Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/q1ZhJuqmXY4rUhmjmc7T1amGJhQ.roa
File: q1ZhJuqmXY4rUhmjmc7T1amGJhQ.roa (raw, json)
Hash identifier: fB1qq7cU3xfzYmNyHga8lltcdJBmeu1E63CyE4zbYz8=
Subject key identifier: AB:56:61:26:EA:A6:5D:8E:2B:52:19:A3:99:CE:D3:D5:A9:86:26:14
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 090D168A
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/q1ZhJuqmXY4rUhmjmc7T1amGJhQ.roa
Signing time: Sat 01 Jan 2022 03:51:36 +0000
ROA not before: Sat 01 Jan 2022 03:51:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203244
IP address blocks: 185.246.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151852682 (0x90d168a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Jan 1 03:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab566126eaa65d8e2b5219a399ced3d5a9862614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:bb:f7:7f:42:46:45:2c:8f:b8:c0:b7:51:
bd:40:72:17:d8:61:35:97:f8:77:6c:de:34:c7:9a:
fc:e6:d6:35:76:a1:d3:e8:79:5c:d2:6d:e0:95:95:
a7:d0:37:ab:bb:f2:a9:3a:9b:b1:cb:cf:fa:67:3b:
2e:a1:fd:d2:f8:75:b4:17:e4:e0:ca:87:78:ab:36:
25:2c:2f:3e:7b:d2:01:94:8e:18:cf:56:d9:f0:c9:
52:48:9b:57:68:f1:d8:1d:c9:1d:8b:57:5e:47:7d:
59:20:16:d5:89:13:c7:00:8b:8b:9a:31:eb:75:e5:
85:42:d2:ad:0b:6f:55:de:e6:b7:db:3e:6d:8a:d9:
fe:64:ad:be:fd:ed:4c:f7:99:3c:dd:d0:25:f1:de:
47:25:11:dd:2d:5d:da:bf:d3:25:e5:8a:f4:fd:99:
f9:40:e2:d0:dc:e2:5d:a6:39:57:ab:ec:eb:46:15:
bd:1d:0f:39:a5:a0:1f:d4:e1:d7:54:74:7d:29:94:
08:ad:42:2a:ee:02:27:2f:ce:6f:13:bf:bd:6e:37:
3d:34:f0:0e:57:ab:5e:27:17:b1:d8:cd:d2:30:30:
32:29:50:20:4f:09:35:01:0c:23:81:87:44:3d:a0:
0a:ae:e5:c4:cf:9b:04:3b:e4:6f:8b:9e:2b:68:43:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:61:26:EA:A6:5D:8E:2B:52:19:A3:99:CE:D3:D5:A9:86:26:14
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/q1ZhJuqmXY4rUhmjmc7T1amGJhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.196.0/22
Signature Algorithm: sha256WithRSAEncryption
18:97:46:f9:30:8d:61:70:24:40:8a:fa:22:95:c8:ae:ad:72:
99:20:fd:f2:ac:9a:c4:5a:ca:e2:f2:93:2d:de:87:9c:32:7f:
5e:e0:72:db:18:b9:c5:d9:d6:0a:8a:6a:a8:9f:64:71:c1:82:
49:67:30:19:c6:b7:6b:0d:03:2a:54:e0:de:40:26:a9:f6:b6:
79:9d:fc:ad:da:71:c5:ee:52:65:b4:02:9b:a1:a6:04:c6:91:
5e:c9:16:ca:49:2f:e8:0b:99:39:68:fd:4a:64:f4:5c:20:72:
e4:84:be:f3:49:18:d1:73:0d:6d:aa:87:0f:f8:9b:81:b2:d1:
e9:4d:a5:f5:ac:3d:7c:f3:10:25:83:b4:ee:28:2c:c6:11:3b:
fd:f3:4e:2b:66:8e:57:63:a7:f7:c9:d0:1d:85:40:e4:82:a2:
93:8b:e5:b7:2a:67:71:0e:e8:5b:59:0d:f1:7a:1a:60:fb:65:
60:4c:16:da:7d:19:cd:50:61:65:2e:80:3f:c2:b6:37:c8:2d:
59:b7:95:4c:6d:14:8e:ae:0b:18:c4:97:45:d0:4e:6b:13:d8:
7c:38:d3:10:17:82:58:da:18:aa:f1:ba:bb:96:be:33:13:a1:
7b:09:b9:49:57:1d:c2:04:b0:c5:99:a7:3a:1f:c7:b6:30:e1:
e9:94:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:59 2023 by rpki-client on console-fra.rpki-client.org