Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/qFaijoJNS2iJKSG_WQY5OtzuBTA.roa
File: qFaijoJNS2iJKSG_WQY5OtzuBTA.roa (raw, json)
Hash identifier: NR04ZQzMn7YLXhQX3dl0kvOeZU4Kga0vmnK4rs1t06Q=
Subject key identifier: A8:56:A2:8E:82:4D:4B:68:89:29:21:BF:59:06:39:3A:DC:EE:05:30
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 027E0C
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/qFaijoJNS2iJKSG_WQY5OtzuBTA.roa
Signing time: Tue 15 Feb 2022 13:20:46 +0000
ROA not before: Tue 15 Feb 2022 13:20:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200657
IP address blocks: 194.99.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163340 (0x27e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Feb 15 13:20:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a856a28e824d4b68892921bf5906393adcee0530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:50:14:e3:0d:3d:0d:13:0e:7f:0b:27:e8:
27:8d:61:f7:fe:53:b7:95:8f:d2:c0:14:8a:d9:cf:
0e:6e:c1:ea:68:54:f6:46:9f:38:81:ce:a4:f1:39:
8a:e9:18:4f:68:1f:0d:b7:61:3b:a4:f9:5b:c7:8d:
a2:67:0d:be:4e:fe:e2:ac:0c:08:b4:6f:48:b9:dd:
19:93:92:01:2f:9a:69:94:52:6c:d7:45:e0:e0:0f:
14:60:51:ac:33:83:11:4f:05:b5:76:62:e5:0c:37:
4f:61:75:e2:5e:38:ac:16:f2:1c:cd:2b:07:01:87:
88:bb:5d:a8:98:84:f4:9d:7c:c8:9f:18:dc:66:55:
7b:d6:01:eb:ca:d1:60:1d:df:71:d2:0e:b2:b0:95:
a1:70:b5:1e:7c:fe:3b:31:ba:1d:6b:fe:2f:c4:ae:
a8:62:53:16:29:c6:bf:8f:8b:b2:7b:cb:86:81:84:
31:0f:76:3b:4f:8f:a1:5b:14:20:ea:01:71:98:3d:
30:4b:cd:b7:a8:f5:28:9c:9e:4c:9b:74:7d:3d:b9:
c2:d2:c9:01:02:ec:7e:16:75:ec:5e:2f:56:bf:88:
f4:7a:0a:e5:b0:47:08:71:7f:83:b6:05:b5:b2:5b:
e3:34:85:00:2b:14:1e:b4:80:2d:81:e7:50:86:92:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:56:A2:8E:82:4D:4B:68:89:29:21:BF:59:06:39:3A:DC:EE:05:30
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/qFaijoJNS2iJKSG_WQY5OtzuBTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.108.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:20:3e:be:74:64:80:73:e3:36:a2:ee:0c:29:27:cc:b5:70:
bd:8f:2e:ad:8e:27:2b:9e:c6:24:bc:b4:d4:6b:9a:18:69:25:
30:f1:3d:18:fd:db:c6:40:d2:e6:88:9b:82:b9:23:e3:fa:45:
a8:01:54:8e:39:eb:2b:9e:6b:83:b8:a3:5c:71:bc:08:bf:78:
b1:38:bc:50:76:8d:a3:4e:7b:78:66:2b:f5:eb:24:b4:89:90:
e8:99:bd:87:8e:c4:af:6e:de:67:44:24:d7:fc:d9:04:a8:f7:
6a:40:8b:8c:e6:ce:2f:04:e3:5a:f5:f3:96:8d:e2:c9:4f:e5:
e4:8e:94:da:9e:e6:e3:82:d6:9f:a2:37:30:0f:4a:7b:c4:4f:
6a:82:6c:a1:16:8d:77:3e:9f:37:3e:5a:d4:fe:b2:62:98:cb:
81:fb:6d:07:27:ad:b1:dd:73:6f:bf:fe:73:33:cf:10:02:f4:
a4:f0:6d:f4:b9:13:b5:14:ea:eb:31:6a:c0:4a:e0:82:1d:e1:
b8:60:b4:be:b2:52:b2:d8:28:00:d2:3b:82:89:40:d7:ad:1b:
fe:7b:f9:ab:52:fd:60:df:9c:c5:ad:f7:31:a4:f1:d1:12:2d:
a4:7f:62:8e:1c:7a:1c:52:7a:20:50:1d:e5:52:d2:7f:e0:cd:
2b:c5:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:20 2025 by rpki-client