Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/qqsTJlobDTSNUg0tT7Bp1UtvLkc.roa
File: qqsTJlobDTSNUg0tT7Bp1UtvLkc.roa (raw, json)
Hash identifier: jt9Sp6Cs3Y5ZBrKfymVif1O0R1eZmegU1zsl/xXxmcw=
Subject key identifier: AA:AB:13:26:5A:1B:0D:34:8D:52:0D:2D:4F:B0:69:D5:4B:6F:2E:47
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 1275B3B7
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/qqsTJlobDTSNUg0tT7Bp1UtvLkc.roa
Signing time: Tue 08 Mar 2022 16:42:37 +0000
ROA not before: Tue 08 Mar 2022 16:42:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394161
IP address blocks: 213.244.145.0/24 maxlen: 24
62.67.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309703607 (0x1275b3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Mar 8 16:42:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aaab13265a1b0d348d520d2d4fb069d54b6f2e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:5c:67:c8:85:7b:19:02:e2:54:dc:fe:64:
af:42:c3:c8:0e:58:29:96:89:78:21:9b:7e:8f:43:
14:f8:ea:6f:31:ac:8c:a8:4e:5e:bc:4e:8d:de:3a:
b4:eb:1b:0c:8d:ad:f8:fc:80:be:fe:f6:40:53:0a:
e7:8a:9b:f6:07:ae:6f:5b:46:cf:58:56:db:89:ba:
19:e6:ac:32:2f:1b:d4:b7:a2:c2:72:2d:14:5f:02:
31:2d:95:f6:09:f3:77:dc:14:5a:fb:e5:0b:88:27:
4f:25:29:bf:08:fe:0c:28:39:3d:fd:17:a5:3a:41:
42:3e:da:57:55:8f:9b:c2:9c:37:5c:e8:55:4b:e0:
16:99:97:02:24:be:44:2f:76:09:7b:88:4c:ac:db:
c6:44:cc:09:8c:2f:2a:10:14:22:64:64:1e:d2:90:
43:88:4f:16:5f:11:51:5d:be:c7:9e:39:01:bc:d5:
32:d1:50:5a:87:34:ae:d3:8b:e9:3f:4b:a1:27:49:
9d:65:f3:6e:60:f7:27:cf:71:70:0c:b0:87:4e:77:
38:72:d0:b1:7c:74:14:47:ac:ad:e7:df:01:63:a7:
5b:13:3b:73:62:91:f0:f1:ae:e9:8b:c6:ac:64:df:
d1:d7:c7:00:ff:00:c4:19:a8:c7:d9:1b:d0:0a:5d:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AB:13:26:5A:1B:0D:34:8D:52:0D:2D:4F:B0:69:D5:4B:6F:2E:47
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/qqsTJlobDTSNUg0tT7Bp1UtvLkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.67.197.0/24
213.244.145.0/24
Signature Algorithm: sha256WithRSAEncryption
52:14:53:62:06:1f:89:24:3f:5a:fc:b5:99:9d:af:03:2d:3a:
2f:0e:71:77:50:1e:34:ba:9d:3c:11:35:d7:e5:e3:ff:22:88:
47:46:6d:d7:9f:68:9e:18:56:fe:71:f0:21:ad:ae:e0:a9:3a:
5d:35:f1:98:10:1b:48:1f:75:6b:94:13:80:72:7b:c2:19:dd:
f8:5e:ba:14:f0:76:ee:13:27:74:1b:eb:63:98:7e:09:b6:6f:
3b:7e:a7:dc:56:70:f1:ed:93:51:bc:94:b3:df:fd:9f:fb:c9:
d5:8d:98:81:a0:9f:71:b4:54:aa:f9:d0:b4:96:7b:a0:6c:a4:
03:02:0c:28:5c:2b:e0:88:0b:23:d2:32:81:bb:dd:e0:3c:2d:
fc:35:cd:e8:34:7e:f8:ea:af:fa:bf:ce:a1:15:17:8e:96:5f:
cc:45:fc:6f:63:02:e9:3f:91:a8:ee:af:29:e6:19:7e:6b:ce:
de:8e:06:46:d9:bf:73:97:e8:49:60:e6:38:41:60:d4:6f:35:
5c:44:69:b1:cf:6a:66:48:6c:89:81:f4:b3:53:f2:3a:29:64:
e9:7e:84:db:a2:0b:32:e9:93:2e:fa:a2:6a:25:77:69:92:73:
af:bf:f4:97:55:f1:d6:64:38:6f:0a:98:3b:bf:5f:da:eb:7f:
f8:d0:d2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-ams.rpki-client.org