Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/QADi_Z99qPGf5Jot227d-oAKCjM.roa
File: QADi_Z99qPGf5Jot227d-oAKCjM.roa (raw, json)
Hash identifier: wtVRK7XAD4BrH9SN5+DzGOoaOB5Kfaz02H5Vcro3LG4=
Subject key identifier: 40:00:E2:FD:9F:7D:A8:F1:9F:E4:9A:2D:DB:6E:DD:FA:80:0A:0A:33
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 08D85B0E
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/QADi_Z99qPGf5Jot227d-oAKCjM.roa
Signing time: Tue 03 May 2022 00:40:15 +0000
ROA not before: Tue 03 May 2022 00:40:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43357
IP address blocks: 185.194.52.0/22 maxlen: 24
2a09:7:2007::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148396814 (0x8d85b0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: May 3 00:40:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4000e2fd9f7da8f19fe49a2ddb6eddfa800a0a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:4a:be:0e:f0:31:f3:d8:06:55:92:e2:f5:
2f:02:d7:99:e7:0e:58:e1:01:12:63:ca:98:94:16:
20:47:76:ba:13:52:29:38:b8:0f:4a:da:64:02:71:
85:f5:0d:59:7f:5b:ee:99:19:4b:05:30:5e:ce:37:
a9:1d:07:dd:7f:f5:34:9d:b8:b8:b4:98:9d:e7:82:
3e:3e:2e:59:ca:de:6d:e0:c6:9a:8b:1f:c3:59:04:
2d:0f:cc:a6:b2:5a:16:ad:8d:59:7b:52:e1:4c:55:
1a:8f:1e:d0:5b:44:38:2b:99:6b:d9:f9:68:40:3b:
93:65:49:1f:43:d4:15:86:a3:0c:71:5f:55:19:6f:
03:01:81:b2:ab:99:ec:f7:cb:b1:b6:c1:9d:fa:4c:
43:ae:d0:ac:ba:43:5f:83:4a:1f:1c:26:48:b9:f6:
5b:ee:8d:ad:94:50:4b:9d:59:9e:cb:73:57:4a:a4:
6e:46:89:eb:81:38:fc:f6:7a:34:01:4a:e8:6b:81:
4c:b3:37:50:8f:75:fa:b4:a1:ce:5b:9a:62:99:8e:
e4:3a:0d:ea:9b:d5:11:cf:31:16:9b:c4:98:9a:dc:
08:b0:0c:62:67:52:83:98:84:d7:b9:96:4f:b5:0c:
45:13:a9:70:fd:93:64:37:fa:ae:3c:81:5e:88:5e:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:00:E2:FD:9F:7D:A8:F1:9F:E4:9A:2D:DB:6E:DD:FA:80:0A:0A:33
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/QADi_Z99qPGf5Jot227d-oAKCjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.52.0/22
IPv6:
2a09:7:2007::/48
Signature Algorithm: sha256WithRSAEncryption
6a:80:20:25:ee:cc:1a:df:9e:09:f9:38:16:49:7d:53:f8:e6:
3c:c6:2f:12:f9:55:a8:34:3a:66:74:22:59:5d:8d:2d:ce:e0:
7c:54:d5:8b:03:38:b9:5c:e9:b3:58:0e:2f:c1:f3:e3:b6:0a:
e4:de:d1:e9:31:9a:aa:f4:eb:8f:63:f0:cb:dc:4b:6c:e0:89:
6d:1a:ae:ce:72:89:0c:6f:7a:36:be:0b:ea:55:58:30:f1:6f:
17:f7:c5:7c:74:52:63:e6:40:6a:26:22:5c:d2:98:39:a3:2a:
e5:e8:70:51:fb:d9:00:96:48:ea:8e:3c:5e:49:12:c5:22:76:
51:c5:50:46:7a:83:1b:bc:d2:9b:81:04:25:1b:69:c9:ab:75:
65:79:21:45:3f:8b:05:1f:12:a6:34:07:f0:25:36:66:3f:9c:
6f:a2:dd:56:62:2c:ae:f1:25:83:6b:88:e9:8a:3c:b4:55:ec:
61:95:2c:ea:9e:b7:52:37:a7:a7:fe:96:8a:06:16:81:1d:f5:
0b:1e:17:10:38:8a:8f:84:6d:0c:58:f1:e8:0f:c7:22:20:fb:
7a:fc:17:75:e8:ed:0c:76:83:3c:8c:79:1d:55:97:8a:f3:06:
89:6f:a1:1c:91:a6:04:8e:77:c2:28:7e:b1:cc:79:08:d5:b3:
69:b1:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org