Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/qeQK-8lFBjLFqAZngOAyFiebFMI.roa
File: qeQK-8lFBjLFqAZngOAyFiebFMI.roa (raw, json)
Hash identifier: i7u7nH0m/m2EjffZOeZI+NtJit+AQZm+LS/+KrSQtgU=
Subject key identifier: A9:E4:0A:FB:C9:45:06:32:C5:A8:06:67:80:E0:32:16:27:9B:14:C2
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 0184D1DCD388589F9107767692C220F63B9F
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/qeQK-8lFBjLFqAZngOAyFiebFMI.roa
Signing time: Fri 02 Dec 2022 08:03:40 +0000
ROA not before: Fri 02 Dec 2022 08:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 193.53.174.0/24 maxlen: 24
193.53.185.0/24 maxlen: 24
193.53.186.0/24 maxlen: 24
193.53.190.0/24 maxlen: 24
193.53.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:dc:d3:88:58:9f:91:07:76:76:92:c2:20:f6:3b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Dec 2 08:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9e40afbc9450632c5a8066780e03216279b14c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:38:23:60:fc:de:da:5a:73:2f:11:6a:1c:
1a:e8:62:41:3c:e4:2b:f8:83:89:e9:d3:97:b9:1e:
12:92:63:18:5a:a2:db:e5:fc:15:fd:74:05:98:f6:
4f:29:d2:5f:14:4f:c2:3b:ee:90:8a:05:f5:2c:29:
56:e1:be:1a:9f:17:e3:3d:3d:f2:bc:89:26:1b:83:
04:5e:e7:9f:6f:4b:30:50:e3:dc:53:6e:e0:44:88:
d0:b9:6d:6b:77:ff:cb:0c:2d:8e:ba:1e:d5:91:ad:
c3:b9:a7:2a:2d:84:95:9d:c2:e1:be:b4:11:13:19:
46:b5:9a:89:2a:75:4f:e8:7b:4e:e8:0a:c2:7a:25:
ef:b0:a4:95:67:c0:fd:e4:00:f9:ab:de:e2:fd:85:
20:86:5e:89:66:b8:b7:9b:0c:06:ce:16:5c:88:31:
63:74:b7:0e:bd:91:c6:e1:2b:20:e8:6d:9b:99:90:
1a:b1:42:ed:76:df:dd:8f:20:eb:7d:92:2b:94:0c:
cf:ad:ba:73:b6:21:52:7f:b1:ea:19:b7:c0:7f:8f:
44:fd:03:3f:c9:3c:d1:c7:4d:ca:2d:62:72:4e:bb:
87:ba:4c:5a:a4:da:42:2f:b1:a7:8e:fe:b8:e6:d9:
00:58:89:3d:32:61:81:27:fe:e4:3d:d5:ed:75:c7:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E4:0A:FB:C9:45:06:32:C5:A8:06:67:80:E0:32:16:27:9B:14:C2
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/qeQK-8lFBjLFqAZngOAyFiebFMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.174.0/24
193.53.185.0-193.53.186.255
193.53.188.0/24
193.53.190.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b0:0c:59:3f:89:32:c8:2f:5e:7f:07:8f:34:07:fa:81:e3:
b3:f8:b1:1d:d2:c9:7f:f7:9e:d5:d3:cb:1b:28:7e:1e:ab:22:
c4:9d:c7:ae:af:d8:9e:42:e6:e9:26:f5:24:11:58:29:2b:ff:
38:50:93:8d:b6:8f:7a:b9:b1:6e:6d:37:04:82:5b:2c:34:60:
8c:51:a2:10:51:32:11:27:5e:d8:58:57:a7:24:88:24:41:95:
9f:f8:41:97:4b:be:34:da:99:95:bb:14:3c:36:a6:d8:d5:0f:
89:77:d7:08:72:a9:bb:9b:2f:df:b9:51:4a:06:b1:24:f1:7c:
0b:98:37:45:7b:ac:b8:20:08:93:a1:54:84:40:bf:d3:d5:46:
89:e7:26:46:a2:70:21:de:aa:8d:ea:ed:d0:2f:68:22:a2:b6:
cc:d5:ed:f1:38:3a:1a:b3:01:92:45:9b:b3:bd:0f:58:32:5c:
16:e5:41:07:b3:f5:14:f8:3f:4b:d6:38:ca:d5:5a:9a:45:c5:
e8:4b:75:fa:62:d2:07:07:9a:67:2d:20:54:78:9f:b8:36:86:
6f:47:93:2b:55:00:4b:ac:4a:79:e5:9e:a2:44:fc:df:28:d3:
6d:18:df:48:26:86:99:90:e6:d5:de:5a:e9:e1:81:bb:c9:04:
5c:75:2b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org