Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/qd0701YFMbqlERIii77uCAgiY94.roa
File: qd0701YFMbqlERIii77uCAgiY94.roa (raw, json)
Hash identifier: uKiiYEJl+0WA1xpBBLIdzO/WtWTZ8Lzjce8ytkOF3jk=
Subject key identifier: A9:DD:3B:D3:56:05:31:BA:A5:11:12:22:8B:BE:EE:08:08:22:63:DE
Certificate issuer: /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial: 08987BBA
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/qd0701YFMbqlERIii77uCAgiY94.roa
Signing time: Sat 01 Jan 2022 03:59:05 +0000
ROA not before: Sat 01 Jan 2022 03:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41720
IP address blocks: 185.242.183.0/24 maxlen: 24
2a0d:b280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144210874 (0x8987bba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Validity
Not Before: Jan 1 03:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9dd3bd3560531baa51112228bbeee08082263de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:1a:be:49:8c:25:07:35:25:ae:0c:42:b3:
dd:5a:3a:d9:57:bf:66:2c:1e:71:fa:4e:ee:71:19:
3f:f2:cc:6c:0b:a8:39:b1:34:09:e6:b5:e0:81:b1:
5d:6a:be:e7:a0:f1:b3:93:e1:04:05:10:23:82:bb:
1b:a0:9b:c6:66:ea:0e:60:e0:46:57:cb:53:22:db:
7c:9c:d3:62:9f:c9:22:a2:f2:6c:c7:cb:4f:d5:fe:
6f:c2:31:fc:54:29:f8:51:a9:f4:1f:17:01:50:46:
06:77:58:4b:c6:6c:46:13:58:0d:4b:5a:f6:51:9d:
f8:f8:49:3a:3e:71:13:2f:f4:35:ba:4c:8b:ec:61:
69:33:94:a5:53:dc:dc:93:a7:f7:fb:20:c0:fe:c2:
e2:ee:56:d5:1d:eb:16:d4:86:73:91:29:81:c7:a0:
aa:e8:11:65:25:85:27:ba:d1:ab:71:bb:86:7b:c4:
e0:3e:2f:53:8e:61:1b:f9:3f:6f:06:84:71:77:17:
69:9d:56:98:54:ca:85:a7:b9:f7:53:7d:6a:29:58:
07:4b:00:9f:22:47:4e:8f:a1:d9:52:62:35:a6:ec:
76:a4:19:30:52:02:c1:12:e4:9d:47:27:35:2e:d4:
16:fd:43:9e:7d:6a:3a:5e:25:0c:a0:c8:8c:fc:db:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:3B:D3:56:05:31:BA:A5:11:12:22:8B:BE:EE:08:08:22:63:DE
X509v3 Authority Key Identifier:
keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/qd0701YFMbqlERIii77uCAgiY94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.183.0/24
IPv6:
2a0d:b280::/29
Signature Algorithm: sha256WithRSAEncryption
a8:a5:df:79:87:e3:33:c8:55:51:91:fb:a2:4b:79:16:52:5d:
ee:03:c0:14:5f:09:da:cb:10:cc:12:6f:86:8c:28:ea:6b:bb:
72:6a:90:1a:11:09:30:81:06:b0:99:a0:0e:a3:05:f1:07:92:
fb:aa:79:73:49:3e:29:a5:de:f9:df:51:cd:4c:e6:29:23:50:
bc:2d:6f:d7:e6:79:b2:5b:02:d5:11:4f:d9:cf:d4:7c:3c:05:
bb:8e:08:6f:15:aa:0e:09:d0:e3:ca:9b:d6:7a:4f:bf:99:77:
58:e8:b6:5b:c5:30:62:b5:47:a5:9a:cb:7d:d5:d4:ff:d8:94:
42:16:ad:d1:ff:aa:fa:a6:38:36:02:89:5c:5f:0b:81:23:09:
3e:fd:aa:c1:f9:9b:6f:d9:df:c5:ad:a9:21:e6:a5:d4:f0:75:
13:d7:56:9c:9a:49:ad:e5:d1:43:45:f1:81:50:c0:6a:c7:6c:
f0:be:97:91:63:16:32:d6:b5:1f:b1:62:a4:65:06:a5:a5:40:
b9:6c:09:0a:cf:e4:09:4e:43:c6:44:ee:a9:b0:fc:70:c7:99:
77:48:59:da:60:4d:fd:8c:1c:c0:3b:ff:b8:78:67:df:32:fd:
a7:f2:08:72:e8:e3:c8:ee:ce:14:5f:53:c6:da:ab:26:c9:ad:
af:5f:db:2e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECJh7ujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZmNiMzBmZDdkNmU0NDk0OTNlYzdjYjBkOWY3ODYwMDQ1OGJlMjFiMB4XDTIyMDEw
MTAzNTkwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTlkZDNiZDM1NjA1
MzFiYWE1MTExMjIyOGJiZWVlMDgwODIyNjNkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM9eGr5JjCUHNSWuDEKz3Vo62Ve/ZiwecfpO7nEZP/LMbAuo
ObE0Cea14IGxXWq+56Dxs5PhBAUQI4K7G6CbxmbqDmDgRlfLUyLbfJzTYp/JIqLy
bMfLT9X+b8Ix/FQp+FGp9B8XAVBGBndYS8ZsRhNYDUta9lGd+PhJOj5xEy/0NbpM
i+xhaTOUpVPc3JOn9/sgwP7C4u5W1R3rFtSGc5EpgcegqugRZSWFJ7rRq3G7hnvE
4D4vU45hG/k/bwaEcXcXaZ1WmFTKhae591N9ailYB0sAnyJHTo+h2VJiNabsdqQZ
MFICwRLknUcnNS7UFv1Dnn1qOl4lDKDIjPzbTqcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSp3TvTVgUxuqUREiKLvu4ICCJj3jAfBgNVHSMEGDAWgBQvyzD9fW5ElJPs
fLDZ94YARYviGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0w4c3dfWDF1UkpTVDdIeXcyZmVHQUVXTDRocy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvYjkxMGJmLWU0OWItNGNkYy1iZTc5LTRkZDRkYzMzOTFhYy8x
L3FkMDcwMVlGTWJxbEVSSWlpNzd1Q0FnaVk5NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAv
YjkxMGJmLWU0OWItNGNkYy1iZTc5LTRkZDRkYzMzOTFhYy8xL0w4c3dfWDF1UkpT
VDdIeXcyZmVHQUVXTDRocy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALnytzANBAIAAjAHAwUDKg2ygDAN
BgkqhkiG9w0BAQsFAAOCAQEAqKXfeYfjM8hVUZH7okt5FlJd7gPAFF8J2ssQzBJv
howo6mu7cmqQGhEJMIEGsJmgDqMF8QeS+6p5c0k+KaXe+d9RzUzmKSNQvC1v1+Z5
slsC1RFP2c/UfDwFu44IbxWqDgnQ48qb1npPv5l3WOi2W8UwYrVHpZrLfdXU/9iU
Qhat0f+q+qY4NgKJXF8LgSMJPv2qwfmbb9nfxa2pIeal1PB1E9dWnJpJreXRQ0Xx
gVDAasds8L6XkWMWMta1H7FipGUGpaVAuWwJCs/kCU5DxkTuqbD8cMeZd0hZ2mBN
/YwcwDv/uHhn3zL9p/IIcujjyO7OFF9TxtqrJsmtr1/bLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:52 2024 by rpki-client on console-fra.rpki-client.org