Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QzCcjjDnw6quXuw7ms36-oaeZWA.roa
File: QzCcjjDnw6quXuw7ms36-oaeZWA.roa (raw, json)
Hash identifier: TocPE27HDa54VidJ7iZ7vNo/1nki8aGb7r1sfpXdirc=
Subject key identifier: 43:30:9C:8E:30:E7:C3:AA:AE:5E:EC:3B:9A:CD:FA:FA:86:9E:65:60
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 276A2660
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QzCcjjDnw6quXuw7ms36-oaeZWA.roa
Signing time: Sat 01 Jan 2022 16:07:58 +0000
ROA not before: Sat 01 Jan 2022 16:07:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35004
IP address blocks: 93.170.116.0/22 maxlen: 24
93.170.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661268064 (0x276a2660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43309c8e30e7c3aaae5eec3b9acdfafa869e6560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:15:2a:b0:19:aa:be:2f:f1:9b:a2:a9:46:
e1:58:5b:67:f6:cf:f7:82:17:17:02:64:3f:3e:29:
5e:af:d8:9f:6b:41:e2:e4:ce:1e:52:71:ab:5a:c8:
0d:c1:fe:b9:c4:b1:6c:52:03:f8:23:1c:83:a2:70:
90:11:50:2c:b9:9d:a0:e7:2d:aa:e8:ed:cd:2b:b3:
41:15:35:ca:1b:b7:a4:5f:06:b3:f5:b8:e8:71:b0:
3b:d6:4a:47:83:da:99:d4:b3:fc:91:d8:fa:90:b9:
b8:98:19:35:b5:8a:e7:7d:3d:2a:7b:94:77:87:b9:
73:d0:d0:d8:75:4e:60:0a:5a:6c:b8:93:a9:50:ed:
a4:10:0b:be:03:4a:e2:a4:d6:be:b6:7e:7b:8a:6c:
e2:9a:86:d3:78:78:12:97:fa:46:c5:23:9c:08:a2:
09:01:3a:43:48:d3:8e:9f:d7:bd:e1:5a:ad:49:6f:
82:ea:cf:7f:9a:54:39:1e:00:99:d7:54:a1:09:73:
71:18:fd:e8:ea:00:af:f4:ac:f5:73:4a:3f:f3:ac:
62:26:7a:00:1a:cc:fd:7a:59:7b:83:b9:2a:c3:a4:
65:17:1b:de:4c:2b:a5:27:3e:97:35:12:92:80:56:
e9:5f:e9:e0:70:a0:d8:b4:a3:84:2b:9d:18:54:2a:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:9C:8E:30:E7:C3:AA:AE:5E:EC:3B:9A:CD:FA:FA:86:9E:65:60
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QzCcjjDnw6quXuw7ms36-oaeZWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:64:b6:44:33:86:95:e9:3b:b9:ee:47:5f:bf:93:c1:73:df:
fc:af:b5:e4:9e:9d:88:77:01:47:13:19:b2:f9:5a:14:01:b0:
da:3a:1e:7f:7a:bd:a7:ba:2b:58:4c:57:29:01:42:f6:df:e1:
7a:0b:83:19:be:93:52:f9:d7:4a:f6:bc:fd:cc:69:34:50:28:
ab:bb:20:f5:45:39:6b:8f:68:ad:0d:ba:04:25:ba:32:8b:d6:
33:9f:e1:2d:61:d4:e9:2a:48:71:6b:0b:44:39:da:1b:bb:e0:
46:e7:19:49:f6:d6:32:cd:b0:62:ea:41:9f:bf:d7:4e:83:43:
ba:b9:11:f7:4e:ba:19:2d:79:b1:23:dc:eb:c0:32:c7:da:40:
c8:9b:2a:81:ad:47:48:d8:e1:8e:b8:d8:d0:d6:9e:1f:ac:f4:
7f:05:d3:ec:a3:5a:c0:a1:24:91:ed:de:7c:a5:0f:42:34:b3:
c8:8c:59:ad:14:2b:30:29:68:01:64:99:87:a8:a5:c0:1d:c3:
32:de:02:37:30:48:17:93:ff:ed:86:e2:ed:2f:93:d7:1e:1c:
bf:51:98:b4:26:54:11:97:a6:e0:ab:eb:33:b5:9a:05:75:80:
3b:75:b0:3c:59:06:02:ea:1f:55:09:9d:42:d0:0b:fc:15:cf:
4e:69:f7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:41 2023 by rpki-client on console-fra.rpki-client.org