Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/QzzhKsarqNCZUTYgU4sJ2iJyN9c.roa
File: QzzhKsarqNCZUTYgU4sJ2iJyN9c.roa (raw, json)
Hash identifier: HcCfW+IQKrzwyiYIHc+BklHRP5rfBrA2b8YMDQ8eqN4=
Subject key identifier: 43:3C:E1:2A:C6:AB:A8:D0:99:51:36:20:53:8B:09:DA:22:72:37:D7
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 111CB087
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/QzzhKsarqNCZUTYgU4sJ2iJyN9c.roa
Signing time: Sat 01 Jan 2022 14:04:44 +0000
ROA not before: Sat 01 Jan 2022 14:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56466
IP address blocks: 5.200.64.0/20 maxlen: 20
5.200.80.0/20 maxlen: 20
89.235.77.0/24 maxlen: 24
188.75.108.0/24 maxlen: 24
86.109.39.0/24 maxlen: 24
87.247.179.0/24 maxlen: 24
86.109.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287092871 (0x111cb087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 14:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=433ce12ac6aba8d099513620538b09da227237d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:d6:a0:db:ea:be:f9:9b:5b:93:59:99:88:
be:4e:a1:a9:e3:4b:0d:ed:21:23:40:1d:6d:78:84:
ef:cc:9a:2e:93:4a:32:0f:93:7c:c1:61:05:c1:bd:
f6:36:5f:35:16:fc:ad:0f:c5:34:51:39:43:7c:41:
de:16:59:b9:0e:31:2b:9f:73:89:bd:89:88:a3:1f:
95:9c:01:39:1f:d3:80:4b:0b:a9:05:c0:fc:85:ca:
20:57:dc:bd:c0:5f:76:fc:be:b3:45:7a:70:20:8e:
09:9d:94:d9:53:c9:f8:20:30:e9:21:09:5e:0b:82:
4f:cb:34:5f:81:8a:f8:a9:a9:aa:36:75:1e:6a:eb:
ef:4b:99:e4:ae:15:34:db:58:35:f3:ca:72:62:a2:
49:eb:11:04:d9:7c:89:d1:3e:c3:b1:45:89:18:1a:
45:46:18:7a:3f:63:b3:4e:47:52:3f:b7:1e:28:e4:
3a:80:8b:c1:96:af:9d:93:0a:c1:f9:f8:90:13:26:
c7:0b:ec:04:b2:4f:0f:69:42:9a:72:f4:ad:29:5e:
3b:54:9a:cd:cf:a5:38:09:7a:d2:86:f8:e2:68:6c:
f8:ed:7c:8e:6a:53:0d:16:6f:ad:f7:b7:e0:e7:d4:
0c:ea:4b:1b:93:9f:ae:00:19:b7:b5:85:30:d2:b7:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3C:E1:2A:C6:AB:A8:D0:99:51:36:20:53:8B:09:DA:22:72:37:D7
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/QzzhKsarqNCZUTYgU4sJ2iJyN9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.64.0/19
86.109.39.0/24
86.109.59.0/24
87.247.179.0/24
89.235.77.0/24
188.75.108.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6c:3c:99:f8:f5:6a:96:cb:85:31:a9:bb:ef:38:87:98:5f:
f9:08:41:c5:00:04:69:44:3b:c8:02:f0:47:72:cf:f9:28:85:
ee:2f:24:f8:39:82:ca:a8:1d:1b:ca:6d:5b:3b:79:06:93:88:
85:6f:9c:38:7f:d0:a2:56:e2:bd:d5:9b:f8:24:21:b9:5f:34:
2f:09:82:68:f2:bc:26:63:be:99:29:ec:47:93:3a:78:ed:f0:
f1:8d:61:74:4c:07:5c:ec:55:e4:89:f5:38:65:cd:1c:06:a1:
62:0f:bf:84:76:29:c3:ce:b2:0e:4d:8f:63:d5:9c:e8:7d:ac:
7c:e1:b7:06:0e:7e:e5:ec:84:7a:a0:87:0e:b8:a4:f9:7d:e1:
c8:da:70:9c:d9:dd:47:b8:00:68:c9:6b:b8:c3:2d:80:cb:55:
98:ab:19:22:6d:4a:b8:96:ce:72:ca:d7:9e:d0:07:bc:e7:f8:
94:7b:55:34:81:dd:98:3b:0f:2c:3d:b8:28:98:32:95:fa:e0:
64:84:e7:0f:b8:5a:99:10:a3:b5:f1:db:ad:d9:28:60:03:47:
5c:e1:f9:7e:5c:98:1f:96:7b:ba:e0:ef:3f:4a:79:2f:88:85:
f2:92:dd:83:72:d5:c8:72:88:25:4b:cc:ca:49:71:88:59:b9:
89:9c:2a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org