Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/q1_nJyYERWWuDrdqQk3UeoFZVDA.roa
File: q1_nJyYERWWuDrdqQk3UeoFZVDA.roa (raw, json)
Hash identifier: GTVwvNYpERBNAUMavplFQ43+TraxNjkDOOAktevOrZw=
Subject key identifier: AB:5F:E7:27:26:04:45:65:AE:0E:B7:6A:42:4D:D4:7A:81:59:54:30
Certificate issuer: /CN=73ebf12b57c7cc6b9bbbd161ed31be1649c4ac1c
Certificate serial: 094A0E8F
Authority key identifier: 73:EB:F1:2B:57:C7:CC:6B:9B:BB:D1:61:ED:31:BE:16:49:C4:AC:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-vxK1fHzGubu9Fh7TG-FknErBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/q1_nJyYERWWuDrdqQk3UeoFZVDA.roa
Signing time: Sat 01 Jan 2022 15:59:14 +0000
ROA not before: Sat 01 Jan 2022 15:59:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24904
IP address blocks: 194.147.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155848335 (0x94a0e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ebf12b57c7cc6b9bbbd161ed31be1649c4ac1c
Validity
Not Before: Jan 1 15:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab5fe72726044565ae0eb76a424dd47a81595430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:91:53:29:63:36:0b:b6:0b:d2:3b:d2:b3:
59:8b:0b:c0:3e:c9:8b:77:ae:9b:df:35:03:8e:b6:
b4:3d:fd:0c:fc:c2:5e:e7:59:fe:00:ff:d0:04:15:
03:cd:d3:75:f1:34:56:4d:30:d8:b0:54:70:de:0b:
33:5f:79:4c:8f:a3:2c:b6:b4:65:5f:7d:ed:f8:f3:
93:7c:35:3e:70:3e:75:28:37:08:36:45:83:40:48:
31:55:d0:86:28:04:83:80:7e:f5:21:1f:8d:90:bb:
11:87:6c:07:4f:fc:81:95:4d:37:d4:43:9a:88:80:
27:91:17:a8:20:3b:06:89:65:18:fd:8e:44:55:56:
60:c5:09:47:4b:2d:f3:52:f5:6b:11:20:03:86:7a:
d5:c9:5f:21:f1:ff:cf:e3:65:d3:f6:13:f6:71:c7:
91:c5:7e:74:7f:99:ab:34:82:46:7e:91:2a:c1:a8:
83:c6:f4:a8:82:ee:f5:39:63:8e:53:50:73:bf:2f:
d8:69:05:7a:b8:21:1c:0d:ce:78:bc:5f:2e:46:07:
db:81:1b:c2:f2:cb:13:2f:bb:eb:e1:c3:d3:10:81:
37:6b:c6:99:5d:8e:53:0d:d9:9c:e9:d2:2c:04:fd:
d2:2a:f2:18:19:48:a0:9e:ef:3f:b8:03:a5:e0:79:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:E7:27:26:04:45:65:AE:0E:B7:6A:42:4D:D4:7A:81:59:54:30
X509v3 Authority Key Identifier:
keyid:73:EB:F1:2B:57:C7:CC:6B:9B:BB:D1:61:ED:31:BE:16:49:C4:AC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-vxK1fHzGubu9Fh7TG-FknErBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/q1_nJyYERWWuDrdqQk3UeoFZVDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/c-vxK1fHzGubu9Fh7TG-FknErBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.0.0/22
Signature Algorithm: sha256WithRSAEncryption
93:48:4b:bf:e0:3d:a5:dd:a2:aa:8c:98:f4:1f:7d:a3:3e:67:
a6:5c:b3:72:cb:dc:22:a5:44:52:ca:a1:38:07:43:a2:44:ac:
07:fe:75:f0:5c:69:ff:bc:db:7a:68:02:9b:45:55:81:62:a8:
c0:6b:80:8f:ee:ff:de:55:a9:06:97:7a:14:f3:dd:ed:98:78:
f6:61:b9:e7:39:ce:41:35:2d:dc:a0:b6:41:27:53:09:d3:f6:
0b:b7:0b:a2:29:34:8b:6e:fa:b2:2e:2d:71:98:0e:40:33:8a:
3e:c9:83:61:08:d8:ad:4d:bb:65:32:2a:67:6f:be:a0:e4:a7:
bd:2f:0b:c6:3b:cc:64:e9:56:d0:a6:2f:cc:f7:5f:a6:61:a6:
d4:f9:50:b4:81:a4:70:1a:c0:16:16:58:11:ed:fa:43:39:73:
d8:2d:8f:7c:88:5f:b7:28:f6:2a:e4:5f:85:c0:71:5c:6e:0c:
b2:9d:7f:b1:4b:85:8f:8d:fd:81:47:3c:1a:5e:64:d6:da:6e:
97:03:cf:2e:96:d2:1c:3d:c0:9e:5d:0c:f0:3d:64:19:bd:9c:
9e:8a:7c:47:2e:b8:48:8f:21:1a:ad:dd:19:71:21:1f:41:d8:
37:4c:92:86:04:98:db:ca:3b:ef:c6:8b:e4:17:f6:89:b1:0e:
21:f3:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:44 2024 by rpki-client on console-fra.rpki-client.org