Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/QFizhbIlP5euVpWiMCt71S6P9Cc.roa
File: QFizhbIlP5euVpWiMCt71S6P9Cc.roa (raw, json)
Hash identifier: W6hfBOapUVvptoRXp7ktBusJQssz1Vv3FkYEHkbJrUU=
Subject key identifier: 40:58:B3:85:B2:25:3F:97:AE:56:95:A2:30:2B:7B:D5:2E:8F:F4:27
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 0941941A
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/QFizhbIlP5euVpWiMCt71S6P9Cc.roa
Signing time: Sat 01 Jan 2022 01:53:09 +0000
ROA not before: Sat 01 Jan 2022 01:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209490
IP address blocks: 171.22.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155292698 (0x941941a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Jan 1 01:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4058b385b2253f97ae5695a2302b7bd52e8ff427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:43:c8:c6:9a:83:99:66:57:e1:1b:db:a1:
aa:70:f7:7f:43:51:9e:6d:07:84:ce:bb:82:71:ab:
43:56:d1:2e:18:b5:19:6c:80:c6:e9:66:a8:ce:fa:
f2:d8:c6:e5:af:8d:07:73:1f:55:f2:f3:5f:99:c3:
d4:27:58:1b:ef:c3:66:94:eb:34:b1:b2:90:3e:5e:
1c:ca:ea:ed:92:4a:e5:3a:87:3c:da:39:24:68:90:
f5:8f:e1:64:2f:0d:aa:c6:02:e6:4d:3f:0b:76:de:
1e:90:a2:9b:e7:b9:f5:12:69:81:8e:5a:26:43:f7:
1a:f6:4c:6d:9d:cb:ab:51:4f:e6:1c:0d:1d:be:08:
c4:04:61:9d:e3:75:44:10:de:0f:e8:02:10:92:f7:
5f:49:7b:dd:6b:10:a9:b6:6d:f4:59:f1:74:ec:31:
60:14:0a:d7:10:b1:9f:b5:bb:37:27:82:d5:4e:99:
01:f2:4f:ef:58:76:25:a9:8f:81:18:cb:36:ac:bb:
5f:45:26:40:a0:b0:4f:4a:8a:4f:ac:75:9f:b2:21:
09:51:2b:37:c8:a7:4b:64:ce:a7:02:c8:68:e7:96:
96:39:c4:b6:0e:18:0b:fb:0c:0b:12:69:ae:b2:ec:
23:3e:e0:23:40:ef:ec:2c:2a:1b:cb:5d:e9:a5:3c:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:58:B3:85:B2:25:3F:97:AE:56:95:A2:30:2B:7B:D5:2E:8F:F4:27
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/QFizhbIlP5euVpWiMCt71S6P9Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.56.0/22
Signature Algorithm: sha256WithRSAEncryption
47:0c:ab:56:56:d3:2e:91:1d:7d:4b:60:dd:66:ad:03:b8:d2:
f9:b7:ec:2e:cc:7f:db:03:97:24:97:1e:62:b1:56:7d:78:ef:
5b:93:c3:1d:e1:b5:12:96:6a:eb:80:29:92:5c:23:20:d4:8f:
64:5d:a2:33:3d:96:5f:04:d3:f0:2b:3e:b7:a8:7e:68:8b:8b:
9d:bb:83:c7:5a:50:aa:bf:e1:53:66:61:0d:6c:7f:93:8e:98:
45:12:58:47:97:90:7c:78:aa:85:0d:48:c1:72:05:62:b4:81:
16:3e:e8:0c:f8:16:ff:3e:f7:f0:f8:58:05:ad:9c:a3:ae:ed:
ae:01:7f:5e:31:62:d9:3f:1a:a0:46:e1:20:ff:ce:fe:57:34:
14:8b:af:8b:4f:4d:2e:40:70:88:69:88:6e:ac:3c:33:e7:8a:
0c:2f:34:6a:e4:87:1b:be:01:40:62:58:b3:1e:4b:c1:92:4e:
43:36:2b:97:89:be:df:90:2e:18:45:c3:94:a8:4e:10:a6:29:
e9:79:31:b4:c2:d8:45:6e:99:6c:fd:a5:c9:54:77:28:63:47:
13:68:2d:ab:dd:a2:22:6c:21:00:53:09:02:33:78:a1:4b:67:
f0:38:9f:d0:56:7d:a8:d6:92:ba:8e:65:d2:da:a7:95:be:0c:
5c:08:0c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-fra.rpki-client.org