Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/QZz6-HyslkDWue9LjqL_oLNi5zw.roa
File: QZz6-HyslkDWue9LjqL_oLNi5zw.roa (raw, json)
Hash identifier: vWWusJp8JbAVMLUAcKHYyItw9nKZ79j4A5ozOrrDQv0=
Subject key identifier: 41:9C:FA:F8:7C:AC:96:40:D6:B9:EF:4B:8E:A2:FF:A0:B3:62:E7:3C
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 431A8364
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/QZz6-HyslkDWue9LjqL_oLNi5zw.roa
Signing time: Sat 01 Jan 2022 05:05:27 +0000
ROA not before: Sat 01 Jan 2022 05:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 192.58.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125811044 (0x431a8364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 05:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=419cfaf87cac9640d6b9ef4b8ea2ffa0b362e73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c4:54:64:a1:88:79:49:3a:2e:86:2a:ab:a0:
d9:3d:c6:df:b1:00:20:df:69:3b:1c:63:db:90:f6:
bf:68:cd:9e:56:82:d9:19:d9:48:f0:82:ba:80:3b:
9a:f3:6c:6a:4f:77:25:db:58:ab:a9:78:82:94:82:
c1:d9:d5:2e:75:89:fa:48:67:bc:7d:8b:44:2e:d4:
20:34:91:f4:38:af:b8:61:e8:a7:36:0a:c9:71:68:
fb:fd:e8:30:5d:31:3a:86:17:36:68:62:94:24:cc:
fc:7e:a2:d2:1d:05:1c:5e:c2:81:35:52:d4:29:61:
16:69:86:34:fd:b5:41:04:d1:6f:44:00:49:a1:1b:
48:fb:0c:70:6e:67:27:be:03:71:4a:2b:a4:55:c5:
c0:81:9c:7c:d9:ed:95:22:eb:b3:6d:bd:c3:d3:b9:
4e:9a:68:89:df:93:1d:88:97:b2:4e:ea:e4:c3:a1:
3d:4e:5f:d0:73:08:3d:d2:f8:86:b0:5d:8f:e9:e8:
ea:d6:36:89:35:78:3e:8b:b0:9a:ec:16:90:18:b8:
7a:bb:31:7c:9a:4e:1a:59:b6:d8:9a:06:c4:79:75:
b4:17:b5:49:d7:fb:ea:cc:6f:03:55:f5:6e:a2:a8:
58:01:1b:8e:19:36:2d:88:9e:db:03:7b:d3:b8:90:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:FA:F8:7C:AC:96:40:D6:B9:EF:4B:8E:A2:FF:A0:B3:62:E7:3C
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/QZz6-HyslkDWue9LjqL_oLNi5zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:ed:85:84:63:72:36:4f:e6:38:07:a2:38:50:bd:41:eb:35:
d3:e3:e2:26:7d:ba:2d:73:d4:25:fe:2d:91:a9:d9:76:d6:82:
cc:df:39:42:96:3d:3f:f2:a2:7c:ee:5e:5a:96:6b:9d:6f:3c:
54:08:47:54:7e:a2:39:05:80:27:d9:94:2f:14:3f:a5:97:da:
ca:d6:56:c6:e1:2a:8d:88:03:11:06:2b:08:fe:cb:fc:5f:44:
39:28:f2:9a:7e:14:5b:cf:d7:0f:50:d5:25:88:26:e3:26:57:
29:56:a7:31:29:bc:f8:8b:51:3d:23:85:31:ad:e9:dd:29:76:
6f:b4:f7:f0:50:f3:d0:f3:ce:d3:6b:55:aa:48:8e:cf:9c:ef:
bc:d7:18:f4:fa:58:8c:45:37:fa:4a:d2:fe:ac:4d:a2:bf:a2:
de:6f:c0:5f:02:15:f1:73:14:29:c6:7d:fd:10:93:29:7a:7f:
51:f6:db:09:23:d8:3e:f1:45:4c:c1:5c:56:a3:63:03:b8:5c:
7e:60:cb:7e:1b:43:41:3d:95:93:70:d0:4c:c9:18:6c:d7:ab:
b3:c9:8f:81:18:8e:63:df:43:9d:8d:01:d8:ba:9e:a9:67:b0:
b6:85:9d:2a:b3:71:aa:85:d0:02:11:bb:5d:d3:46:31:13:0f:
f8:c5:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:43 2024 by rpki-client on console-ams.rpki-client.org