Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Q8xaRbnn4lgmR65YKPzkk51zj0E.roa
File: Q8xaRbnn4lgmR65YKPzkk51zj0E.roa (raw, json)
Hash identifier: PLUa/M+HF+QjgLlYAcB19A4WiBS/eF/rx5DXURtPBKI=
Subject key identifier: 43:CC:5A:45:B9:E7:E2:58:26:47:AE:58:28:FC:E4:93:9D:73:8F:41
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01831BBE5B29BBF4491DB8664FE4DC5860DF
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Q8xaRbnn4lgmR65YKPzkk51zj0E.roa
Signing time: Thu 08 Sep 2022 06:16:43 +0000
ROA not before: Thu 08 Sep 2022 06:16:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 185.179.216.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1b:be:5b:29:bb:f4:49:1d:b8:66:4f:e4:dc:58:60:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 8 06:16:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43cc5a45b9e7e2582647ae5828fce4939d738f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:ee:1a:69:ad:ad:ba:35:23:f1:22:6c:53:
95:cc:ab:19:6b:4a:30:05:7b:d8:dc:09:21:1f:b3:
68:ab:0f:e7:a5:49:e1:34:fc:0a:98:3b:fc:85:ed:
c9:59:f4:3b:a9:ff:84:71:d3:14:42:9d:ce:98:52:
f7:4e:1b:f9:26:19:c5:b9:a9:f8:c9:c9:49:47:0e:
b8:f4:77:e4:0f:4b:1b:d9:d5:14:48:ee:e2:38:ed:
fc:ae:c4:88:2d:81:0c:47:3d:f5:1e:d6:5f:00:44:
6d:32:50:58:cb:5a:55:86:bd:07:41:56:8a:6d:81:
76:31:2d:94:7b:2a:25:63:4f:c9:4e:62:48:9c:fc:
b6:bf:ac:f5:fd:ad:52:e3:07:cf:44:aa:36:4f:6d:
81:8d:44:10:1f:47:ba:73:ef:39:6a:d3:50:a6:ab:
67:d9:89:8a:47:20:02:61:32:62:d4:63:86:18:c9:
6c:d6:52:c7:69:93:ab:ec:fc:2a:15:1f:b5:85:f4:
31:ae:d3:0f:3c:f1:53:86:99:44:f1:55:3d:5d:c0:
13:af:a8:e7:69:f3:dc:c8:dc:b1:9e:bf:84:a3:1c:
4d:04:1c:16:ad:7f:a7:01:47:ef:b5:a3:ba:fc:ae:
a9:87:f6:4c:9e:17:46:da:33:ec:88:fa:b9:7c:5c:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CC:5A:45:B9:E7:E2:58:26:47:AE:58:28:FC:E4:93:9D:73:8F:41
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Q8xaRbnn4lgmR65YKPzkk51zj0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.216.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:9a:2d:cc:c3:1f:28:a9:90:90:34:93:e3:3c:aa:59:f6:50:
94:3f:a2:b1:01:fd:10:02:b7:66:04:38:37:3e:c1:bd:55:66:
ed:8c:40:31:03:f1:fe:02:31:60:9e:e7:28:b0:5f:9a:14:92:
47:28:27:70:16:55:0c:b5:17:ee:e6:65:23:8b:4a:70:8b:02:
a9:5e:cd:8e:e3:8b:94:9a:41:30:58:fa:0b:12:98:80:38:df:
fb:c9:27:03:5c:9c:67:61:46:3a:89:9e:0f:f4:49:17:91:e6:
59:4b:66:65:8b:98:77:11:c7:59:74:78:18:26:b6:e4:de:fe:
ea:1f:43:49:a8:e7:e1:33:26:74:b5:fa:ea:f2:e0:4c:4b:6d:
02:86:dd:b0:8b:bf:1a:c4:c0:d8:69:fe:42:e9:b3:87:07:68:
78:6a:b6:db:1d:9b:da:cc:63:1e:da:fb:1a:40:ba:5e:d3:cc:
8e:01:0c:7b:d7:e1:18:95:1b:db:e6:7d:10:11:f5:10:c1:31:
ba:99:1a:49:2c:c2:7a:88:7c:c5:53:95:b8:c3:23:b0:5a:6d:
d7:04:ff:0e:89:f9:c3:ef:8e:c0:bb:7b:0f:2f:52:ca:c3:fa:
8f:77:2a:8d:0d:e5:a1:f5:b2:c8:dc:ba:61:31:c1:68:71:3c:
17:4f:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org