Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/QVH3UlIBQGowNJpj_AQMKHMqqgE.roa
File: QVH3UlIBQGowNJpj_AQMKHMqqgE.roa (raw, json)
Hash identifier: Gux+srszltL2wxuuOkkLNDqCXMjpF6p7oiQhKDPQ1JU=
Subject key identifier: 41:51:F7:52:52:01:40:6A:30:34:9A:63:FC:04:0C:28:73:2A:AA:01
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 0310A88F
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/QVH3UlIBQGowNJpj_AQMKHMqqgE.roa
Signing time: Sat 01 Jan 2022 02:50:57 +0000
ROA not before: Sat 01 Jan 2022 02:50:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197595
IP address blocks: 193.178.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51423375 (0x310a88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jan 1 02:50:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4151f7525201406a30349a63fc040c28732aaa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:85:ea:3f:d8:8b:50:b2:b9:c6:a7:5a:9c:
64:95:78:db:d1:b4:54:dd:59:f1:b7:a9:4a:ab:3b:
da:dc:8d:a5:9e:8f:19:59:02:1c:c6:88:21:3d:c6:
b9:fe:74:a4:d3:9c:7d:83:c3:8a:8e:95:36:07:4a:
40:56:21:d4:73:d3:ba:d1:df:22:63:8e:d7:4d:65:
38:14:fb:3b:64:f3:f7:d3:07:bd:bc:58:ae:b4:fe:
b8:cb:00:3c:26:30:ee:7a:df:38:60:4b:6f:d9:80:
f8:d6:41:63:85:26:8e:5b:f8:54:e6:eb:28:f1:75:
43:e0:1b:1a:9a:0e:b0:84:50:79:c4:a7:53:15:0c:
12:d4:97:e6:b3:81:8c:dc:f4:77:53:53:d8:97:f9:
35:92:14:e3:cc:2d:dc:2c:74:c1:4e:16:b2:c4:d9:
19:ea:e3:fa:46:2b:ed:5a:d9:83:39:53:06:d1:1f:
c7:70:4c:e8:93:2f:e7:9d:5a:b4:48:d7:8e:63:f8:
a2:c8:3d:3f:de:e7:d5:f6:33:34:e4:14:16:a4:22:
bc:a1:df:3a:51:d2:86:35:6a:25:96:2a:91:b6:db:
99:a5:59:e4:38:b9:ba:f5:89:58:7e:06:59:b7:f7:
ba:b8:78:e8:7d:b8:de:bc:bf:a4:58:f2:1a:71:61:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:51:F7:52:52:01:40:6A:30:34:9A:63:FC:04:0C:28:73:2A:AA:01
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/QVH3UlIBQGowNJpj_AQMKHMqqgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.129.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c6:9b:82:97:f9:e3:ff:9b:0b:03:39:ac:ab:e7:cf:f1:4c:
ef:e0:76:b9:33:82:7a:3e:c5:c5:74:4e:7d:a3:be:ee:15:6a:
b6:54:50:fd:bf:16:57:15:b1:6a:7b:3a:8d:3f:4b:24:b6:92:
17:f9:fa:95:1e:85:f6:d0:5f:4a:a9:75:ac:2b:4f:30:0a:bd:
bb:0f:c2:10:7b:65:44:64:40:62:76:26:b9:46:44:76:02:f2:
a5:de:a0:80:ca:99:4c:19:6f:65:09:ff:2e:54:0f:e1:ac:94:
ff:05:f2:f1:ba:e4:b9:ca:39:d2:cb:4d:fb:1d:f6:89:99:44:
bb:fc:f4:97:6c:bc:f2:02:34:88:dc:3c:03:8a:2d:29:8c:5b:
40:35:56:a2:d1:fd:89:83:d2:c4:37:37:46:03:57:1e:19:6e:
ae:b5:fa:14:2f:23:78:3f:c6:d7:88:77:c2:a7:f5:60:dd:17:
09:f3:eb:d2:a6:dd:a9:8a:71:cd:4f:e9:e8:f5:84:b7:9f:35:
b3:f7:bc:c8:40:89:7c:fb:83:bb:03:20:ac:74:96:da:74:1d:
f9:8c:80:96:25:f5:bd:ed:bc:14:70:2e:7d:a6:1d:49:0e:e3:
d8:e8:20:e9:f1:7f:45:2d:4b:59:f9:52:49:18:92:03:16:d8:
31:c3:4b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:17 2024 by rpki-client on console-fra.rpki-client.org