Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/QK_WbF6SWsiaE20lv6gM1qFQ3yM.roa
File: QK_WbF6SWsiaE20lv6gM1qFQ3yM.roa (raw, json)
Hash identifier: nnyj4LziO/6euggIp2WecTv9lkFtz+1egCNkhzpDcag=
Subject key identifier: 40:AF:D6:6C:5E:92:5A:C8:9A:13:6D:25:BF:A8:0C:D6:A1:50:DF:23
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 0404BBAE
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/QK_WbF6SWsiaE20lv6gM1qFQ3yM.roa
Signing time: Sat 01 Jan 2022 15:05:34 +0000
ROA not before: Sat 01 Jan 2022 15:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 185.55.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67419054 (0x404bbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jan 1 15:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40afd66c5e925ac89a136d25bfa80cd6a150df23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:99:d4:da:65:88:7a:ac:f5:94:63:e8:2d:
c7:46:b9:f4:43:32:cb:58:fd:0c:4d:c2:9f:ec:de:
42:d3:95:17:37:d8:e1:a1:76:b7:99:09:4e:29:2f:
8f:7b:e1:6d:b1:80:96:d9:01:f4:ce:56:05:45:c7:
de:02:21:6c:49:45:ab:63:17:b2:05:d5:40:be:f0:
37:81:27:8e:f1:0a:d5:7e:90:ee:71:e9:7e:17:0c:
49:74:34:b0:b7:47:76:cc:3c:25:fb:cf:ca:21:92:
e4:3e:c7:91:ba:b4:d2:de:99:18:80:c5:ff:a3:9c:
31:c0:aa:ea:76:71:e3:33:dd:1f:5b:b4:5a:92:bb:
f2:24:81:29:89:80:0e:35:bf:f6:59:84:ed:b5:29:
6c:e1:4a:fa:e2:48:88:27:2a:f2:e4:9e:d9:81:f9:
93:5c:44:24:ae:86:ca:5f:f4:0e:c1:a1:c8:32:cf:
4d:c7:5d:20:78:52:62:75:db:a3:5a:59:e1:df:66:
5d:eb:b7:64:fe:ef:9b:ab:d5:b7:90:c6:68:39:e8:
a6:05:4f:3e:17:3a:e4:af:ee:c9:23:6e:ac:ab:df:
23:f7:a0:cf:46:9c:b4:6e:c4:52:90:c9:54:91:06:
6d:fd:85:73:db:33:6b:a5:fc:d9:8c:01:23:9b:4b:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AF:D6:6C:5E:92:5A:C8:9A:13:6D:25:BF:A8:0C:D6:A1:50:DF:23
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/QK_WbF6SWsiaE20lv6gM1qFQ3yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:8c:03:ee:8f:5f:19:81:0a:7d:74:ee:df:8d:bf:9f:a3:d1:
cf:e2:5b:dd:34:c7:d6:c2:b0:8e:b3:bc:df:df:a4:7b:9f:94:
6f:dd:11:a1:54:4e:59:4b:f2:a4:f5:af:c9:9b:62:d3:b3:71:
95:ba:82:a9:30:59:eb:af:c0:a7:4f:e7:33:6d:22:0b:be:86:
b0:f8:6f:c5:5e:0d:1d:c8:ad:e3:ab:2a:89:10:f1:d4:37:e9:
77:96:d1:e4:0c:5a:3d:d4:60:a2:05:e3:52:6c:29:2b:5a:e7:
f5:7d:89:b8:54:ba:7a:20:2d:e7:82:c3:ee:07:e3:f8:7d:3a:
5a:1d:4e:f6:cb:04:78:b7:67:eb:59:66:a3:70:4c:00:a9:4e:
19:8e:0c:60:ff:1d:d4:ed:17:ba:62:45:7c:a3:e9:bb:72:8b:
06:8a:9c:a6:1d:57:f6:d5:37:35:75:c8:d3:95:52:03:78:92:
e6:89:5d:73:45:35:00:90:8f:08:11:7c:a6:a7:2b:05:78:ff:
ef:ed:cc:12:10:55:e7:76:e5:7d:b8:c8:a3:4f:5e:08:33:50:
89:4c:9f:db:8c:bd:b8:d7:02:13:f6:7e:e1:0e:26:c1:00:52:
24:00:3b:83:38:4b:4a:90:c6:ce:a0:89:fb:3f:42:8b:bd:32:
73:fa:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:45 2024 by rpki-client on console-fra.rpki-client.org