Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/qXJGoE0Q4VI6_CUvhL1gd5T5OcE.roa
File: qXJGoE0Q4VI6_CUvhL1gd5T5OcE.roa (raw, json)
Hash identifier: hr9AU0JFF1UU8dLqGrmCsF/uL8iRpM/7Ll6Ot+F13cI=
Subject key identifier: A9:72:46:A0:4D:10:E1:52:3A:FC:25:2F:84:BD:60:77:94:F9:39:C1
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 0665BD58
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/qXJGoE0Q4VI6_CUvhL1gd5T5OcE.roa
Signing time: Tue 12 Apr 2022 12:02:12 +0000
ROA not before: Tue 12 Apr 2022 12:02:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 84.22.148.0/23 maxlen: 23
84.22.150.0/24 maxlen: 24
91.232.8.0/22 maxlen: 24
91.204.183.0/24 maxlen: 24
91.204.182.0/24 maxlen: 24
91.218.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107330904 (0x665bd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Apr 12 12:02:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a97246a04d10e1523afc252f84bd607794f939c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:04:7f:db:bc:04:71:ca:2e:4d:5c:85:c3:
1d:32:69:19:5e:5e:37:ec:84:52:09:ee:bd:bb:e8:
f0:c8:93:5d:58:b8:1a:b2:e6:3c:bc:2f:e5:24:4a:
8f:74:b7:1b:6a:55:3b:f7:8f:e2:ac:6e:bc:c2:66:
aa:bb:e8:5b:f7:fe:2f:02:67:2b:c6:7b:8a:d4:ad:
de:3b:14:fe:41:f6:b5:71:ed:21:10:91:c5:39:19:
36:76:1a:e7:42:3b:0d:7f:27:38:02:52:75:73:09:
c6:7d:c9:40:37:c1:eb:73:3b:bd:ff:94:11:f3:0e:
b9:0a:c0:21:41:32:56:57:33:b4:93:de:0d:73:e2:
7b:cf:b1:06:60:8a:30:c4:1d:25:f7:d8:45:04:63:
58:d5:8c:b1:fc:50:3e:c2:a3:50:29:b3:54:fd:4f:
0b:d6:d9:43:2f:36:43:99:ff:57:d4:09:45:d4:e8:
f1:e5:b2:a2:58:7d:25:13:2b:cf:d1:87:a8:f3:a6:
38:08:88:88:94:87:b0:80:60:a3:41:b3:af:40:85:
50:48:53:bd:01:6b:b6:c4:77:92:0a:8f:29:0b:89:
e9:49:ab:b6:70:86:5a:ff:f0:28:ba:ca:f6:83:2b:
3d:77:39:b3:69:66:21:bc:a3:4a:dc:fb:70:d5:da:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:46:A0:4D:10:E1:52:3A:FC:25:2F:84:BD:60:77:94:F9:39:C1
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/qXJGoE0Q4VI6_CUvhL1gd5T5OcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.148.0-84.22.150.255
91.204.182.0/23
91.218.176.0/22
91.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:71:bf:1b:6e:3e:8b:3e:62:99:9f:a6:05:63:27:9d:f2:c6:
8d:d2:f7:83:fc:5c:36:5e:b4:a9:1e:4d:4a:d5:fe:9a:ae:dd:
1e:ec:60:de:5b:43:83:0f:25:2e:a2:54:a5:87:f8:ab:0e:09:
98:63:73:17:5f:5b:ef:90:1c:c1:94:a0:a1:30:cf:b9:e5:6a:
fe:a6:c1:ba:03:75:c8:c5:6c:86:ab:d2:21:b1:f4:78:b2:af:
cf:c4:6d:55:c9:1e:ac:42:e8:5d:3b:0c:a9:da:ad:c3:f2:1b:
17:8e:75:c3:06:36:ff:dc:ad:c6:25:90:87:c0:d8:60:1e:79:
c3:2a:87:20:33:d9:81:d6:3d:0e:a4:b7:95:0b:76:16:8c:4c:
d5:9a:23:97:85:8c:07:ac:7e:f0:c4:ca:77:00:bb:bc:af:28:
34:40:73:1f:2d:d5:09:3e:df:6e:0b:3f:a5:44:da:2e:1d:ec:
70:a4:3e:69:6e:ab:f0:b7:91:86:c3:2e:f2:74:ed:78:c7:cb:
ec:33:4a:a8:f9:7e:38:04:f9:d7:5a:78:49:63:9d:dc:a1:77:
1a:cb:61:f4:51:d8:01:47:0e:ad:c4:46:47:eb:9e:76:10:5b:
a4:79:81:08:ef:e7:50:3f:f9:30:d6:62:25:00:ed:20:79:78:
45:21:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:47 2023 by rpki-client on console-fra.rpki-client.org