Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/qjkbPDSeSn7zHCcBBno_n8iR5-w.roa
File: qjkbPDSeSn7zHCcBBno_n8iR5-w.roa (raw, json)
Hash identifier: S+pKTfBNzp35J7dIcvm3LeJLnjW0BV8LzPW4McncE/k=
Subject key identifier: AA:39:1B:3C:34:9E:4A:7E:F3:1C:27:01:06:7A:3F:9F:C8:91:E7:EC
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 0588FDFD
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/qjkbPDSeSn7zHCcBBno_n8iR5-w.roa
Signing time: Sat 01 Jan 2022 08:52:50 +0000
ROA not before: Sat 01 Jan 2022 08:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30766
IP address blocks: 178.132.68.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92863997 (0x588fdfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: Jan 1 08:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa391b3c349e4a7ef31c2701067a3f9fc891e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:b5:2e:5a:03:6b:7b:28:fb:d6:ae:36:b5:
5a:d7:f1:fe:40:d2:53:6b:df:86:a2:73:0f:3a:99:
c0:b1:7c:37:27:dd:0e:2e:39:68:e0:cc:43:d0:fd:
01:02:3a:02:89:bb:e9:f5:28:34:09:7a:2c:da:16:
d1:0c:cd:d7:80:e0:55:8a:d5:3e:66:63:1e:b0:76:
85:18:ca:26:e3:18:c9:b7:51:7a:a9:a1:7b:5e:a9:
ee:9f:1a:ed:e0:81:65:10:f8:a2:c6:10:31:57:75:
ce:5f:e5:5e:0f:41:3f:2a:30:f3:42:93:9d:37:78:
56:1c:fb:27:69:c1:55:23:51:a1:5d:0c:1d:3e:35:
f4:2e:13:52:23:0f:17:47:32:72:3a:ef:9d:47:d5:
20:a8:b0:71:a3:e2:a1:e9:a0:65:7b:a7:ca:03:67:
11:3f:8c:40:6d:22:20:05:03:e2:a8:3c:8d:d8:ff:
a0:6b:9a:ed:16:33:f7:65:c0:cb:da:d9:14:73:b8:
86:b8:f7:d7:b7:35:8f:2f:ca:90:52:ee:76:e6:64:
ce:71:89:54:a9:d6:ba:23:d3:34:6c:25:48:73:45:
65:f2:b9:20:b8:b6:5b:bb:a0:d2:2a:a0:f7:d3:da:
75:ee:de:23:d4:35:35:96:41:6c:19:b3:96:e5:cd:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:39:1B:3C:34:9E:4A:7E:F3:1C:27:01:06:7A:3F:9F:C8:91:E7:EC
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/qjkbPDSeSn7zHCcBBno_n8iR5-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.68.0/23
Signature Algorithm: sha256WithRSAEncryption
14:a0:49:0f:bf:59:9e:f6:b3:82:a5:8c:76:bf:54:ca:98:cf:
79:77:e1:5c:26:c0:29:97:1b:66:eb:6f:dd:c5:de:57:fb:8e:
43:04:60:aa:86:60:32:eb:6a:ab:35:db:c9:ae:08:6a:a7:0a:
a0:b2:2a:1a:b0:ba:52:d0:2c:e6:d8:3e:3b:83:3a:42:d9:8f:
e4:a8:30:4d:ac:5c:91:3a:6a:2a:10:38:98:42:66:14:67:3d:
1b:11:98:c0:9a:19:79:0b:a6:65:80:c3:38:82:05:59:29:47:
ca:bc:59:59:6b:b4:bc:4d:cf:83:3b:8f:f2:15:ba:72:4c:57:
e2:da:61:7a:5c:7d:c4:31:d8:59:b8:87:75:31:e7:4d:e4:51:
ee:dd:62:c7:00:75:51:48:b7:61:25:6c:ce:58:67:a4:f8:a3:
13:f9:67:55:df:bb:93:a6:9e:9d:d8:d9:80:28:1e:42:63:24:
12:17:0d:23:b9:22:e1:60:3f:0e:9c:8a:e7:9d:30:72:98:05:
01:cc:97:36:85:44:1f:96:06:21:5f:45:6c:95:24:c2:bf:4e:
0b:f1:44:bc:41:94:68:aa:a6:7e:d3:9f:39:28:f2:15:66:9c:
ee:cc:54:9d:7b:2b:8f:08:66:d1:12:33:07:ef:15:d6:ba:43:
48:7b:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:16 2024 by rpki-client on console-fra.rpki-client.org