Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/sqvRoq-Eh8CnetiKzrBuMDhX6M0.roa
File: sqvRoq-Eh8CnetiKzrBuMDhX6M0.roa (raw, json)
Hash identifier: 8PFs1ju9QZdP6MdRj8GgzbZGQ6cIe5HFfETxn2fDQlQ=
Subject key identifier: B2:AB:D1:A2:AF:84:87:C0:A7:7A:D8:8A:CE:B0:6E:30:38:57:E8:CD
Certificate issuer: /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial: 0970A470
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/sqvRoq-Eh8CnetiKzrBuMDhX6M0.roa
Signing time: Sat 01 Jan 2022 14:57:39 +0000
ROA not before: Sat 01 Jan 2022 14:57:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35681
IP address blocks: 185.160.69.0/24 maxlen: 24
185.160.70.0/24 maxlen: 24
185.160.71.0/24 maxlen: 24
185.160.68.0/22 maxlen: 22
185.160.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158377072 (0x970a470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Validity
Not Before: Jan 1 14:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2abd1a2af8487c0a77ad88aceb06e303857e8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:db:da:20:04:af:cc:84:6e:9f:d0:88:74:
77:86:47:9f:41:c0:e1:06:70:d3:f1:9c:f6:f0:f0:
a1:7e:c6:bb:41:33:9c:b0:81:20:ac:53:ba:55:60:
7c:0d:b6:80:6a:03:d7:01:15:c6:87:da:fb:b2:f9:
ad:8e:3b:e6:81:be:00:e8:9e:14:0a:16:03:3c:6e:
18:9d:e2:07:3c:3c:de:8c:fa:c0:6f:b6:15:54:07:
ca:bc:f5:80:01:c9:7a:8d:03:0c:60:9b:3e:03:dc:
24:ff:17:9e:ad:6b:44:a7:84:bd:af:51:eb:43:fb:
31:fc:7f:44:ae:46:f6:54:7e:8b:10:0c:5f:99:77:
bd:5a:78:ac:34:6a:e8:ac:65:63:4c:b8:b5:81:ac:
f5:e9:5b:94:47:80:6c:16:a3:68:98:db:b2:1d:4f:
9a:8c:dd:fc:0e:61:eb:3f:60:c8:0b:92:fd:d9:9b:
55:a9:5d:75:ce:40:70:d1:ad:2a:65:04:27:65:9f:
aa:a4:a8:b3:56:33:4e:4d:87:f1:4b:ee:77:3c:22:
2d:53:0f:5d:11:3e:c7:0e:e5:ff:dd:c0:bb:92:f8:
0d:5d:3b:82:2c:a9:8c:df:f6:c0:2f:e2:da:e4:6a:
ff:5d:5c:13:88:5f:8d:55:2d:14:f4:3c:4b:5a:7e:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AB:D1:A2:AF:84:87:C0:A7:7A:D8:8A:CE:B0:6E:30:38:57:E8:CD
X509v3 Authority Key Identifier:
keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/sqvRoq-Eh8CnetiKzrBuMDhX6M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:2f:52:5d:cd:ab:f7:c9:dd:e1:9b:46:9b:d3:89:55:a4:7e:
19:58:22:d8:f6:25:cf:0d:3c:81:ac:43:3d:83:d0:b2:36:85:
25:f9:89:cf:36:8a:2a:0a:ef:55:d5:bc:ed:ee:1a:4d:8d:29:
54:dc:e7:64:7f:78:70:27:61:ae:d8:f6:f0:8c:83:0d:ad:76:
26:59:e6:a5:6d:66:5b:d7:69:93:cc:cb:e7:b8:9c:a4:0e:51:
af:f1:c3:94:6b:46:c0:05:73:97:49:46:08:1f:4a:8e:a6:e2:
53:8f:d0:4d:b0:d6:84:dd:90:cd:34:d8:69:dc:c2:a6:26:a3:
05:2e:b2:5e:0f:82:b6:55:91:2d:f0:cf:4c:12:93:ad:85:cf:
85:17:f3:d4:ec:49:37:75:51:8e:4f:cb:35:3d:1f:88:d6:6d:
c3:6d:b4:49:e4:53:7f:bf:13:73:ae:d2:6c:0f:5e:f8:ab:4b:
70:99:1c:00:3a:af:28:71:8e:9b:82:d2:c1:7a:56:bc:ed:bc:
d2:0c:3a:d1:13:de:47:26:34:dc:78:05:7f:bb:e0:63:07:45:
1e:e4:98:d4:10:fc:dd:91:89:ab:0f:0f:72:73:c1:da:d9:c1:
30:1d:99:85:5f:6e:08:29:35:2a:4f:b8:0f:7d:e0:ab:ba:3f:
68:02:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-ams.rpki-client.org