Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/WqPb3j0wCnr20GSQYFW9qeLp4l0.roa
File: WqPb3j0wCnr20GSQYFW9qeLp4l0.roa (raw, json)
Hash identifier: 3POwod/DxKa9gKSaXCRb08JsogfHVREvGYwxWswf730=
Subject key identifier: 5A:A3:DB:DE:3D:30:0A:7A:F6:D0:64:90:60:55:BD:A9:E2:E9:E2:5D
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 0A710EFF
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/WqPb3j0wCnr20GSQYFW9qeLp4l0.roa
Signing time: Sat 01 Jan 2022 08:56:37 +0000
ROA not before: Sat 01 Jan 2022 08:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134823
IP address blocks: 193.42.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175181567 (0xa710eff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jan 1 08:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aa3dbde3d300a7af6d064906055bda9e2e9e25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:a6:cd:3e:67:90:bc:52:dd:ab:39:10:57:
69:83:5b:24:04:c0:6e:ef:4b:34:14:2c:45:66:3b:
c3:23:0d:70:cd:1f:77:c3:98:58:17:7b:24:f8:bd:
d5:83:82:a7:55:83:19:19:05:86:1e:ba:1d:fd:91:
da:9f:17:b0:9d:42:7d:2d:45:d4:8f:98:b0:ba:ce:
88:2e:28:58:9e:e0:b3:b8:61:a4:32:46:88:6b:39:
ee:9b:ae:8a:45:f9:90:0e:28:76:be:a2:21:08:55:
aa:38:77:9a:be:45:66:74:fb:51:ae:46:24:88:8a:
80:9c:0a:2a:60:00:3d:33:5a:bc:21:a2:78:d8:15:
b4:b4:fb:04:58:ad:b7:d0:73:8b:d0:60:62:08:dd:
05:e3:46:cc:97:2a:97:4a:21:52:ac:c3:d7:a4:5a:
be:44:09:ea:44:77:4d:b3:f9:4e:56:15:9b:0d:a7:
4a:cf:2f:e9:13:f4:83:e2:d3:aa:b6:bd:46:80:dc:
20:58:1f:6e:bf:5c:e1:bc:8f:be:4c:dc:46:9e:06:
cf:ac:5b:ae:3b:33:90:a0:81:4d:25:7f:31:83:11:
67:3d:f4:77:76:cd:c3:13:04:63:75:f2:09:20:18:
58:13:fe:6e:b7:96:74:c0:b9:9c:ce:15:26:88:91:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:DB:DE:3D:30:0A:7A:F6:D0:64:90:60:55:BD:A9:E2:E9:E2:5D
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/WqPb3j0wCnr20GSQYFW9qeLp4l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.40.0/22
Signature Algorithm: sha256WithRSAEncryption
15:0d:5f:27:9f:98:20:86:39:95:bb:5a:8c:da:66:70:cc:dc:
a8:59:21:94:bd:5e:9c:8f:87:df:ef:56:d1:7e:91:f6:5f:4a:
5b:63:2a:26:67:65:de:a5:cf:5a:f5:bb:f1:b0:36:3e:a6:72:
76:50:a5:be:9f:6c:31:d5:23:0c:a4:b5:f5:47:a6:c4:a6:1c:
52:d5:b8:89:27:92:6b:63:3f:85:2c:21:e5:de:e3:c1:cb:85:
6e:d2:f1:3b:c1:8a:dd:89:51:f2:4a:f7:33:fd:19:1b:1a:38:
7c:81:46:3a:0b:48:af:ad:46:d2:33:ae:39:7f:6e:1e:6f:2a:
d9:90:7c:0c:a9:ca:8b:cd:d4:a0:70:98:a9:d7:17:d4:20:7a:
a6:12:96:a4:f3:57:ab:27:ee:21:cf:8b:af:68:4d:31:c5:54:
33:eb:dd:b9:74:11:e6:06:82:73:97:38:1f:64:a6:cd:b4:57:
be:27:18:91:af:74:50:20:6f:55:0a:e1:22:6d:a7:ac:e7:63:
02:65:f2:d7:83:30:f2:7e:d7:37:46:f1:5b:f0:0d:03:93:56:
51:12:60:c1:e7:ec:d6:51:6e:dd:c0:f1:ba:5e:67:52:c5:1a:
b2:d5:c9:23:50:4a:df:d6:2d:49:3f:21:a9:1b:99:7d:6f:4d:
34:60:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org