Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QRQfiOJpmHavtx9-4xfPs1Z0SIE.roa
File: QRQfiOJpmHavtx9-4xfPs1Z0SIE.roa (raw, json)
Hash identifier: nr0zru66hmB76rYJrmHCKWrZx2IIZ5pBj6Pl68DOE9I=
Subject key identifier: 41:14:1F:88:E2:69:98:76:AF:B7:1F:7E:E3:17:CF:B3:56:74:48:81
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 056A99BC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QRQfiOJpmHavtx9-4xfPs1Z0SIE.roa
Signing time: Mon 06 Jun 2022 14:58:22 +0000
ROA not before: Mon 06 Jun 2022 14:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204774
IP address blocks: 201.49.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90872252 (0x56a99bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 6 14:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41141f88e2699876afb71f7ee317cfb356744881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:f7:d7:11:e7:d6:04:fb:18:bf:26:17:84:
a1:20:e5:c1:09:97:d5:07:7e:50:2e:14:d3:d9:b4:
18:3b:e3:41:2a:9c:4c:9b:34:d6:23:67:53:0d:85:
03:28:e6:a7:a3:23:a6:65:0e:7c:bd:b3:09:09:ec:
5e:fc:38:a2:2e:d4:b5:3e:82:4a:5a:b4:13:23:34:
61:55:72:04:1e:db:e8:21:5e:b3:26:b0:a9:20:21:
7d:8f:9c:ca:f7:bc:d9:38:4e:a7:73:ef:fb:01:aa:
e3:46:8d:6c:e9:2e:0b:c9:58:6e:29:33:19:45:80:
94:f4:15:01:1a:b2:54:7a:30:ed:2a:4e:d3:6e:50:
d7:63:9e:bc:08:43:11:4c:92:d5:e7:c2:da:41:8c:
93:a7:9a:63:87:e7:7d:0b:72:06:08:97:50:3c:ce:
fb:5d:49:0f:90:33:b6:87:e4:d6:3a:9d:c9:b9:ad:
ca:7a:92:d4:48:6f:47:af:e0:a1:7a:79:f4:6c:49:
84:cc:8d:7c:01:9f:13:45:f8:fd:0e:15:d9:e8:2b:
52:1a:17:10:98:f6:09:03:8e:28:1b:7c:1a:55:4c:
b4:fc:55:bd:5d:57:06:dd:39:6f:cc:37:2c:4b:0a:
02:d2:dd:1b:4c:25:9e:f7:4f:54:02:38:0b:fa:25:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:1F:88:E2:69:98:76:AF:B7:1F:7E:E3:17:CF:B3:56:74:48:81
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QRQfiOJpmHavtx9-4xfPs1Z0SIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.190.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3c:b1:b5:b8:46:19:ae:da:60:4f:da:56:d2:5c:8a:65:d0:
c1:7c:aa:4a:4f:0b:57:eb:c0:15:85:b3:a0:80:35:90:3b:6c:
db:a1:a1:0f:36:7d:c6:e3:2b:70:66:dd:aa:ed:2f:fd:e1:8f:
53:85:f1:b2:ec:3b:63:c4:c0:6d:8c:2f:06:a7:da:33:3e:87:
16:84:cd:90:8f:8d:69:61:61:96:35:19:61:a7:d0:da:dd:d6:
54:6e:87:12:a8:39:a4:63:61:de:2b:58:f4:38:41:60:29:47:
94:79:85:83:d6:c5:b6:95:8f:42:95:fc:7a:b7:16:b2:23:4a:
8c:28:be:25:3a:6d:ed:b9:ba:59:50:a2:71:fe:f4:ea:c5:e4:
5f:ef:cf:d6:61:1a:85:df:45:2a:d4:b1:57:2d:dc:98:ae:7e:
36:03:43:df:3e:ab:6a:06:27:a3:39:49:7c:e0:cf:36:44:b5:
8b:73:bf:69:a3:12:6a:3f:55:eb:fc:57:ad:ed:d3:dc:53:8d:
d9:87:7a:31:c0:21:d9:6f:9d:2f:c2:67:72:c0:4d:a9:1a:63:
c8:68:2e:6c:63:b1:01:c5:44:7b:48:d4:50:3c:55:3f:ba:15:
8e:bf:e6:e6:d4:a1:3c:52:65:f3:de:1c:ac:ea:1a:d0:a1:e6:
64:b4:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org