Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/dqq4WxWOxUgW7o5p82fpaZqfVVc.roa
File: dqq4WxWOxUgW7o5p82fpaZqfVVc.roa (raw, json)
Hash identifier: foCTCaa4au7Q2K+t0qTfMckGCuIxMkr0evFkPEv/D74=
Subject key identifier: 76:AA:B8:5B:15:8E:C5:48:16:EE:8E:69:F3:67:E9:69:9A:9F:55:57
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 01853F5520A4AFED334343E2EFBCC52DFC42
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/dqq4WxWOxUgW7o5p82fpaZqfVVc.roa
Signing time: Fri 23 Dec 2022 14:13:41 +0000
ROA not before: Fri 23 Dec 2022 14:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14576
IP address blocks: 193.202.84.0/22 maxlen: 22
45.145.128.0/23 maxlen: 23
193.202.8.0/22 maxlen: 22
193.202.12.0/22 maxlen: 22
193.187.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:55:20:a4:af:ed:33:43:43:e2:ef:bc:c5:2d:fc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Dec 23 14:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76aab85b158ec54816ee8e69f367e9699a9f5557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:15:a0:0d:3f:ac:7e:1c:bc:3b:eb:88:4d:
26:64:39:5a:17:71:7b:0d:4a:ef:e1:e4:3e:a5:25:
e5:9a:d9:ce:ab:f0:40:8d:ed:a2:46:90:ca:56:55:
ab:f9:33:6d:3d:a2:0b:2b:ec:3f:bd:68:cf:66:ad:
13:86:51:1b:90:21:35:d7:7b:3f:2c:c0:d9:b9:c1:
39:c0:ef:ae:56:43:f0:9e:31:bd:ef:56:07:16:a1:
c8:4f:20:28:1f:6c:e4:bd:f9:e5:6c:23:3c:9e:35:
d2:9c:ab:50:9d:aa:f0:69:a8:bb:78:54:f2:7d:f4:
dd:66:0e:a4:69:00:55:a3:cb:df:bb:52:ae:7e:50:
3d:c1:9d:dd:b0:df:c1:c0:25:e5:4d:92:d5:3a:ea:
8e:a4:a7:2f:cf:68:68:ab:36:8b:ef:f2:5a:aa:fb:
3e:3c:73:c3:1e:47:d2:70:9e:94:e7:3f:ce:59:36:
94:23:6c:ff:cf:d4:1f:d9:00:86:45:01:a1:19:19:
53:bb:7f:ce:0e:1c:90:3a:c6:52:1c:f4:fc:16:05:
94:90:73:66:19:0d:ac:a7:55:d1:f1:4c:9a:a2:14:
32:d3:5d:ac:a4:f4:24:3e:fd:d5:77:09:f0:62:b1:
2e:b5:0f:8e:db:67:4f:32:85:cc:03:ef:b4:51:35:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:B8:5B:15:8E:C5:48:16:EE:8E:69:F3:67:E9:69:9A:9F:55:57
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/dqq4WxWOxUgW7o5p82fpaZqfVVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.128.0/23
193.187.92.0/22
193.202.8.0/21
193.202.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:9b:17:21:dc:42:40:f5:51:f4:a8:55:63:8e:11:d2:0c:fc:
a1:18:02:82:bc:fe:90:a4:50:a1:41:52:f4:27:15:26:bc:51:
af:f6:50:d7:20:71:7d:43:ad:2f:ed:c7:1d:d3:ae:53:32:3c:
ee:8e:20:08:49:d1:65:a3:37:d8:b6:70:27:29:6e:cd:bd:3c:
47:67:ed:f8:0c:f5:4b:f6:a2:79:08:e5:a5:f8:9b:b8:02:21:
a6:90:6c:18:cb:cc:07:bb:4e:a5:a9:4c:5a:a1:f7:1d:65:0a:
8d:f8:4a:d9:2c:14:56:2b:87:67:73:4a:e5:3c:02:5f:08:d0:
03:f9:a6:42:d9:1e:63:80:61:32:15:80:a5:74:64:7a:8c:ea:
40:c3:00:1c:96:e7:0c:24:9a:0f:04:f1:b1:f4:b1:4e:49:a6:
ee:d6:95:da:40:f5:f3:a1:52:66:23:9b:36:54:bc:8d:d3:19:
da:67:65:2c:3d:98:f5:02:fa:44:c4:f0:d8:81:04:e2:d3:05:
e1:e5:1d:3e:9d:94:9f:c0:31:c1:8a:e5:60:fd:5c:7c:51:d5:
66:53:07:88:d4:07:37:70:cc:2d:ee:d6:7c:12:af:0c:7a:0a:
e9:21:e8:73:a1:4b:0c:e9:83:d1:bf:ad:b3:43:d4:80:8b:77:
eb:5e:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:42 2023 by rpki-client on console-ams.rpki-client.org