 14:56:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aa28ff7d545fb28d4060ee46e062cf8523b0d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:a0:ec:06:43:e0:0f:83:56:d3:cf:b5:45:
30:b7:04:98:dc:73:2d:89:80:3b:4c:a7:34:a1:be:
10:2b:01:f1:4a:7a:1b:98:a1:c5:a4:64:0f:d2:68:
60:e6:cd:6a:c5:b2:37:34:d1:a2:60:6a:47:14:a3:
96:0a:de:39:d6:3c:73:6b:73:46:16:6d:e4:fb:9a:
97:77:be:1c:4d:f8:7c:27:9c:76:81:d8:50:7d:86:
bb:0d:cc:fe:70:19:e4:ce:e4:6b:48:6d:a4:55:31:
de:a0:5a:bf:3e:1d:c6:87:dd:4c:f1:b9:2e:09:7b:
22:70:e0:b8:05:41:b4:ef:23:3a:d2:62:96:fe:86:
0d:40:f4:9f:09:6f:3f:9e:68:4d:c7:88:59:91:a3:
7d:47:d8:f0:0d:53:5c:38:c2:52:33:d7:af:ac:17:
7c:4e:ea:a6:34:85:89:6b:55:ca:cc:ca:66:ca:be:
e7:87:24:0e:37:8f:d8:5d:37:be:08:72:ae:4f:75:
04:f2:a1:2b:79:95:31:77:51:f4:dd:29:a5:a9:4f:
41:e8:2f:5b:47:b1:88:45:48:42:82:01:6b:20:e4:
3a:52:e8:ac:fb:6a:d2:ba:f7:2c:1c:d1:46:c9:d9:
45:46:1b:17:60:74:f2:9a:18:c7:54:88:e3:22:68:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A2:8F:F7:D5:45:FB:28:D4:06:0E:E4:6E:06:2C:F8:52:3B:0D:90
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/CqKP99VF-yjUBg7kbgYs-FI7DZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.205.0-185.75.207.255
193.242.194.0/23
IPv6:
2a05:5440::/29
Signature Algorithm: sha256WithRSAEncryption
bd:87:57:c4:1f:39:96:e3:ef:22:e7:5b:84:bb:d1:b6:96:21:
91:82:a4:62:f1:9f:d9:80:49:4d:66:bd:49:a1:91:b4:c1:47:
29:e6:cc:56:c7:92:a3:a0:d4:15:d4:11:ef:bf:be:3e:c3:f8:
39:4f:11:bf:2b:f4:28:7c:89:c2:de:34:1c:36:19:cd:f6:3e:
ce:40:65:e4:3f:8e:b0:a8:8e:5f:83:50:9a:05:cd:6e:ac:7a:
67:ad:72:2d:28:c9:41:48:99:75:5d:55:f3:ea:62:ce:08:0a:
d5:ef:5c:7b:4b:4a:46:6a:1b:27:58:5b:27:7b:d9:70:07:ca:
6d:2b:c8:30:f3:2c:b0:a3:31:6e:4a:26:63:5c:d5:d0:8f:65:
2c:e6:16:b7:eb:7f:39:04:cd:00:10:36:e3:9a:ab:9d:f3:b4:
ba:a8:04:2a:17:dc:b1:d4:04:56:b0:27:0f:bc:3a:84:93:18:
da:36:2d:a6:29:7d:64:f5:e3:92:8c:0f:8f:be:56:c0:4e:08:
9e:5a:8a:f5:81:f4:69:5d:5f:2d:8b:ff:96:1a:34:93:16:cc:
c8:50:2c:44:72:dc:27:07:47:31:14:00:35:de:c7:1d:94:f6:
09:34:8b:55:5c:1a:57:95:ba:82:d7:37:be:2b:b3:75:06:4b:
99:31:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-fra.rpki-client.org