Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/fqqafuRdUc-F1QdCEEXu2Xux3Ls.roa
File: fqqafuRdUc-F1QdCEEXu2Xux3Ls.roa (raw, json)
Hash identifier: CFp3BxyXJTF5to4ZiFuVWuQnohxejLZfIuAT7olnrN0=
Subject key identifier: 7E:AA:9A:7E:E4:5D:51:CF:85:D5:07:42:10:45:EE:D9:7B:B1:DC:BB
Certificate issuer: /CN=3de34082925cfd294b51af128aca545ff21f0ed0
Certificate serial: 178DCD
Authority key identifier: 3D:E3:40:82:92:5C:FD:29:4B:51:AF:12:8A:CA:54:5F:F2:1F:0E:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeNAgpJc_SlLUa8SispUX_IfDtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/fqqafuRdUc-F1QdCEEXu2Xux3Ls.roa
Signing time: Sat 01 Jan 2022 02:50:47 +0000
ROA not before: Sat 01 Jan 2022 02:50:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210546
IP address blocks: 176.126.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543629 (0x178dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de34082925cfd294b51af128aca545ff21f0ed0
Validity
Not Before: Jan 1 02:50:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eaa9a7ee45d51cf85d507421045eed97bb1dcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:42:fd:6a:51:a1:0e:ca:f1:bb:24:84:ee:
88:4a:8e:46:4f:6b:4f:cb:6e:18:df:61:cb:a1:04:
f5:bb:31:3e:61:53:dd:32:ca:6a:aa:1d:1d:3c:16:
3e:8f:d8:60:fb:45:82:55:0e:f3:c0:2e:18:24:3c:
d6:20:a7:da:29:04:7d:f7:66:2e:63:4b:a9:2f:36:
98:bc:c2:f0:b1:35:0d:28:8d:2e:28:7e:94:4a:cb:
df:eb:c3:9a:90:e4:a2:79:0d:88:4d:34:7f:fa:19:
49:45:97:8c:89:05:38:f7:31:f5:ab:48:82:33:2d:
36:e5:b5:6f:da:9e:a0:c6:51:96:f7:14:fa:5e:6a:
2c:f0:f8:f8:45:47:b5:24:6e:b9:ae:c8:26:4c:43:
50:44:89:99:45:7e:e5:27:ab:0a:d9:32:99:bd:89:
47:5f:76:73:a0:fb:5c:be:c7:7d:10:92:4f:39:b6:
72:18:b6:7d:d0:1c:7e:c7:f1:0c:f5:f8:4f:b8:aa:
09:b7:dc:30:9e:a7:5a:6c:ac:70:05:a7:be:ba:4d:
3c:94:f0:7c:74:99:cc:4e:b4:cf:35:cf:39:01:0e:
17:9b:2c:6d:60:4e:66:6f:04:32:c2:c1:47:eb:0a:
a1:48:90:c3:4d:a6:bc:b3:7a:bf:87:de:d2:7c:de:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AA:9A:7E:E4:5D:51:CF:85:D5:07:42:10:45:EE:D9:7B:B1:DC:BB
X509v3 Authority Key Identifier:
keyid:3D:E3:40:82:92:5C:FD:29:4B:51:AF:12:8A:CA:54:5F:F2:1F:0E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeNAgpJc_SlLUa8SispUX_IfDtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/fqqafuRdUc-F1QdCEEXu2Xux3Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/PeNAgpJc_SlLUa8SispUX_IfDtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.103.0/24
Signature Algorithm: sha256WithRSAEncryption
80:08:64:0c:fa:2b:3b:91:7c:54:8c:6a:1a:57:24:bd:f1:ca:
ce:8a:28:44:28:6a:57:74:52:49:43:04:47:7b:10:40:71:9a:
c1:e8:44:d0:19:28:da:c2:f6:73:b4:b4:de:ff:87:e6:b9:8a:
ff:6a:44:22:99:15:d6:5a:78:8a:9d:d5:be:b7:73:5e:e4:cf:
a8:9f:ac:48:c6:62:3e:36:35:f8:f5:1e:dc:08:a8:85:a8:11:
94:99:fb:ac:fb:71:c3:08:1f:bb:07:f5:cc:6f:c4:9b:10:2f:
aa:e0:f2:b1:cf:17:ec:90:cb:20:7e:43:b4:84:34:02:9b:0d:
d9:b9:30:01:0c:e9:26:73:36:25:38:ee:59:bd:5f:71:99:23:
8c:d2:b8:cc:9b:e0:6c:95:4b:cd:a2:94:99:fc:da:c9:f7:f2:
5d:74:9d:f2:55:c9:f0:c9:1a:2b:38:18:32:6a:c7:7e:6c:31:
8e:c9:da:2d:93:f9:82:b9:7b:8d:17:04:1e:88:7e:a4:32:0f:
a6:80:6b:e9:65:bf:af:33:0c:d6:b6:15:86:09:af:2d:a6:60:
38:1c:04:10:f4:f9:bd:25:99:b2:d1:93:5f:50:6b:68:9d:39:
c9:9b:6f:6d:c7:e8:bc:e4:19:64:3d:85:06:bf:a3:59:8c:cb:
ea:98:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-fra.rpki-client.org