Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/Qkqgk7RM5dkJ7Bihvm_NiXaFPio.roa
File: Qkqgk7RM5dkJ7Bihvm_NiXaFPio.roa (raw, json)
Hash identifier: pWfi+epr15U8IfPU1WihhjyyxEZf7SMuhfyonUfOB+U=
Subject key identifier: 42:4A:A0:93:B4:4C:E5:D9:09:EC:18:A1:BE:6F:CD:89:76:85:3E:2A
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 08E6BA4E
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/Qkqgk7RM5dkJ7Bihvm_NiXaFPio.roa
Signing time: Sat 01 Jan 2022 10:01:47 +0000
ROA not before: Sat 01 Jan 2022 10:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62214
IP address blocks: 79.139.56.0/21 maxlen: 21
92.119.120.0/22 maxlen: 22
193.39.12.0/22 maxlen: 22
185.187.72.0/22 maxlen: 22
185.43.204.0/22 maxlen: 22
193.201.184.0/21 maxlen: 21
185.80.48.0/22 maxlen: 22
2a01:6ee0::/40 maxlen: 40
2a01:6ee0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149338702 (0x8e6ba4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Jan 1 10:01:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=424aa093b44ce5d909ec18a1be6fcd8976853e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:e1:f3:ec:18:1a:6d:2d:a0:58:2d:a5:bd:
05:da:d6:41:20:a0:f1:04:ba:9e:03:bb:4d:87:86:
c1:29:cf:3e:52:1c:b8:b8:58:b1:02:9f:a4:a2:99:
4c:5c:84:de:1f:ff:6c:55:0a:18:63:80:a6:41:be:
44:80:8b:94:b7:bd:00:04:6d:97:ec:82:5c:01:3a:
7f:c6:0a:a4:58:13:34:a2:35:2d:94:6f:e0:36:6c:
f7:86:2a:03:af:86:9b:b2:4a:0b:74:48:08:6c:16:
34:44:93:24:5c:8a:fd:b4:2d:5a:9f:17:9c:24:94:
25:a0:28:aa:01:05:c4:1c:09:8e:20:f5:e7:48:fd:
ec:f8:ef:2e:db:54:66:f0:3e:f4:bb:ec:34:f7:1f:
17:c1:a0:c1:ec:1c:85:4a:b2:77:f8:a4:8c:17:1e:
bb:ef:02:3e:5a:93:13:32:b2:94:af:61:3a:eb:c5:
53:85:32:93:cb:87:55:32:d3:e2:f1:b1:0e:3c:22:
2b:cf:92:5d:f3:2a:0f:6d:7e:29:5a:f4:a0:7e:14:
10:02:57:91:6d:37:db:65:36:78:3b:1a:91:3f:93:
c2:cf:99:72:89:1c:b3:38:ac:b5:a8:2f:c3:59:01:
a5:d6:ca:60:9e:a0:d8:50:46:f4:6b:de:60:1d:35:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:A0:93:B4:4C:E5:D9:09:EC:18:A1:BE:6F:CD:89:76:85:3E:2A
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/Qkqgk7RM5dkJ7Bihvm_NiXaFPio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.56.0/21
92.119.120.0/22
185.43.204.0/22
185.80.48.0/22
185.187.72.0/22
193.39.12.0/22
193.201.184.0/21
IPv6:
2a01:6ee0::/32
Signature Algorithm: sha256WithRSAEncryption
69:09:bc:6c:5e:a9:7a:7b:6a:8f:57:f8:20:99:79:2b:9e:b1:
00:9c:b9:32:bb:cb:35:5a:ff:43:9f:7c:34:9d:67:a5:7c:c5:
39:ba:30:95:a5:c3:bf:95:97:e5:d8:5b:42:22:3f:69:a8:0c:
ca:9a:06:df:2f:68:7a:1e:3e:e9:8c:ce:60:91:32:7e:8c:2a:
d5:b1:ea:11:08:73:88:86:2a:30:c8:51:b9:ba:0a:15:c0:65:
12:3e:ba:06:ce:7f:41:fc:24:09:4e:aa:e1:70:22:91:f7:56:
8c:d3:b6:7f:78:8e:fb:ae:8e:49:89:93:fa:2a:ca:24:de:40:
ff:72:1e:ef:67:9e:78:48:75:ec:ec:e5:1b:48:a7:29:0d:ed:
5b:b1:ae:b2:fe:17:39:19:61:00:9c:eb:bc:96:50:f6:79:b0:
3b:91:a7:ea:b4:92:c8:18:59:52:58:05:06:64:6e:01:7e:c9:
3b:fb:6c:bd:48:c1:71:be:ac:29:12:a7:16:bb:ea:e9:2f:7a:
c7:6b:35:34:eb:78:d6:eb:f7:93:25:ea:e0:01:2b:7b:2c:8f:
e5:fb:b2:95:af:3b:8e:e2:f2:b8:bd:66:1d:0b:88:0c:1a:c7:
49:69:17:79:7e:88:74:90:ef:89:a2:1e:e0:42:7d:fc:ae:7b:
09:6b:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org