Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qGvdBmSw7D1M-JRji6NywhauQz0.roa
File: qGvdBmSw7D1M-JRji6NywhauQz0.roa (raw, json)
Hash identifier: Ydg8kwZOxOZWGLEE2Tfln1zDvScvtx3L042NK2MjBoU=
Subject key identifier: A8:6B:DD:06:64:B0:EC:3D:4C:F8:94:63:8B:A3:72:C2:16:AE:43:3D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01831C5B370EA79621D26325F64E288BF001
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qGvdBmSw7D1M-JRji6NywhauQz0.roa
Signing time: Thu 08 Sep 2022 09:08:03 +0000
ROA not before: Thu 08 Sep 2022 09:08:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 195.178.140.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:5b:37:0e:a7:96:21:d2:63:25:f6:4e:28:8b:f0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 8 09:08:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a86bdd0664b0ec3d4cf894638ba372c216ae433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:9f:b3:ac:23:dd:fe:14:f0:7e:2e:dc:f9:
88:7e:e7:ea:04:74:d3:43:e6:28:36:cd:74:52:e0:
89:7a:fa:e2:60:cd:2a:a7:6e:94:2a:33:53:e8:86:
e6:77:b1:b9:19:bb:02:4d:e1:66:f3:ed:d4:5e:16:
32:1f:a8:5c:52:c0:10:d3:7f:e2:d3:5b:09:2e:7b:
fe:44:ed:92:fe:11:11:91:c7:cd:06:1e:eb:97:f2:
0c:75:61:03:b1:04:4f:20:1c:9c:93:26:3d:9a:17:
9e:1c:01:58:20:94:f4:a8:24:79:59:db:ad:7c:c9:
2d:54:13:b9:f5:41:4c:78:93:e8:a5:bf:e4:9a:95:
62:cc:b8:10:94:25:9d:f7:3c:34:73:63:16:0e:98:
cd:a0:62:d1:71:3f:4e:78:32:2d:ee:5c:15:b5:dd:
e7:ce:32:f5:10:77:5f:ba:a1:6b:99:88:89:35:52:
98:67:66:dd:43:4f:59:a2:29:3f:99:c0:9a:00:0b:
38:9f:9e:99:d9:33:db:14:26:1e:d9:6f:b8:ca:b6:
05:8f:e7:4a:8f:d0:7d:88:f4:3d:09:0c:d7:11:f4:
a0:66:65:82:9b:26:dc:a9:23:a0:04:af:d2:e0:60:
47:2b:58:7a:37:bd:37:f3:6e:0d:1d:16:ba:6b:a0:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6B:DD:06:64:B0:EC:3D:4C:F8:94:63:8B:A3:72:C2:16:AE:43:3D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qGvdBmSw7D1M-JRji6NywhauQz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.140.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:98:78:58:ef:c8:d2:65:ea:e4:41:9f:de:5f:8b:7c:05:b2:
9c:aa:9b:f6:fe:4f:de:29:01:b8:89:88:73:20:ce:ce:90:64:
5f:e1:1e:3b:1c:55:8c:5c:63:b4:83:24:9c:87:ac:25:ed:e2:
c9:4e:3a:5c:9d:af:df:55:72:08:91:05:69:33:b5:db:62:3a:
ed:4f:4d:b1:fd:3c:d3:9b:4d:8d:cc:27:3b:a9:05:3c:ee:98:
05:7c:78:36:95:e7:c4:a5:6c:a3:ce:86:f8:0b:e8:88:7d:10:
e2:30:bb:f3:31:e6:27:d5:3b:3b:cf:ec:f1:70:39:13:2d:46:
76:96:20:9c:2a:b6:31:14:29:db:be:d4:fd:ae:49:14:cb:a2:
9d:ce:19:c2:e8:82:7c:18:3d:a3:bc:cc:43:20:75:da:e0:a1:
ef:7e:77:8c:c1:ca:43:4f:eb:f4:f3:ad:9b:f3:86:b3:5e:c6:
9a:ee:3f:3a:3c:fb:eb:3f:5a:49:4c:c3:f9:6c:e2:63:29:60:
96:e8:ed:5d:70:f6:83:ab:31:52:9e:56:f3:b1:7e:44:bb:b3:
25:55:d3:83:61:a0:e6:35:a3:83:9d:c1:ce:ca:43:93:ae:07:
7e:ac:5d:d8:5b:53:1f:8f:80:98:e4:69:ff:df:ee:b8:06:79:
54:53:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org