Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/qnzoFsO4m-_422s--KdbX7FMw6k.roa
File: qnzoFsO4m-_422s--KdbX7FMw6k.roa (raw, json)
Hash identifier: 7Jy1Y980mqTtT4k0K718QS0xsxwH17RZEjMK2+3Ms1E=
Subject key identifier: AA:7C:E8:16:C3:B8:9B:EF:F8:DB:6B:3E:F8:A7:5B:5F:B1:4C:C3:A9
Certificate issuer: /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial: 0184BD9E80CC00C22AD822866E5EEA5979A8
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/qnzoFsO4m-_422s--KdbX7FMw6k.roa
Signing time: Mon 28 Nov 2022 09:43:12 +0000
ROA not before: Mon 28 Nov 2022 09:43:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3215
IP address blocks: 185.81.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:9e:80:cc:00:c2:2a:d8:22:86:6e:5e:ea:59:79:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Validity
Not Before: Nov 28 09:43:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa7ce816c3b89beff8db6b3ef8a75b5fb14cc3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:05:74:c4:d4:c3:33:ab:11:c8:7b:00:4f:
e8:b8:35:38:01:8e:a7:95:06:ac:f3:c8:d9:70:ee:
54:0b:3e:5e:28:75:4e:04:39:7b:39:51:3d:a9:02:
8c:e1:0e:35:27:c1:58:f3:0e:e9:fb:c1:84:da:b4:
97:fe:b4:73:76:54:40:04:15:4a:6a:d2:8e:08:5f:
d5:18:04:e5:e7:c3:3c:88:e7:35:c7:59:33:e1:6e:
e5:4d:68:64:d4:35:aa:55:d6:a7:1b:21:fb:8a:71:
00:a6:f2:1a:09:e1:f3:3f:28:14:4b:0e:8b:de:d8:
eb:9f:a5:18:65:f4:65:c7:e7:c3:c2:a6:6f:15:e4:
40:df:ec:23:87:32:f2:d8:31:e7:f1:89:4c:2a:3b:
31:4c:8a:c0:90:d7:29:36:9e:7f:05:dd:dd:cd:0f:
77:7c:29:5c:fe:5c:14:89:4f:8b:53:a5:3a:2d:b1:
71:08:02:51:65:42:6b:ae:c3:48:6b:84:fc:aa:57:
95:c6:d4:67:e0:7a:26:9a:ad:2a:f5:dc:34:01:00:
b3:4f:a2:e0:fd:8e:d1:47:2e:97:d4:9d:68:40:3b:
9a:09:c5:bb:b0:de:f1:4f:52:ea:8b:5c:16:49:fc:
99:ee:c9:17:97:49:0f:20:33:c3:4e:53:b3:0f:92:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7C:E8:16:C3:B8:9B:EF:F8:DB:6B:3E:F8:A7:5B:5F:B1:4C:C3:A9
X509v3 Authority Key Identifier:
keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/qnzoFsO4m-_422s--KdbX7FMw6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:72:9f:d2:e5:f1:06:e5:31:be:aa:0d:da:2b:41:70:f4:b5:
86:0f:17:70:c2:13:62:82:83:f7:bb:6a:bb:9f:a2:d1:a8:bc:
e3:aa:96:be:36:5e:18:8d:e7:ef:b5:f2:51:50:99:2a:94:b1:
52:cd:1b:03:ff:c7:aa:f4:bf:25:fd:b8:f2:18:6d:eb:74:19:
44:06:8d:56:a3:d7:7e:37:d9:c8:0d:36:e5:82:d0:5b:51:8f:
bd:18:cb:7b:1a:0d:21:54:76:33:a4:4c:8a:0e:3a:e3:26:39:
4b:3a:fa:35:82:eb:cc:aa:2b:71:69:bd:a7:d4:fd:92:7b:72:
62:06:fa:fd:9d:ce:72:43:93:a7:11:5c:60:a9:dc:f3:c6:d6:
60:6e:1d:fb:10:92:ba:7d:e5:13:2e:53:dc:24:c9:92:64:89:
5d:b1:2f:24:4d:6f:35:20:df:30:61:28:86:63:00:90:c7:e2:
32:6b:6e:fd:47:95:97:72:2d:8c:72:74:0f:2e:cb:66:60:af:
f8:7c:b4:f2:56:a6:40:79:74:16:d8:cb:8e:72:2e:f4:1a:4c:
e4:f7:71:3c:0b:1e:e3:72:57:ff:18:68:46:50:09:0c:ea:53:
29:13:fe:6d:d0:3d:5b:8c:39:8a:c1:b5:5c:4c:2a:86:95:82:
97:ee:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:56 2023 by rpki-client on console-fra.rpki-client.org