Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qg_XFdz8vQHSKIThTfBgUzLwvF8.roa
File: qg_XFdz8vQHSKIThTfBgUzLwvF8.roa (raw, json)
Hash identifier: /ivQu/MdqwrpnhkZ25d/diaIuc43JwFUjt0w1YZjoiA=
Subject key identifier: AA:0F:D7:15:DC:FC:BD:01:D2:28:84:E1:4D:F0:60:53:32:F0:BC:5F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14F5ED87
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qg_XFdz8vQHSKIThTfBgUzLwvF8.roa
Signing time: Sat 14 May 2022 13:40:40 +0000
ROA not before: Sat 14 May 2022 13:40:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 46.249.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351661447 (0x14f5ed87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 14 13:40:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa0fd715dcfcbd01d22884e14df0605332f0bc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:0a:fa:c8:8b:94:65:f6:26:6d:14:c0:41:
9d:27:99:df:00:21:31:75:b0:b1:97:e9:47:ab:9b:
5a:d3:22:9b:1e:d1:f8:b2:dd:56:cf:6b:dc:9d:d7:
95:69:fb:e1:1a:a5:12:d7:ce:6e:93:82:23:92:43:
4a:6a:3d:cc:27:d7:e7:74:4a:5f:58:23:04:d1:0e:
38:a8:8e:fd:04:34:82:4c:5a:9e:b7:47:19:6f:03:
67:3a:a9:97:d2:62:c8:a1:a2:00:10:d7:9c:62:6f:
be:40:22:2c:51:1c:bb:38:0c:72:2a:89:3f:2d:d1:
43:b6:bc:bb:b0:47:e4:f9:e5:6d:01:56:07:07:3e:
e6:fd:1f:13:08:96:ad:a8:07:72:5a:ed:32:17:cb:
a5:37:38:71:78:53:82:48:9f:85:c2:17:45:f9:71:
ff:6c:48:07:69:c1:dd:82:2c:a1:4e:42:fc:b8:9b:
4c:0c:d9:7b:75:c9:2c:b4:cc:a6:ae:da:2b:c5:c3:
50:f6:fd:15:24:16:a9:59:41:8c:c4:7e:70:0d:5e:
98:e7:34:19:76:69:9f:6e:f7:81:cb:28:6d:7f:ac:
4a:46:82:07:d9:43:c7:70:f5:1f:0b:87:44:19:5f:
8b:6f:1c:ca:fe:d0:92:b0:b4:5c:3c:26:fb:e6:79:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:D7:15:DC:FC:BD:01:D2:28:84:E1:4D:F0:60:53:32:F0:BC:5F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qg_XFdz8vQHSKIThTfBgUzLwvF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.100.0/22
Signature Algorithm: sha256WithRSAEncryption
93:1b:ed:01:4c:30:23:ea:2f:4a:0d:cc:ae:b6:75:a5:16:53:
a3:73:8a:21:f0:f2:46:86:60:37:20:5c:72:0c:30:76:4a:e2:
cb:39:ad:df:2a:b2:1d:b4:db:1a:8d:61:bc:7a:57:c0:35:f8:
37:2d:e6:04:01:91:df:08:3b:46:4a:42:3e:13:44:48:ef:61:
ab:fe:92:36:a0:bd:a1:f7:e4:bc:c8:a9:e5:7d:2d:7e:8b:ee:
3e:91:6d:18:e0:09:6d:ee:60:4e:43:90:5f:f6:5e:bd:88:f0:
f0:61:5c:4b:b7:88:be:d6:be:9d:cf:3b:f3:36:3d:28:2b:e0:
69:bf:fa:9a:ac:b8:ac:7d:2e:3c:65:32:4c:16:b5:e7:e0:01:
f5:c9:62:2f:77:c6:b5:24:ab:b0:80:74:e0:12:fb:6e:08:b3:
43:c7:d6:2c:c3:68:7f:0c:9c:de:04:09:5f:90:c4:8a:c4:e7:
81:98:7c:98:90:8a:34:80:b9:b2:99:a0:f6:6f:1f:c8:e4:16:
bf:bb:a5:ad:46:d9:8a:49:f7:01:1c:9b:56:98:5b:a8:82:ef:
56:9b:ab:d1:8e:8d:b9:ad:0f:d2:b7:21:1e:f6:36:f9:c2:96:
8e:30:29:77:c6:cb:ae:57:e0:d1:39:f4:33:fd:9e:43:da:29:
f2:7c:9d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org