Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/qk3rtVFxViWySz4fN5iwf8oCnVA.roa
File: qk3rtVFxViWySz4fN5iwf8oCnVA.roa (raw, json)
Hash identifier: Zt081MH8mhKgx7j4ldepdLO1A2JT7LjKlABG7U8GXTI=
Subject key identifier: AA:4D:EB:B5:51:71:56:25:B2:4B:3E:1F:37:98:B0:7F:CA:02:9D:50
Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial: 09335B0A
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/qk3rtVFxViWySz4fN5iwf8oCnVA.roa
Signing time: Mon 04 Jul 2022 10:59:20 +0000
ROA not before: Mon 04 Jul 2022 10:59:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49099
IP address blocks: 109.94.166.0/24 maxlen: 24
109.94.167.0/24 maxlen: 24
109.94.166.0/23 maxlen: 23
193.34.246.0/24 maxlen: 24
193.34.244.0/24 maxlen: 24
193.34.244.0/23 maxlen: 23
193.34.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154360586 (0x9335b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Validity
Not Before: Jul 4 10:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa4debb551715625b24b3e1f3798b07fca029d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:b6:cb:86:16:5e:2c:9d:c7:e8:01:e2:4e:
4c:75:23:4d:bc:ae:4f:94:4d:0e:b9:b4:22:a0:af:
4c:f8:bc:e5:8d:ec:41:98:70:20:6b:27:be:14:d7:
17:29:06:a8:f4:98:96:bb:85:ce:9e:62:aa:f4:20:
eb:63:7b:e7:df:45:c7:68:6a:8c:ba:e8:e1:f4:55:
17:e5:0b:30:1d:e9:e9:5f:ee:ee:91:76:e2:ae:79:
51:c7:af:c4:46:12:da:bf:25:2c:c9:3b:1f:f0:25:
f4:4e:d9:bd:d1:47:d0:c3:21:f0:17:46:d3:15:d6:
27:e2:33:32:1d:71:51:25:31:80:82:96:2f:f9:a0:
96:ef:13:05:64:13:ef:dd:d4:13:65:9f:84:f8:3f:
be:33:27:bb:49:d0:e5:7c:f2:0e:d7:8a:8d:aa:41:
c6:27:de:d9:02:da:45:af:a0:de:32:f3:ae:90:14:
56:74:30:30:1d:0b:3e:8b:b9:d5:0e:37:6c:db:8e:
0d:cd:4b:20:0b:75:32:dd:c5:ac:99:ca:b5:56:07:
15:db:99:5d:b0:d5:ba:48:60:5c:60:da:00:57:12:
ae:91:5b:96:b4:0a:0f:dc:2d:62:8e:df:66:ba:47:
a2:24:d4:47:3f:5a:31:92:46:34:43:cd:89:a0:23:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4D:EB:B5:51:71:56:25:B2:4B:3E:1F:37:98:B0:7F:CA:02:9D:50
X509v3 Authority Key Identifier:
keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/qk3rtVFxViWySz4fN5iwf8oCnVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.166.0/23
193.34.244.0-193.34.246.255
Signature Algorithm: sha256WithRSAEncryption
60:f6:89:86:a9:34:02:3d:7d:a4:cc:a0:88:2a:ef:84:e6:17:
14:43:68:e1:7e:09:56:f6:ff:00:76:38:b0:a4:69:f8:52:46:
f4:41:6d:1a:99:13:6e:8c:0d:47:53:7a:46:22:27:97:4a:f3:
f0:7e:06:a5:3c:d2:8f:8f:46:93:6e:ba:ff:1f:c2:e0:20:96:
4a:29:66:af:cb:6e:8a:e0:92:97:c5:f1:4e:0a:71:b7:a8:e2:
7e:f0:3a:91:72:e0:02:b5:6a:95:18:b7:cc:09:44:de:c2:a4:
7d:9d:1a:9b:0d:e8:9b:95:e3:45:1b:41:59:88:05:e2:90:e4:
ea:63:40:61:38:31:f0:25:64:bc:d2:b7:05:9e:a5:5b:9c:cb:
9a:ce:b3:73:02:6c:a1:fb:df:38:9f:82:01:49:35:7d:86:81:
07:f0:16:17:e4:29:8b:f6:bb:66:c9:00:94:24:bd:13:15:f6:
9b:cf:3f:6f:d8:52:cd:1b:96:24:2a:74:ef:22:a7:d6:8b:bd:
27:6c:23:86:a8:a8:18:e9:45:2e:09:5f:40:1e:7d:6f:56:49:
67:70:94:87:5e:de:c9:9b:c5:79:c9:6f:e9:85:f3:ab:cc:fe:
69:41:21:ff:9a:21:22:95:4b:75:8b:c4:55:c1:da:14:fd:0e:
70:4d:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:13 2024 by rpki-client on console-fra.rpki-client.org