Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/qqMS9cdaeU3LNmCUi_67zUjYE48.roa
File: qqMS9cdaeU3LNmCUi_67zUjYE48.roa (raw, json)
Hash identifier: IMWjSwmbhgQasAIgXMNU84W8ODmTh1ZX2iehTbUKnCk=
Subject key identifier: AA:A3:12:F5:C7:5A:79:4D:CB:36:60:94:8B:FE:BB:CD:48:D8:13:8F
Certificate issuer: /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial: 039E61D7
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/qqMS9cdaeU3LNmCUi_67zUjYE48.roa
Signing time: Sat 01 Jan 2022 10:57:35 +0000
ROA not before: Sat 01 Jan 2022 10:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212485
IP address blocks: 193.163.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60711383 (0x39e61d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Validity
Not Before: Jan 1 10:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aaa312f5c75a794dcb3660948bfebbcd48d8138f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:e9:ec:49:c1:68:da:e6:5c:39:25:74:e9:
da:1c:f1:2c:bc:f9:df:81:4f:2d:80:5d:c1:3a:02:
68:db:ff:01:30:c0:a4:c9:6c:bf:d5:8f:42:eb:0a:
2a:49:c0:b7:63:92:ce:9a:9b:01:b8:22:95:20:c8:
19:77:1f:c9:32:70:b4:c6:fa:bb:f5:b5:ab:72:f8:
91:97:55:20:fd:26:fd:4c:57:c0:da:73:42:b2:ae:
6d:63:26:59:1f:db:c8:65:4e:d4:a4:44:cd:ef:d9:
61:a0:20:c7:a6:84:32:1f:9e:08:d7:00:cc:25:15:
07:69:fb:3e:b5:d7:e1:98:e2:5f:2f:87:90:f7:87:
0f:91:85:c6:8f:6f:8f:28:ab:27:60:d9:14:1d:26:
24:ba:08:64:a5:86:f3:a2:ed:94:37:ad:97:f9:1c:
bc:eb:a6:a8:88:da:06:0a:d3:0b:cd:22:34:93:5e:
c4:08:78:ec:f5:0f:f9:95:30:67:9a:47:34:87:66:
91:9d:01:e6:ef:8a:69:82:e9:bc:a9:c2:48:0d:1b:
64:41:db:d7:8c:f0:6c:c0:89:0d:8f:07:de:73:cb:
2a:3b:46:9f:3c:5a:7d:e9:a6:79:a2:af:b6:c7:2f:
3b:e2:55:69:b0:e2:34:08:37:b4:5f:12:6d:cf:13:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A3:12:F5:C7:5A:79:4D:CB:36:60:94:8B:FE:BB:CD:48:D8:13:8F
X509v3 Authority Key Identifier:
keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/qqMS9cdaeU3LNmCUi_67zUjYE48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8f:2b:cf:4d:68:47:32:dc:7a:83:1f:e1:0f:f1:cd:b7:c8:
e6:c1:93:38:69:b8:e0:d5:07:f5:a3:0b:66:9b:ec:da:ad:a1:
ce:c1:38:c6:98:09:85:e9:8b:bf:4b:be:dc:fb:98:74:74:f3:
0e:51:53:aa:b3:10:19:8b:fd:44:bd:58:4e:af:87:81:a9:84:
ec:af:1e:fb:07:d0:68:61:af:c7:72:ff:91:7b:2e:b1:15:19:
ef:8e:4c:de:4b:d5:14:c2:b6:8b:c6:89:2f:8c:69:6e:6b:f9:
d5:80:49:2e:6c:8a:63:61:d0:c3:97:cc:1d:4c:83:95:14:11:
40:aa:a5:e7:88:5a:79:57:b2:1e:df:d7:d9:80:f8:00:2f:a2:
23:53:3a:4f:6e:cc:cd:ab:71:7e:78:61:f3:2f:2b:24:35:e1:
74:b7:3c:0c:f7:62:11:8c:25:b7:3e:e6:2e:7d:8e:95:d1:3c:
67:dd:c4:3b:ab:3a:4a:e9:63:d8:cf:85:10:3d:9c:b6:92:47:
cc:d7:a3:40:79:7d:42:b3:df:78:bc:db:7e:f3:a8:f2:98:a7:
84:70:7e:cd:c1:29:de:e6:a8:56:e6:44:a4:88:8e:18:70:81:
f2:11:46:d3:0c:a4:5f:a0:c0:0b:24:8a:52:d0:21:e4:bb:63:
c0:8c:7a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-ams.rpki-client.org