Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/qyDNnMpeecITb6gRCU5KzTzLkXU.roa
File: qyDNnMpeecITb6gRCU5KzTzLkXU.roa (raw, json)
Hash identifier: jikzjg5Pk8G7J517GxqZ1S1n236D+7SWaTIUMLuJyTk=
Subject key identifier: AB:20:CD:9C:CA:5E:79:C2:13:6F:A8:11:09:4E:4A:CD:3C:CB:91:75
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 05FCB997
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/qyDNnMpeecITb6gRCU5KzTzLkXU.roa
Signing time: Wed 13 Apr 2022 09:21:30 +0000
ROA not before: Wed 13 Apr 2022 09:21:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204440
IP address blocks: 185.248.248.0/24 maxlen: 24
185.248.248.0/23 maxlen: 24
185.248.251.0/24 maxlen: 24
185.248.250.0/24 maxlen: 24
185.248.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100448663 (0x5fcb997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Apr 13 09:21:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab20cd9cca5e79c2136fa811094e4acd3ccb9175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:30:f3:db:a0:89:60:da:fb:23:77:a2:e0:
25:a4:cd:fc:09:04:f2:70:b7:78:f3:df:b0:95:05:
84:fb:6d:99:78:45:aa:e2:8d:65:1e:f5:7d:d3:a2:
1f:47:3d:d0:ab:87:7b:43:f0:f7:e1:38:5c:4e:4f:
34:de:6d:88:13:05:42:55:f2:28:da:f3:61:38:1d:
7e:29:5d:9e:47:3a:47:d0:98:e3:ec:ff:f0:49:ec:
7c:e5:82:b1:71:ce:59:3c:fc:02:b4:14:75:c9:7c:
0e:c7:f5:aa:06:c7:61:d2:46:d5:c2:b2:ef:4b:ef:
06:16:4a:5e:63:b8:9e:8e:2c:9b:84:58:a5:34:82:
17:39:ef:cb:65:2a:38:33:23:2a:3b:a4:be:82:0b:
3f:d1:29:b2:f7:fe:5e:41:87:79:96:0b:1f:80:d0:
ba:b6:3d:11:eb:b7:d0:cd:ed:83:60:6a:c8:e1:d8:
82:30:af:46:99:ac:e0:fc:2d:20:5d:28:b8:9d:93:
6f:a1:3b:34:79:cf:70:f5:8b:79:c4:d2:62:cd:e8:
85:1b:49:a1:01:a0:36:77:e7:47:30:43:d1:c0:eb:
09:48:88:3d:bf:5c:aa:fb:c3:16:bb:80:3f:0b:af:
e8:3c:60:ce:48:03:8d:0a:48:12:f1:74:32:ce:d9:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:CD:9C:CA:5E:79:C2:13:6F:A8:11:09:4E:4A:CD:3C:CB:91:75
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/qyDNnMpeecITb6gRCU5KzTzLkXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.248.0/22
Signature Algorithm: sha256WithRSAEncryption
42:c5:75:3f:cf:4c:df:7f:f8:fd:48:d9:07:f9:6e:00:3e:ba:
c7:d6:05:68:41:94:8c:a9:50:90:ad:90:67:df:49:17:d4:c1:
b6:e8:1d:2d:1c:d1:5a:2b:e4:c7:ae:02:30:11:26:fc:be:e9:
6b:c1:42:75:3e:40:5c:2f:5b:25:e2:14:0e:ad:36:88:a2:b6:
d2:97:ab:2e:dd:d7:2b:d4:6b:ed:31:92:36:02:1a:96:09:ec:
55:f7:5e:b5:3f:31:c1:4b:da:a5:26:20:d8:25:d3:5e:49:b1:
dd:ae:41:3a:e1:62:29:a2:4d:dd:4f:85:a0:fd:f4:60:96:74:
f0:98:29:f9:43:ab:de:c2:16:4c:30:cd:3f:60:d2:07:11:05:
58:1e:b0:99:a2:70:16:df:01:cc:51:ae:68:2e:ad:4d:74:21:
58:1c:83:25:bd:57:c9:a4:75:1d:04:f2:e7:e6:0c:d8:1a:76:
0c:bf:ff:05:f2:31:f9:56:ba:26:d9:2c:46:bc:82:6d:8e:45:
a1:49:fb:75:ca:00:f2:54:de:1d:80:b5:5e:72:50:45:76:60:
90:d1:2e:a0:92:b4:e9:df:05:e0:0c:c2:4f:ee:42:6f:9d:85:
52:dd:11:7c:74:10:23:77:79:26:20:f0:53:b2:ea:31:87:f6:
30:0e:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org