Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Bq_QCCwXSRMmOWD_rRW273IPfaQ.roa
File: Bq_QCCwXSRMmOWD_rRW273IPfaQ.roa (raw, json)
Hash identifier: uJQTety2oJG7qScRq/d/DY8gP6k6xidE8m9M3XAIs1Y=
Subject key identifier: 06:AF:D0:08:2C:17:49:13:26:39:60:FF:AD:15:B6:EF:72:0F:7D:A4
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 0408307E
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Bq_QCCwXSRMmOWD_rRW273IPfaQ.roa
Signing time: Sat 01 Jan 2022 01:52:32 +0000
ROA not before: Sat 01 Jan 2022 01:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210992
IP address blocks: 89.25.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67645566 (0x408307e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06afd0082c174913263960ffad15b6ef720f7da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:a9:b8:cc:d3:9c:ee:d1:83:2f:c3:d5:09:
a7:71:17:f2:06:0f:a8:96:19:51:12:37:13:0e:84:
4d:00:ed:8e:a5:78:e2:13:34:50:cd:7d:96:99:87:
02:90:a4:fa:82:65:ae:86:13:27:60:77:fd:67:5c:
7f:3a:b5:dc:ac:79:22:0d:73:1c:9b:6d:9b:5b:2e:
99:75:50:aa:86:6d:cf:59:b6:28:0d:2f:8c:8a:b7:
4d:29:74:0f:d6:77:ac:97:7c:91:69:06:74:1b:7b:
64:d9:c9:19:bb:4b:32:1d:28:a4:7c:0d:0f:65:08:
c8:9e:fe:c7:47:01:73:79:d2:40:89:c1:a8:c8:eb:
21:12:06:86:83:49:70:51:e9:1a:17:02:50:dd:ae:
52:bf:56:d4:f2:ba:71:e3:8a:2b:48:43:85:fc:5f:
d4:d4:df:8c:b2:9c:fb:c4:78:e3:35:11:a1:a9:ec:
2f:09:07:89:1e:a6:97:c3:26:b3:40:90:58:f1:98:
57:fe:20:75:ed:98:24:12:9f:13:02:c5:a9:a7:2d:
66:ea:d6:c4:95:7d:0b:4e:ff:cb:51:04:8f:fe:98:
f6:15:91:7e:50:fe:c8:bb:42:02:f7:83:44:5b:e8:
74:2e:54:ce:68:c3:85:64:95:1e:cf:aa:55:d6:37:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AF:D0:08:2C:17:49:13:26:39:60:FF:AD:15:B6:EF:72:0F:7D:A4
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Bq_QCCwXSRMmOWD_rRW273IPfaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9f:58:82:53:5e:e4:6e:db:ff:bc:4e:78:b1:b4:d1:b7:dc:
92:9b:db:9e:6d:de:a3:58:65:7d:9a:94:38:2f:b5:b2:e8:5a:
b7:bc:b3:a0:36:32:56:f3:7d:8a:02:05:a3:b0:61:c4:f0:44:
24:03:10:dc:98:fe:b5:af:b7:77:69:57:95:fc:f2:f3:a8:c6:
15:54:b9:2f:87:a9:f8:3d:74:97:f5:7a:e5:8f:15:d2:31:b8:
c5:fb:39:11:52:74:4c:20:1e:a8:ec:df:36:30:7d:2e:20:48:
60:39:a0:5e:87:84:85:63:5b:0d:1a:d3:09:ac:1f:a6:6c:a1:
e3:42:84:8e:ff:86:f6:61:c0:58:07:c8:a3:f3:9e:b7:bd:18:
b8:19:65:8c:0c:4e:38:ed:86:1b:14:26:6d:02:b5:db:3a:e9:
c0:a9:dc:e7:8a:66:de:34:20:de:f6:4c:89:be:68:3b:5b:98:
5b:be:95:64:0a:1d:82:1e:70:2f:09:c2:b1:ee:f3:7d:b2:c3:
f2:6c:c7:65:e8:b0:28:93:5f:34:66:4f:f6:e3:e1:a8:11:92:
82:23:7d:2c:3a:13:19:88:1e:74:25:35:2b:51:d9:78:20:5f:
d0:95:35:d4:88:e2:81:6e:2a:bb:b0:54:cb:be:4c:3d:45:44:
33:21:c2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:46 2024 by rpki-client on console-ams.rpki-client.org