Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Q3-FMuTcNDxhvJTRDVIjDUm3HD4.roa
File: Q3-FMuTcNDxhvJTRDVIjDUm3HD4.roa (raw, json)
Hash identifier: qkKchLytcnk1NmhLQG3aD4JGU1PpxT7z9PGxTLczkgE=
Subject key identifier: 43:7F:85:32:E4:DC:34:3C:61:BC:94:D1:0D:52:23:0D:49:B7:1C:3E
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 072B55E5
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Q3-FMuTcNDxhvJTRDVIjDUm3HD4.roa
Signing time: Sat 01 Jan 2022 10:05:08 +0000
ROA not before: Sat 01 Jan 2022 10:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12637
IP address blocks: 185.77.84.0/22 maxlen: 24
185.205.40.0/22 maxlen: 24
149.3.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120280549 (0x72b55e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Jan 1 10:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=437f8532e4dc343c61bc94d10d52230d49b71c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:01:d4:b5:ce:08:7c:8e:39:c5:6a:9b:4d:
ba:2a:9f:c9:85:a2:c7:70:e3:ed:83:47:51:17:ae:
50:4e:fb:53:6d:87:e7:3c:78:29:31:f2:c8:eb:52:
49:0f:ef:b6:42:ff:01:6a:02:26:16:84:1d:d8:08:
2f:7a:12:28:8e:ad:cc:18:6a:e8:cc:1b:e9:b6:5f:
2c:e7:62:b6:57:fd:e3:3b:bd:4b:64:87:e8:97:7b:
79:67:77:54:93:f7:2f:33:39:a6:66:2f:34:b6:9b:
85:e7:b4:d5:34:31:03:e0:19:b8:05:d7:f4:e4:fe:
19:83:2a:a9:4b:7a:07:85:6b:3f:6d:82:f4:bb:d8:
d2:11:f7:da:24:be:8c:b7:4f:86:7e:d3:7e:34:0d:
2b:a9:dc:63:3d:d4:87:6f:83:c1:c1:db:f3:9c:9d:
95:ef:d4:83:8b:52:30:4e:1f:b2:b3:c2:d0:82:d6:
c0:49:d1:7c:b7:1b:7e:ae:cd:f3:ef:e7:d9:e4:3f:
f1:0e:00:fd:c2:45:6a:40:33:99:c5:f2:72:c5:8c:
e2:82:f1:f7:2e:43:2b:0a:db:a5:ca:87:ae:93:2d:
a5:29:9c:d6:09:88:ed:fc:d5:62:d5:95:57:82:6f:
cf:4b:79:b4:ce:10:27:b6:b6:ef:04:5d:aa:15:a5:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:85:32:E4:DC:34:3C:61:BC:94:D1:0D:52:23:0D:49:B7:1C:3E
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Q3-FMuTcNDxhvJTRDVIjDUm3HD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.144.0/21
185.77.84.0/22
185.205.40.0/22
Signature Algorithm: sha256WithRSAEncryption
17:f5:f7:25:87:71:c5:ae:d8:ff:7b:15:22:69:96:e0:1c:16:
5c:ff:6b:62:95:fd:15:9e:a2:1c:8d:2a:33:85:3c:e9:fe:1c:
7f:12:b2:da:65:f7:3e:b8:49:69:9b:8a:04:51:59:1d:b5:f8:
c3:9e:43:7d:cd:8d:17:d2:15:8d:ca:7a:0c:ea:5f:d6:97:7a:
35:47:77:d1:73:61:90:21:69:8c:89:20:79:6b:d7:06:c0:1e:
14:55:f7:03:78:34:0a:df:c7:e5:22:b5:49:81:46:88:e7:a6:
dd:2d:61:e1:a7:9a:8e:c5:0d:d2:19:5d:0c:d9:70:0b:e3:8e:
c5:57:82:2d:db:8d:f9:e2:13:61:89:dd:03:29:be:34:c4:01:
58:97:54:50:3f:99:55:94:78:1b:f0:be:4b:41:44:5e:75:74:
11:b4:9e:11:a4:41:1a:9e:66:0e:dd:bd:d0:bf:84:cd:2a:60:
ed:ab:7f:d7:02:00:5e:12:bb:99:d9:1b:c8:f1:78:4d:f6:c9:
eb:26:9f:06:31:8f:78:1e:df:e4:3d:b0:1d:bd:8a:cf:03:22:
48:b9:46:a7:9c:08:62:59:8f:bb:50:67:27:7b:b1:e0:75:c5:
d2:24:c2:39:55:55:80:84:5d:17:3f:5d:1f:3f:48:13:fc:81:
29:fb:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:27 2024 by rpki-client on console-fra.rpki-client.org