Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/qL3xHCuVccw4Z4I0G-N8Sf1rnpg.roa
File: qL3xHCuVccw4Z4I0G-N8Sf1rnpg.roa (raw, json)
Hash identifier: 0sLxS+L33WmScP8vIARmu3wiGIf38Fq4Jl+M1aRbBr4=
Subject key identifier: A8:BD:F1:1C:2B:95:71:CC:38:67:82:34:1B:E3:7C:49:FD:6B:9E:98
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16CC1531
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/qL3xHCuVccw4Z4I0G-N8Sf1rnpg.roa
Signing time: Sat 01 Jan 2022 02:51:20 +0000
ROA not before: Sat 01 Jan 2022 02:51:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57011
IP address blocks: 188.93.108.0/23 maxlen: 23
188.93.110.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382473521 (0x16cc1531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8bdf11c2b9571cc386782341be37c49fd6b9e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:90:37:90:96:df:b4:6a:f9:b6:92:17:eb:
7e:1b:28:83:c8:4b:39:fe:49:ee:dd:8a:c0:c5:e2:
e3:ac:2f:ea:39:73:3a:27:98:50:ab:f4:d8:15:52:
a2:dc:01:71:e3:4b:c2:50:c4:2b:10:f5:04:82:db:
40:50:f8:9d:a3:b9:77:b8:54:2e:4d:1d:16:b1:c4:
5a:0c:fa:98:fd:f2:fd:e1:5c:c9:d5:23:4b:3a:0d:
89:31:19:da:ec:00:c2:f1:f2:f6:e3:a9:3c:7f:b9:
11:cf:7b:b3:6c:82:57:26:9d:7e:bc:2d:6d:b9:39:
6f:b0:6e:ea:f9:e0:f4:b0:aa:cd:8b:e4:a5:1d:fa:
80:78:80:be:98:51:cc:fb:8a:00:a0:ff:d7:13:e1:
cb:b2:90:c8:96:f4:2b:59:86:10:10:fa:a1:b2:f3:
59:12:1c:85:5b:d8:fa:d7:ab:71:42:94:71:b3:36:
96:0a:19:25:e2:8d:67:2e:d0:a3:9b:63:9f:42:c8:
1d:d4:64:99:1b:c5:07:00:32:d5:67:d5:95:37:8b:
70:12:de:e9:8c:4d:ff:31:02:93:92:8b:d1:51:1b:
cc:16:dd:45:fd:3a:f5:ed:01:d8:51:a3:7e:ee:96:
3f:19:ed:d4:28:b4:27:bf:0c:74:52:32:43:80:ab:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BD:F1:1C:2B:95:71:CC:38:67:82:34:1B:E3:7C:49:FD:6B:9E:98
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/qL3xHCuVccw4Z4I0G-N8Sf1rnpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:98:6d:84:34:71:57:80:19:0a:39:1f:3b:8c:9a:93:58:4e:
b1:15:28:32:f0:1e:6b:d1:85:9c:ad:2f:52:b2:69:b3:4d:ce:
fc:4b:c0:ab:55:a7:11:a6:41:b0:4c:d4:11:73:6c:6e:b0:6d:
51:77:06:fd:3b:ce:04:95:c9:91:1e:d5:29:80:4c:a5:b8:57:
6f:e9:29:ae:db:4e:19:e6:d6:19:6b:1a:0a:cb:7d:23:8e:df:
23:0f:de:b6:b8:e7:f2:d1:55:ea:1e:19:95:ad:13:ad:ce:cf:
40:a0:0f:c6:9c:f4:6b:01:de:22:f8:ba:c3:04:0a:86:53:39:
a9:12:d5:0d:40:69:9b:45:da:15:f0:5d:0c:42:cd:aa:80:d4:
6f:e9:89:36:33:e4:9b:63:03:f5:da:d7:95:cc:dd:da:b2:0d:
f1:de:f9:7d:36:42:c9:8d:7f:ff:0f:95:22:3c:5a:ae:cc:51:
7d:a9:b4:58:8b:72:72:d4:82:b2:8c:1c:12:1c:87:73:44:40:
e3:09:77:04:ac:62:54:12:61:ab:67:7c:19:45:63:62:8d:49:
b0:d2:19:e3:a0:a6:3d:0b:f8:97:55:11:4f:b4:29:99:3d:42:
b2:b6:e0:61:6f:e2:31:5c:bb:49:a4:72:08:8e:24:d9:26:de:
db:42:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org