Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/qyhdpG5HCAd4pY_vX1At8Lp3J68.roa
File: qyhdpG5HCAd4pY_vX1At8Lp3J68.roa (raw, json)
Hash identifier: xvhDWA/tKgjlGwjUMjkzYkxCgBxUJi5CmbXl8tsB/bU=
Subject key identifier: AB:28:5D:A4:6E:47:08:07:78:A5:8F:EF:5F:50:2D:F0:BA:77:27:AF
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 115FFCB9
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/qyhdpG5HCAd4pY_vX1At8Lp3J68.roa
Signing time: Sat 01 Jan 2022 12:54:22 +0000
ROA not before: Sat 01 Jan 2022 12:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39605
IP address blocks: 185.159.104.0/22 maxlen: 24
2a07:b880::/41 maxlen: 41
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291503289 (0x115ffcb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Jan 1 12:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab285da46e47080778a58fef5f502df0ba7727af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:20:a9:5f:74:c4:e7:4c:b4:b9:b9:ee:5a:
75:91:33:f4:1d:9d:d3:20:cd:ba:20:0a:29:00:17:
26:4b:a1:3a:2e:a5:a9:4a:81:36:cd:0f:c2:cf:6a:
91:2e:27:3e:64:2a:f4:eb:57:9c:e1:19:e9:e1:ad:
f3:71:b4:ce:dd:f8:ba:cd:e8:3b:58:6b:09:19:ed:
94:fe:34:83:92:9d:fe:df:a1:62:8f:5c:2c:9e:0b:
bf:c2:ce:c8:2c:68:87:a2:ed:7f:ed:11:c2:d0:19:
7a:69:5e:3e:91:5b:1e:a1:88:c8:e6:2d:bb:a6:fe:
9a:d5:67:51:73:e2:5c:de:3a:0a:1f:82:18:78:5d:
2b:f8:3a:aa:1b:00:5f:35:99:fd:9a:ab:61:5f:4f:
4d:90:90:2f:e8:f1:8d:77:22:32:5d:5a:32:4c:48:
8b:ce:07:67:6e:70:55:c1:49:92:c5:b9:9a:18:08:
93:3c:80:e7:66:96:69:df:18:1d:19:b7:71:29:41:
48:c8:40:a1:e1:3a:ee:97:ee:89:ff:ee:26:a4:57:
58:82:5e:57:b0:22:b6:b3:85:fd:af:8b:a3:29:82:
f0:58:01:7e:81:36:52:12:5b:03:74:97:2c:0a:ed:
e4:3b:16:79:d0:90:d6:0c:16:81:d4:ab:a5:ed:ea:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:5D:A4:6E:47:08:07:78:A5:8F:EF:5F:50:2D:F0:BA:77:27:AF
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/qyhdpG5HCAd4pY_vX1At8Lp3J68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.104.0/22
IPv6:
2a07:b880::/41
Signature Algorithm: sha256WithRSAEncryption
1a:80:83:6f:d2:f4:99:06:f7:6f:08:6a:f5:0c:5d:cb:11:8f:
16:5b:75:08:8a:79:51:4b:9b:0f:f0:73:e0:90:c8:c8:c6:7c:
8e:76:cb:27:8e:8e:94:d7:85:46:fa:21:c3:6b:6a:60:e3:c1:
6e:10:0d:e5:86:7c:81:c3:c7:07:2b:0c:97:f8:e3:00:7b:50:
59:55:cc:fa:fd:4c:16:a1:fa:4e:9a:dc:09:87:60:9b:ae:d8:
0e:48:6f:dd:71:a8:1d:64:c0:92:bb:f8:31:e8:b3:1a:7f:cd:
fe:3d:c7:eb:2e:54:97:3d:4f:33:51:05:60:d6:85:47:78:38:
df:1f:6d:e3:ee:7b:a1:89:a7:f8:f5:a8:6d:1a:bd:c8:36:ed:
e6:00:3c:a8:a7:e0:a2:28:f6:be:91:b0:0d:9c:fb:44:30:ee:
54:86:3c:16:e1:17:66:2a:b3:43:5a:10:49:3b:2d:61:e6:86:
5c:70:8a:70:c4:e5:ab:8e:0a:5b:42:8d:da:67:7b:c7:fb:f6:
56:ef:4f:e4:63:fe:1f:b1:1d:5a:e0:dc:b5:12:20:f8:77:48:
9e:94:56:39:9f:d3:e8:71:5f:f2:de:ec:f9:2a:45:12:81:ac:
7b:9b:8d:46:59:42:4c:9c:87:08:b6:12:41:e6:6a:5a:5c:b0:
3f:9b:4b:a4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEEV/8uTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZTQzYTBkZjA1OWE1MjUxYTQwMGI1YTFmMTMyMWJhMDBkMzEyMGQyMB4XDTIyMDEw
MTEyNTQyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWIyODVkYTQ2ZTQ3
MDgwNzc4YTU4ZmVmNWY1MDJkZjBiYTc3MjdhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANHXIKlfdMTnTLS5ue5adZEz9B2d0yDNuiAKKQAXJkuhOi6l
qUqBNs0Pws9qkS4nPmQq9OtXnOEZ6eGt83G0zt34us3oO1hrCRntlP40g5Kd/t+h
Yo9cLJ4Lv8LOyCxoh6Ltf+0RwtAZemlePpFbHqGIyOYtu6b+mtVnUXPiXN46Ch+C
GHhdK/g6qhsAXzWZ/ZqrYV9PTZCQL+jxjXciMl1aMkxIi84HZ25wVcFJksW5mhgI
kzyA52aWad8YHRm3cSlBSMhAoeE67pfuif/uJqRXWIJeV7AitrOF/a+LoymC8FgB
foE2UhJbA3SXLArt5DsWedCQ1gwWgdSrpe3q38cCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSrKF2kbkcIB3ilj+9fUC3wuncnrzAfBgNVHSMEGDAWgBQOQ6DfBZpSUaQA
taHxMhugDTEg0jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RrT2czd1dhVWxHa0FMV2g4VElib0EweElOSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvMGJiMzNiLTY4ZjctNDc0OC04NGFjLTAwNGZlNDMzYzdjOC8x
L3F5aGRwRzVIQ0FkNHBZX3ZYMUF0OExwM0o2OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
MGJiMzNiLTY4ZjctNDc0OC04NGFjLTAwNGZlNDMzYzdjOC8xL0RrT2czd1dhVWxH
a0FMV2g4VElib0EweElOSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEArmfaDAPBAIAAjAJAwcHKge4gAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAagINv0vSZBvdvCGr1DF3LEY8WW3UIinlRS5sP
8HPgkMjIxnyOdssnjo6U14VG+iHDa2pg48FuEA3lhnyBw8cHKwyX+OMAe1BZVcz6
/UwWofpOmtwJh2CbrtgOSG/dcagdZMCSu/gx6LMaf83+PcfrLlSXPU8zUQVg1oVH
eDjfH23j7nuhiaf49ahtGr3INu3mADyop+CiKPa+kbANnPtEMO5UhjwW4RdmKrND
WhBJOy1h5oZccIpwxOWrjgpbQo3aZ3vH+/ZW70/kY/4fsR1a4Ny1EiD4d0ielFY5
n9PocV/y3uz5KkUSgax7m41GWUJMnIcIthJB5mpaXLA/m0uk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:48 2024 by rpki-client on console-ams.rpki-client.org