Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/qrxrbEKa3YM0W1mMAZm12cCYbE0.roa
File: qrxrbEKa3YM0W1mMAZm12cCYbE0.roa (raw, json)
Hash identifier: QzfkmSGS71FqCRi+V7cwQ8V2PSnGltm6YQjXbn1kriQ=
Subject key identifier: AA:BC:6B:6C:42:9A:DD:83:34:5B:59:8C:01:99:B5:D9:C0:98:6C:4D
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 137456DC
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/qrxrbEKa3YM0W1mMAZm12cCYbE0.roa
Signing time: Sat 01 Jan 2022 05:58:30 +0000
ROA not before: Sat 01 Jan 2022 05:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209637
IP address blocks: 195.74.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326391516 (0x137456dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 05:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aabc6b6c429add83345b598c0199b5d9c0986c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:0a:03:02:43:84:9e:17:71:64:0b:82:e8:
3e:59:9f:18:28:99:3b:60:76:1f:51:61:1b:0d:15:
4d:c5:60:8e:36:3d:c5:64:21:84:8e:8c:16:dd:35:
e3:61:46:fa:39:3b:3d:53:6d:17:73:2a:7d:cc:ca:
09:f3:75:06:91:2d:0d:c9:82:54:de:6b:59:fd:92:
bd:6f:3d:a4:57:3a:4e:46:17:33:e7:df:e4:0c:8e:
90:d8:6b:48:da:a7:c7:7b:21:c8:7c:23:6c:38:57:
38:29:c3:cc:5e:17:96:03:aa:31:80:c3:d9:1c:e7:
c9:be:d4:eb:b8:97:89:5a:5d:ed:30:b1:1f:3e:7f:
d9:a5:ed:39:c5:0a:1d:1f:14:f8:3f:89:4f:5f:6c:
16:d1:6b:50:a9:e0:97:33:30:22:5a:96:7a:32:11:
07:24:b7:ed:59:71:a0:f4:da:80:c2:c0:c4:79:f5:
de:61:7d:34:1e:51:4a:ca:e5:6a:ae:d4:24:60:12:
74:b6:be:ba:61:fc:22:82:02:8c:eb:df:56:f3:5c:
b7:a1:f2:cb:61:ae:da:be:77:a6:a8:08:3c:31:27:
69:dc:5c:c4:37:6b:28:15:f2:45:6f:17:57:0c:10:
b6:5c:1b:35:1d:60:04:5c:bb:d4:a5:02:08:a2:94:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BC:6B:6C:42:9A:DD:83:34:5B:59:8C:01:99:B5:D9:C0:98:6C:4D
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/qrxrbEKa3YM0W1mMAZm12cCYbE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.74.65.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2c:b1:ee:42:2a:cc:62:a5:61:e3:22:8e:27:e4:28:6f:95:
e9:1e:fd:a7:ba:57:b7:0b:e8:6a:bf:e6:d2:dd:d1:04:66:dc:
4e:5f:2a:21:ef:e9:72:e6:9b:9f:fb:f4:e3:74:9e:f3:b8:0c:
64:3f:a0:6e:f0:50:a9:bd:2b:5b:78:85:25:59:7d:b9:7a:1e:
01:35:28:fb:81:b6:cf:f8:33:e0:57:8e:65:cb:50:c5:1c:e9:
e4:71:5f:d0:74:a7:bf:c0:4e:b3:af:a3:b1:33:dc:71:49:31:
a6:7d:95:8f:cb:b7:1d:71:78:e9:82:4e:90:b1:d4:aa:7b:2f:
d4:ea:56:e6:51:e9:e8:8c:c3:47:dd:8d:c0:25:cb:25:6d:11:
0e:b6:86:71:bf:2c:52:7f:b0:c5:ea:77:a6:f7:25:ae:97:5c:
80:e9:c3:60:ab:93:1b:d7:2b:70:7e:f5:c1:a1:f4:57:54:58:
57:0b:b0:d8:e9:d9:2d:2a:43:99:cb:a6:b6:62:19:d1:d9:94:
cb:e9:cd:41:c8:7d:c8:5d:ec:b4:6e:52:01:62:9f:46:46:75:
61:1a:21:f5:15:b3:c6:c6:79:62:c0:b3:63:33:33:af:df:5c:
5a:36:4d:a0:fb:db:19:90:de:af:05:35:6e:5d:b1:37:aa:81:
dd:28:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org