Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/qdl57afUxxu0rM9dyRnm-Iswr9M.roa
File: qdl57afUxxu0rM9dyRnm-Iswr9M.roa (raw, json)
Hash identifier: 2RUWHm2V4jmo/2NLeo8xC+fHO/ysV/DRKWbIQrw+G6A=
Subject key identifier: A9:D9:79:ED:A7:D4:C7:1B:B4:AC:CF:5D:C9:19:E6:F8:8B:30:AF:D3
Certificate issuer: /CN=ac69d3a96e34ecffb68580420cd8ec9f7ea09281
Certificate serial: 869224
Authority key identifier: AC:69:D3:A9:6E:34:EC:FF:B6:85:80:42:0C:D8:EC:9F:7E:A0:92:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGnTqW407P-2hYBCDNjsn36gkoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/qdl57afUxxu0rM9dyRnm-Iswr9M.roa
Signing time: Sat 01 Jan 2022 03:52:14 +0000
ROA not before: Sat 01 Jan 2022 03:52:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.23.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8819236 (0x869224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac69d3a96e34ecffb68580420cd8ec9f7ea09281
Validity
Not Before: Jan 1 03:52:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9d979eda7d4c71bb4accf5dc919e6f88b30afd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:eb:96:76:ec:59:72:03:73:8e:55:e6:09:
a4:6d:23:6a:85:62:23:10:86:df:ba:87:74:5f:2f:
86:74:08:61:d2:c0:ca:ea:d7:d3:6e:0a:0c:d1:b9:
56:50:38:c6:d0:d2:3f:0f:05:06:eb:55:60:a5:61:
e4:a6:52:f3:d5:b1:66:06:a7:6f:cb:3f:97:b4:84:
33:a7:4f:ea:11:2d:98:03:64:fd:19:d4:93:77:82:
52:66:19:f6:69:9e:06:b9:bc:c6:2b:0b:79:68:e1:
8e:e5:7e:36:26:0c:52:23:9c:6f:3b:3d:15:16:7e:
f5:dc:4c:37:4c:2b:f3:eb:ab:6f:ed:c1:b4:2a:83:
94:1c:66:e6:e0:7b:4c:62:38:16:36:22:3f:31:c3:
0a:e0:00:13:ea:e9:59:13:26:7c:8b:0c:5a:a5:0e:
8b:e2:db:b0:97:da:76:2e:3f:21:11:f4:4b:85:d9:
c0:b7:3d:b3:fd:2d:87:06:25:1c:6f:ea:4d:61:91:
6a:cd:4f:d1:66:08:df:c2:bb:c1:a3:66:f9:3d:30:
10:c8:b3:ce:59:b7:d8:be:63:aa:25:86:08:f8:df:
b4:41:da:d8:8d:11:a4:57:64:64:eb:a1:5c:40:e4:
bf:c0:4d:ad:69:67:e7:6c:9b:7f:82:8d:e4:c0:12:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D9:79:ED:A7:D4:C7:1B:B4:AC:CF:5D:C9:19:E6:F8:8B:30:AF:D3
X509v3 Authority Key Identifier:
keyid:AC:69:D3:A9:6E:34:EC:FF:B6:85:80:42:0C:D8:EC:9F:7E:A0:92:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGnTqW407P-2hYBCDNjsn36gkoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/qdl57afUxxu0rM9dyRnm-Iswr9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/rGnTqW407P-2hYBCDNjsn36gkoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5a:8d:03:f7:b2:81:ad:5e:4e:ec:3b:ee:a5:fa:9a:f3:27:
c6:e3:62:2d:9a:c4:91:a9:7d:df:a5:96:07:33:bc:61:4d:70:
ef:c0:24:78:6b:03:41:4c:03:33:48:40:8d:cb:77:b1:11:74:
27:5e:c0:59:8d:f4:0a:25:88:45:a0:c3:06:ea:93:d1:e1:4c:
89:3b:45:89:a8:b9:22:c7:db:9c:21:48:8b:3c:8c:de:fa:fb:
e6:ed:07:8b:53:08:ff:48:5c:02:63:6f:53:34:e6:65:b0:95:
8b:af:77:df:79:8a:f3:28:ec:ee:72:2a:da:c5:c1:06:cb:99:
b8:7c:0d:43:43:b7:8a:85:3e:b9:92:16:9a:6e:84:0d:4f:2b:
04:2e:aa:4d:b0:40:db:fe:a8:e6:5c:a9:b8:3e:bc:15:d0:05:
9e:52:9e:c2:87:ce:ba:3f:2d:0a:c2:dc:88:eb:6b:4d:f0:15:
3a:3e:f7:ad:58:7d:db:24:7c:8e:bd:92:e3:ca:d3:8d:de:7e:
c2:3b:67:dd:27:5a:81:68:e0:bd:1c:66:e4:95:b2:5b:bf:9d:
c4:62:87:76:3e:5e:4c:1e:3c:6f:30:c1:c6:54:6e:6f:54:85:
bf:52:84:b2:0a:9b:78:7c:d5:3d:cc:ab:5a:99:88:bf:bf:55:
db:4b:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-ams.rpki-client.org