Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QAMI7Fg37PGUKn1P4m-0Hm3gYk8.roa
File: QAMI7Fg37PGUKn1P4m-0Hm3gYk8.roa (raw, json)
Hash identifier: pN/U0KlQe/k29Ik1TgLGh4STN9cwI7UBG0xPX5MlRM4=
Subject key identifier: 40:03:08:EC:58:37:EC:F1:94:2A:7D:4F:E2:6F:B4:1E:6D:E0:62:4F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 132EE086
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QAMI7Fg37PGUKn1P4m-0Hm3gYk8.roa
Signing time: Sat 01 Jan 2022 04:03:00 +0000
ROA not before: Sat 01 Jan 2022 04:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51089
IP address blocks: 185.218.6.0/24 maxlen: 24
185.218.7.0/24 maxlen: 24
185.218.6.0/23 maxlen: 23
31.25.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321839238 (0x132ee086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=400308ec5837ecf1942a7d4fe26fb41e6de0624f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:57:17:f0:2c:f8:98:d2:b0:8d:27:60:bc:
e9:08:37:9f:56:f4:61:32:b4:23:43:73:9a:90:86:
ab:c4:b3:10:91:ff:53:5a:98:f0:01:56:81:bc:64:
a9:ee:4f:04:29:97:08:f7:f4:1b:88:bc:93:70:a3:
0e:24:8d:3f:13:3a:51:19:45:ec:d7:c2:35:ce:a6:
77:cd:e3:31:77:6f:8c:65:3b:aa:d0:bd:e3:c8:65:
ac:e2:d5:9f:15:2a:ca:de:f9:9a:77:4b:2c:a5:02:
cf:63:c2:35:5d:35:ae:2e:45:38:38:10:41:e6:84:
0a:70:5c:e9:f0:fe:52:78:f0:1a:83:b7:a6:6a:00:
8d:21:7c:34:be:49:3e:27:80:34:f8:09:13:70:4d:
7b:b5:90:1a:85:03:8f:c7:7d:a5:a3:3a:29:af:69:
61:bc:7e:65:19:b0:28:89:4c:f1:0b:ec:46:f1:aa:
92:13:6a:e3:7f:76:51:e5:9d:92:dc:ab:3e:f3:5a:
86:a6:ef:64:17:36:e2:8a:c0:30:72:d7:5d:02:06:
80:ea:a2:d4:28:2b:dd:70:ad:12:f3:e4:0f:67:95:
29:24:f4:18:60:95:a1:f2:bf:16:e3:ab:67:7c:a9:
2c:27:d4:6d:f5:f4:20:cb:1a:2b:8d:a5:54:8c:43:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:03:08:EC:58:37:EC:F1:94:2A:7D:4F:E2:6F:B4:1E:6D:E0:62:4F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QAMI7Fg37PGUKn1P4m-0Hm3gYk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.88.0/24
185.218.6.0/23
Signature Algorithm: sha256WithRSAEncryption
96:72:c1:c8:48:13:3c:ef:ca:8d:a7:aa:d6:f2:7c:c2:3d:7a:
b7:ec:0c:8c:05:bb:9b:d1:1b:27:20:13:3b:bc:32:d1:e3:91:
e0:ca:d2:77:cd:bb:68:53:3a:81:13:59:96:ff:d2:2c:aa:0d:
a9:ce:14:66:c7:ca:35:36:5e:f1:a7:90:5c:d7:7c:df:54:23:
3f:b7:c1:91:92:88:e8:f7:85:30:fd:97:c0:2e:d3:8b:d7:1d:
04:ea:17:90:f3:9f:1b:8a:4b:35:f5:b5:f2:8e:d9:06:32:07:
59:3c:2d:16:98:9b:e4:f6:c0:db:5f:16:01:54:91:f4:1a:20:
db:b7:19:a2:1b:8f:7c:ce:f5:89:0f:87:16:df:dc:fe:de:43:
dd:5a:d1:bf:41:b5:1e:50:cc:a3:41:17:5a:37:92:91:31:ca:
ed:26:39:17:2e:8d:2d:6b:6f:de:15:9f:91:c2:ec:06:6f:1b:
f9:a5:67:07:3c:89:2c:9e:d1:ea:b6:f4:12:3f:4d:6b:e3:bd:
f9:f9:ce:71:16:c3:6b:c3:8a:e9:2f:76:f4:3e:0a:c1:20:67:
bf:4f:2b:23:01:af:fa:7c:f4:e9:a6:c8:a8:8e:e1:22:82:79:
2d:9b:f7:d8:a3:ac:37:c4:7e:58:66:29:06:06:a0:88:1a:79:
f2:c2:d1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org