Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/qmIcIGG5p-xdJdgoPfzoqxmtE0E.roa
File: qmIcIGG5p-xdJdgoPfzoqxmtE0E.roa (raw, json)
Hash identifier: C/4bNIxVKg7ZjUNmJueyyRJfJBUnb3W4RVktrS8bBX0=
Subject key identifier: AA:62:1C:20:61:B9:A7:EC:5D:25:D8:28:3D:FC:E8:AB:19:AD:13:41
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: C8D75F
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/qmIcIGG5p-xdJdgoPfzoqxmtE0E.roa
Signing time: Sat 01 Jan 2022 09:04:27 +0000
ROA not before: Sat 01 Jan 2022 09:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 188.244.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13162335 (0xc8d75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Jan 1 09:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa621c2061b9a7ec5d25d8283dfce8ab19ad1341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:8a:ad:c7:52:df:e1:11:38:21:73:d0:90:
03:84:5c:4c:d2:ab:bc:a9:cb:36:63:8a:19:17:19:
f2:fc:15:ec:f8:8f:36:6e:07:26:5c:56:9d:51:41:
cf:3d:ba:9a:ee:f0:1b:0d:da:b2:ab:fb:12:b8:8d:
76:c9:52:14:2f:cf:3a:50:e6:58:a8:fb:f2:71:42:
2c:64:f0:0d:ac:52:df:75:03:e5:d1:ec:46:82:2c:
fa:eb:40:01:be:d8:bf:9d:66:f5:0f:c2:0d:36:70:
0d:b0:59:b9:fe:3b:17:5b:fc:a7:03:23:18:04:80:
cb:e5:fd:d3:08:4b:d7:08:75:69:df:1f:c5:31:a4:
61:81:f5:a0:7f:95:d9:b7:85:e9:86:37:08:de:3b:
85:0b:15:e0:eb:29:4b:ec:e9:98:27:ba:ea:08:66:
13:d5:73:42:41:94:0e:47:5f:84:28:69:c2:92:90:
f1:f2:30:97:64:cf:1b:66:81:1c:bc:b5:b5:fa:6d:
c9:91:44:d5:f7:aa:39:c1:b6:cd:fb:5a:51:11:0c:
21:13:ff:ec:1c:b7:78:e6:69:d7:09:4a:47:33:92:
9e:45:03:55:c4:03:74:66:b2:5c:62:03:33:4e:fd:
ec:58:8d:57:ef:79:93:37:53:ef:3f:5a:77:bb:c3:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:62:1C:20:61:B9:A7:EC:5D:25:D8:28:3D:FC:E8:AB:19:AD:13:41
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/qmIcIGG5p-xdJdgoPfzoqxmtE0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.120.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f3:4b:b8:b5:3c:8e:6d:c6:67:09:27:67:96:a2:9f:c9:af:
10:d2:b5:5a:e3:c3:73:e8:ce:07:73:e0:16:0d:18:11:cc:66:
e5:52:bc:d0:75:c7:c2:77:f0:4b:ca:65:40:59:58:e5:32:31:
05:bc:2f:ef:f8:d8:06:ea:92:e3:28:54:a3:05:b2:69:bd:ab:
c2:52:85:6d:e1:10:a7:ae:06:07:25:44:65:f0:4b:37:cf:ed:
c2:35:f3:07:cb:25:0c:3f:4a:52:ce:7c:a1:f1:40:cb:87:8e:
6f:59:72:6f:62:e8:5b:0f:22:91:26:49:af:a8:be:c7:52:6f:
44:69:3f:74:32:97:4c:9c:e6:e0:2b:83:57:ec:42:74:59:e1:
a3:1a:c5:ad:24:84:ee:56:ce:d3:d7:90:1b:71:db:8f:44:58:
90:07:41:cb:93:5a:2f:b1:54:eb:69:28:46:b3:2c:af:a8:90:
a2:89:e9:23:8b:14:c6:a4:30:fe:c2:9d:ee:85:f6:e7:3e:ba:
97:6d:4e:fc:40:3a:3b:9b:dd:68:f8:52:01:87:a3:4a:db:7c:
82:34:ae:8f:f9:df:f2:f0:38:89:97:38:48:79:20:df:69:7f:
e8:c1:90:22:63:46:ec:74:b5:b4:1a:0b:bd:4c:73:41:e6:c9:
86:68:41:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:57 2024 by rpki-client on console-fra.rpki-client.org