Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/qe6XW_Uy_YGHjtgcBxWTM4Wq_64.roa
File: qe6XW_Uy_YGHjtgcBxWTM4Wq_64.roa (raw, json)
Hash identifier: JeU5dDyxG7ybs9FP2YGx0DkMtpLMf2Nf8rKEWHp32yo=
Subject key identifier: A9:EE:97:5B:F5:32:FD:81:87:8E:D8:1C:07:15:93:33:85:AA:FF:AE
Certificate issuer: /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial: 08F3FB38
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/qe6XW_Uy_YGHjtgcBxWTM4Wq_64.roa
Signing time: Sat 01 Jan 2022 08:05:43 +0000
ROA not before: Sat 01 Jan 2022 08:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137
IP address blocks: 193.43.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150207288 (0x8f3fb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Validity
Not Before: Jan 1 08:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9ee975bf532fd81878ed81c0715933385aaffae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:49:22:e0:af:fd:a1:1f:e7:c7:f4:2c:ce:df:
f9:6a:ef:18:c1:e6:c1:25:d1:21:ef:4c:bf:02:dd:
a4:ee:af:b5:89:85:8a:b8:6f:17:18:ab:93:51:f1:
fc:5d:dc:be:fa:a8:ac:40:66:2b:63:48:34:71:1b:
b7:fb:58:70:3a:f2:63:6d:dd:4c:a2:b0:96:7a:d6:
54:d1:dc:62:ce:d8:bf:fc:59:72:d1:a5:f2:21:0d:
5d:fe:c1:6b:f0:35:72:05:2c:5c:5a:24:bb:bf:c3:
5b:5e:28:f9:9d:fd:01:c4:fd:80:99:7a:e7:a6:e9:
07:4a:db:7d:3a:b0:52:0e:54:69:a2:2a:91:7d:09:
71:7d:06:82:a4:45:6b:88:3e:f3:06:f4:5c:00:a4:
30:91:66:bc:07:58:0c:81:52:42:14:05:16:3b:01:
04:1b:2c:19:e6:d4:52:3c:02:79:2f:1f:c0:5e:a3:
30:f9:24:99:a3:83:80:e8:56:92:12:94:80:11:ab:
11:fc:d0:20:e3:98:81:5d:14:33:b9:df:a3:7f:a9:
b3:3f:3a:bd:67:a0:d1:6f:08:82:ae:b6:b3:b2:ec:
51:81:5a:31:60:da:91:2b:e2:6e:71:38:9b:c9:50:
41:42:16:7a:ee:8b:f7:10:92:09:bc:e8:c1:2f:96:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:97:5B:F5:32:FD:81:87:8E:D8:1C:07:15:93:33:85:AA:FF:AE
X509v3 Authority Key Identifier:
keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/qe6XW_Uy_YGHjtgcBxWTM4Wq_64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:de:b2:ff:2c:dd:43:e9:e5:c7:9e:b5:53:63:6c:07:fe:d5:
c3:ff:53:a1:84:f2:84:d6:b3:50:94:17:56:a0:57:8d:f5:1f:
4d:bd:c2:27:59:5c:59:97:56:07:0a:3a:d4:89:f2:85:ea:5c:
e6:85:e5:c4:1f:e4:56:0d:df:ee:4b:2a:7c:12:1a:61:9a:eb:
45:8b:5b:a2:dc:f3:fe:0a:36:88:2f:73:77:a7:0d:b9:ab:a6:
c6:70:7f:2b:82:09:65:a9:6b:b0:e3:e9:d5:c7:9f:56:d2:31:
92:f0:6d:80:c1:c2:2b:2d:64:2b:ab:db:77:4b:13:24:38:44:
c0:06:74:5e:41:7b:51:5b:e8:f1:77:a5:85:88:2f:a4:f5:7d:
e9:fd:84:4b:ad:95:6f:34:3b:44:5a:fd:da:84:ab:15:87:5f:
4a:ac:a1:fc:4f:e4:63:6c:b5:67:66:39:5a:87:52:36:ee:64:
a6:3f:e7:e3:2c:68:89:6f:74:ec:ff:1c:c9:86:30:31:d7:1f:
68:b7:53:be:e9:74:92:ce:96:92:89:f8:dc:35:d0:05:06:46:
d9:e8:e3:c4:68:04:2a:23:fb:35:db:06:33:67:27:82:1f:5b:
e2:43:6e:f5:c8:9c:98:0e:fb:e3:60:23:d4:93:2d:b5:9b:38:
79:16:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:55 2023 by rpki-client on console-fra.rpki-client.org