Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/QyKbIuyWUxIwckIAblcwQiGOmp0.roa
File: QyKbIuyWUxIwckIAblcwQiGOmp0.roa (raw, json)
Hash identifier: gYOVvFxsfbQLVHk4sEvmp9sotqgYeoFI1ky6BzJ5QLI=
Subject key identifier: 43:22:9B:22:EC:96:53:12:30:72:42:00:6E:57:30:42:21:8E:9A:9D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 0184754BA84B120171E773712D98ECE3E28B
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/QyKbIuyWUxIwckIAblcwQiGOmp0.roa
Signing time: Mon 14 Nov 2022 08:40:03 +0000
ROA not before: Mon 14 Nov 2022 08:40:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202373
IP address blocks: 194.55.96.0/22 maxlen: 22
194.55.97.0/24 maxlen: 24
194.55.98.0/24 maxlen: 24
2a0c:cac6:2000::/36 maxlen: 36
2a0c:cac0::/29 maxlen: 29
2a0c:cac2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:4b:a8:4b:12:01:71:e7:73:71:2d:98:ec:e3:e2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Nov 14 08:40:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43229b22ec965312307242006e573042218e9a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:00:1b:98:04:98:56:a6:a0:37:6b:e7:b0:6f:
72:6f:72:ff:90:1f:2f:98:52:7c:e5:90:e4:3c:bf:
71:d7:f7:a5:0d:d2:64:a4:4f:54:11:06:50:02:13:
4a:3e:36:7a:3b:20:ed:66:71:79:da:72:ec:d7:03:
df:c1:19:e1:27:dd:f0:ca:cb:4c:8d:02:0d:df:55:
ed:e0:e7:e4:c1:34:de:1f:32:44:61:df:37:ba:26:
51:b2:cc:d9:35:d1:b8:b5:42:44:b6:27:ad:f2:ee:
b8:72:93:fa:18:06:15:9e:ec:54:61:ba:80:bb:cc:
a2:36:da:78:0c:a9:34:f1:61:44:72:64:8a:d6:a4:
0f:81:cf:09:ff:72:43:af:18:79:c8:b1:7d:1b:e8:
76:a3:d7:2a:79:81:6d:59:a2:73:c7:5d:d6:d1:1c:
81:55:85:dd:ad:de:01:66:3c:d3:2b:e8:74:d4:f9:
83:62:88:5f:05:d4:6f:ef:8a:db:66:d0:ae:41:44:
86:02:f4:fb:f2:29:7e:62:6b:c6:5e:b2:e2:fe:ac:
85:38:1b:59:6d:57:17:6e:f0:e2:db:2f:64:5d:bc:
53:df:1a:e7:1f:18:fd:f0:e7:94:f0:e3:c4:e6:d3:
1c:b2:e1:8c:9b:22:86:e9:b6:36:e6:1e:18:10:93:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:22:9B:22:EC:96:53:12:30:72:42:00:6E:57:30:42:21:8E:9A:9D
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/QyKbIuyWUxIwckIAblcwQiGOmp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.96.0/22
IPv6:
2a0c:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
10:40:cb:34:03:8d:f4:e0:5a:e8:65:64:45:62:3b:7a:1c:63:
b7:47:dd:6c:16:c5:a7:62:83:b7:e0:1b:16:4e:4a:47:e1:ae:
27:b4:a8:1f:88:92:9f:74:46:96:ce:c5:42:b0:80:79:dc:dc:
ec:6b:da:6f:5b:cb:9f:e1:f0:ec:a2:f5:52:77:96:02:41:dd:
30:1b:b3:c4:49:e9:14:88:55:2a:41:a9:72:08:71:da:18:13:
02:e2:dc:95:0b:4b:3c:bf:66:4f:14:c1:70:60:93:6c:f1:dd:
7f:68:25:44:9d:c6:93:12:2f:4d:91:44:ba:38:91:40:2a:4a:
d5:9b:41:42:e5:be:3e:88:b0:ee:22:cd:e7:20:c2:95:6d:2f:
19:1c:8d:20:09:ae:6d:25:6e:1c:51:67:30:10:11:f0:49:e2:
57:e9:80:f6:46:59:2c:e4:0a:7e:b0:e1:04:57:cc:7d:ca:8b:
97:a5:3f:47:b1:a1:1b:69:39:97:41:09:5b:c7:48:88:f1:eb:
bb:96:5a:15:fd:39:a0:ff:cc:d7:ab:44:b8:c5:fe:e5:f4:70:
02:8a:e3:9e:7a:86:15:a1:12:74:42:e8:44:1a:ac:6a:a3:55:
7c:6a:a2:8c:cd:b3:e7:ff:76:19:1c:2f:5b:25:4c:1f:db:21:
ec:a7:ac:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:26 2024 by rpki-client on console-ams.rpki-client.org