Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/qSok_gRMIKLUw0zQgXftWR129xk.roa
File: qSok_gRMIKLUw0zQgXftWR129xk.roa (raw, json)
Hash identifier: vEY24RuBcyh59KOnZRBgxy3m2JBYTO5iBA6WQc4Esy0=
Subject key identifier: A9:2A:24:FE:04:4C:20:A2:D4:C3:4C:D0:81:77:ED:59:1D:76:F7:19
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 052E2D50
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/qSok_gRMIKLUw0zQgXftWR129xk.roa
Signing time: Sat 01 Jan 2022 12:57:13 +0000
ROA not before: Sat 01 Jan 2022 12:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205459
IP address blocks: 195.64.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86912336 (0x52e2d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 12:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a92a24fe044c20a2d4c34cd08177ed591d76f719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:c1:48:55:80:63:9b:ae:24:3f:0a:4b:8a:
68:eb:fb:ff:10:9a:9f:91:73:21:67:35:25:7a:7a:
f5:9c:be:8d:7b:fe:96:7b:e3:d9:60:32:da:96:21:
9b:ab:78:93:0b:23:39:70:87:40:79:4e:40:f4:92:
03:b3:58:66:25:1c:94:d5:ae:a7:dd:6d:59:d4:32:
ce:a6:25:8d:f5:ea:25:d8:a8:62:34:23:b6:db:f3:
a1:e1:6d:f5:12:13:b3:40:4d:2a:e1:3c:cc:82:f1:
43:74:fc:5e:de:92:76:9a:6c:5d:c9:c4:ac:eb:f0:
a5:c9:f1:86:fc:c5:0e:ed:fb:7a:04:4e:9a:cc:34:
33:83:71:73:ec:7d:59:36:61:0c:40:d0:c9:57:2a:
2e:2a:30:08:b1:48:72:14:f3:26:40:26:a0:d3:b8:
a2:bb:c3:e7:ee:7c:b8:8e:e7:46:46:29:79:b9:02:
d7:0b:5b:68:2e:e3:13:9d:fb:e3:4f:bb:dc:32:55:
c3:2a:ef:2e:52:ed:20:d5:a3:93:6c:87:93:0e:11:
79:19:b2:a0:90:fb:a4:4e:07:1b:43:23:04:b7:0f:
bd:da:96:4a:ed:b3:de:59:28:c0:79:77:18:5b:6e:
a5:bc:2d:31:48:4e:6a:3c:56:ab:3d:67:2d:61:4c:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2A:24:FE:04:4C:20:A2:D4:C3:4C:D0:81:77:ED:59:1D:76:F7:19
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/qSok_gRMIKLUw0zQgXftWR129xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1c:4a:20:c2:38:74:86:f4:3a:b8:52:25:fd:06:5b:85:4b:
36:e9:fb:c9:0f:6e:a6:27:68:13:63:53:a2:bc:8d:94:f0:2e:
20:2b:cb:63:b7:40:f1:e3:4e:bd:7d:ee:11:29:e2:48:3c:9b:
14:92:b2:04:85:3c:4e:6b:8d:73:de:91:1b:0a:8c:ba:f2:eb:
be:17:81:bf:97:65:f0:a0:99:bd:a1:53:88:58:1a:ac:05:7a:
7e:84:30:1a:68:bb:e9:3e:d1:63:e6:48:d2:5a:6b:67:0a:61:
08:0e:ea:87:fa:4c:3a:fa:2d:3c:e2:f4:cd:a7:56:af:55:f5:
ee:f8:a5:24:c7:5b:93:d7:e2:cf:c0:3b:0b:c4:33:2d:b5:60:
9f:99:63:f2:fb:e0:fe:24:d8:fd:44:e3:74:3e:af:0e:98:71:
5e:4b:24:d7:45:fc:89:ed:d0:c3:03:af:a3:1a:c9:3a:a1:fe:
a5:c3:a8:05:82:91:48:f7:e7:bb:07:56:99:4e:37:e1:6e:91:
30:07:50:8e:2a:a0:11:91:22:97:3f:cf:e8:24:6d:80:f6:4e:
eb:85:bb:9d:22:85:02:5c:6f:ee:6e:61:63:0b:f5:ed:24:c1:
f1:a4:a9:c2:7e:61:c4:f6:de:63:87:f8:2d:f5:85:15:fb:42:
81:bb:d4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-ams.rpki-client.org