Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/QUO1kEUh6FPfYlmjdPEBnbeWuUU.roa
File: QUO1kEUh6FPfYlmjdPEBnbeWuUU.roa (raw, json)
Hash identifier: lwVqNy/x+/GdohF/FH8LqfZp1acxJBZomvVxOU31/FM=
Subject key identifier: 41:43:B5:90:45:21:E8:53:DF:62:59:A3:74:F1:01:9D:B7:96:B9:45
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 03A8A530
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/QUO1kEUh6FPfYlmjdPEBnbeWuUU.roa
Signing time: Sat 01 Jan 2022 12:58:39 +0000
ROA not before: Sat 01 Jan 2022 12:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39584
IP address blocks: 193.200.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61383984 (0x3a8a530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Jan 1 12:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4143b5904521e853df6259a374f1019db796b945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:0a:46:08:1e:6d:a4:7c:06:d9:68:c7:6d:
c6:45:4d:b1:fe:40:58:fd:5f:7e:0c:d5:86:3b:ac:
56:90:e8:a0:21:c0:c1:ca:51:e2:ba:77:03:a3:5d:
d4:59:df:54:79:78:11:cf:58:d8:f8:fb:94:70:ea:
f8:72:28:4e:51:b4:e3:9e:0d:63:44:53:a8:2b:93:
46:a1:db:7c:2f:15:12:a9:aa:59:f9:47:35:3b:0b:
ff:d7:20:cf:21:2d:e7:01:8c:87:ae:27:f1:0d:ae:
97:c9:1b:91:ea:14:be:9e:2a:c4:e1:32:8b:b8:04:
f0:e8:91:7f:ee:75:50:2c:87:9a:2c:55:c6:8c:ad:
8f:7a:27:1e:9a:1e:0b:df:c6:fe:a7:03:5b:39:ee:
4c:3f:0c:c7:40:f7:09:6c:56:9c:8e:76:0e:95:4f:
20:9b:90:aa:a1:c8:3b:14:5e:78:34:84:08:87:77:
64:bd:5c:fc:e0:a4:86:e8:28:ad:89:ec:a4:59:7a:
3f:e8:19:20:e8:1d:30:4b:ec:0a:89:19:4f:36:00:
be:15:42:e6:5e:9b:82:f3:b0:04:7a:b4:60:cf:78:
bb:e1:f0:51:2c:a4:c1:7f:bf:bd:9e:0b:ea:79:b2:
e7:a0:1b:48:5c:61:ce:4e:62:51:b9:71:67:1d:cb:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:43:B5:90:45:21:E8:53:DF:62:59:A3:74:F1:01:9D:B7:96:B9:45
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/QUO1kEUh6FPfYlmjdPEBnbeWuUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.176.0/24
Signature Algorithm: sha256WithRSAEncryption
29:0d:d5:ad:98:ea:2e:1c:fd:3d:8c:5e:f8:33:26:55:25:50:
a6:61:da:10:c6:c2:1a:b1:a6:db:95:4f:46:1a:83:68:c0:82:
85:ca:06:59:41:6b:7f:0f:80:a5:8c:89:90:bf:7e:22:49:9f:
81:3d:0d:af:9f:e5:3d:e6:66:87:eb:9a:8a:81:0a:72:42:a0:
64:e3:fd:49:1a:87:d7:eb:63:ed:ff:f2:9a:4f:1e:84:be:72:
33:83:c2:54:21:10:7f:27:4c:62:b6:ae:1b:74:0c:25:22:ec:
f4:0e:4c:91:90:70:57:58:90:76:c2:7b:48:18:43:d7:c3:96:
41:46:ac:be:61:74:38:4b:10:28:c6:2a:a9:4b:54:0c:50:37:
08:ec:ae:eb:d7:f7:3b:5b:8d:b1:90:26:8a:b1:90:57:68:b3:
fb:8e:29:25:95:50:d0:bb:4d:5e:a1:0d:26:d0:88:ba:f9:60:
a2:db:5d:51:dd:06:73:68:f7:5b:03:e8:d4:9a:d1:64:00:34:
1a:c1:57:48:07:c5:08:58:fa:46:67:a0:04:05:75:9a:bf:f8:
22:4c:a0:d1:3f:d1:8b:88:65:15:12:b0:75:6f:41:1a:d2:d9:
64:46:e4:d6:be:68:82:67:9d:d2:6d:d0:ca:80:95:16:e9:51:
39:4e:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:50 2023 by rpki-client on console-ams.rpki-client.org