Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/KQTp2EtZ51pB8GPhulquDBgakSg.roa
File: KQTp2EtZ51pB8GPhulquDBgakSg.roa (raw, json)
Hash identifier: CVnTuUK6yNZy8vT9J0P7t6DeNZJYQXhgZoMKLZ2aSOc=
Subject key identifier: 29:04:E9:D8:4B:59:E7:5A:41:F0:63:E1:BA:5A:AE:0C:18:1A:91:28
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01F20815
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/KQTp2EtZ51pB8GPhulquDBgakSg.roa
Signing time: Sat 01 Jan 2022 15:06:17 +0000
ROA not before: Sat 01 Jan 2022 15:06:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23422
IP address blocks: 185.127.95.0/24 maxlen: 24
176.111.220.0/24 maxlen: 24
193.8.195.0/24 maxlen: 24
147.189.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32638997 (0x1f20815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 15:06:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2904e9d84b59e75a41f063e1ba5aae0c181a9128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:64:a0:4e:24:01:b1:56:1d:f9:b6:e7:ee:
19:bf:dc:6b:d0:ad:12:66:a1:89:96:3d:9f:5a:3a:
32:71:3d:0f:74:dd:12:0c:1d:f8:88:3c:ee:1f:7e:
39:ea:7b:e8:e3:b3:a2:5c:58:d7:e5:10:5f:ad:9f:
f2:4f:f5:f4:e1:90:75:eb:13:73:e8:19:20:6c:ef:
80:5c:20:60:82:44:bf:94:ca:2f:58:50:6d:74:25:
d4:4f:c3:aa:7c:16:35:ff:c9:53:ed:ce:49:c7:c8:
ea:ff:39:02:a5:6d:09:f0:c4:5c:ba:e2:4b:02:1e:
31:7b:bb:83:f4:58:4b:46:3b:30:d3:a6:5b:44:d1:
ff:6c:8c:c9:ef:87:cf:f0:19:67:a6:f3:b4:97:fe:
6a:f0:c2:c0:19:e6:bd:f9:2b:eb:5e:3e:de:55:ff:
81:45:43:5e:00:e7:d5:97:fd:cf:02:93:40:02:8b:
5d:27:a5:3b:f3:f6:84:46:a5:26:5d:d7:64:0e:52:
78:58:d1:9d:0f:6e:69:9b:90:00:dc:21:80:97:2c:
e2:9b:26:d3:e4:c9:87:86:b8:1a:6a:4a:5c:e1:9e:
12:2e:4e:eb:1a:fb:70:98:b7:be:2d:d8:84:02:a9:
77:48:90:36:62:04:cd:b5:a4:8e:96:1d:10:52:ec:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:04:E9:D8:4B:59:E7:5A:41:F0:63:E1:BA:5A:AE:0C:18:1A:91:28
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/KQTp2EtZ51pB8GPhulquDBgakSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.143.0/24
176.111.220.0/24
185.127.95.0/24
193.8.195.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a8:60:1a:85:e0:12:da:88:1a:77:62:8f:b9:36:d2:17:68:
76:57:0d:c9:fd:ac:36:5c:f0:c8:8d:2a:be:c5:e4:9b:aa:f8:
ff:d1:c7:e0:60:b5:80:9b:9c:31:70:a9:50:bb:c3:3c:b8:59:
90:00:e2:9e:76:72:c6:25:6b:16:61:3d:24:44:04:5e:69:c4:
e7:01:08:40:7f:fb:61:ff:f7:e7:a8:a8:c3:82:ce:98:7c:e2:
d5:97:db:07:d7:40:c7:14:c0:8d:85:36:12:c5:e6:35:dc:60:
bd:de:88:e7:e1:25:f1:41:94:27:e9:5d:4e:9d:c7:97:ca:25:
53:44:fc:6d:47:a9:2c:14:21:20:82:61:53:50:99:23:08:53:
0f:c2:b3:90:35:39:eb:65:93:3e:70:d5:57:b0:c3:3b:7b:5b:
74:bd:91:d2:21:4f:ed:18:e0:2b:12:56:ea:f0:45:99:59:4a:
43:28:c8:d6:b9:ef:42:06:bc:82:95:e4:65:a6:fc:ae:60:5a:
0b:0e:b7:27:c8:37:2c:5c:10:cf:e3:fa:6f:a1:c8:fb:03:29:
e8:d0:76:2d:a6:40:0b:44:2f:b8:51:fd:df:05:a2:22:e1:6d:
71:05:cf:5b:0e:ff:40:30:1e:9b:a4:91:94:fa:74:34:d8:fa:
0c:1e:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:08 2024 by rpki-client on console-ams.rpki-client.org