Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/qnpRZxdqtq1DbfSgsgAeSQ_vONY.roa
File: qnpRZxdqtq1DbfSgsgAeSQ_vONY.roa (raw, json)
Hash identifier: zm2AhKKYBvQkUXpZo+WLt2WbR/PpiOtnoWrY2jmMxhs=
Subject key identifier: AA:7A:51:67:17:6A:B6:AD:43:6D:F4:A0:B2:00:1E:49:0F:EF:38:D6
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 011F79
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/qnpRZxdqtq1DbfSgsgAeSQ_vONY.roa
Signing time: Tue 26 Apr 2022 15:31:02 +0000
ROA not before: Tue 26 Apr 2022 15:31:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15623
IP address blocks: 193.42.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73593 (0x11f79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Apr 26 15:31:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa7a5167176ab6ad436df4a0b2001e490fef38d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:e9:48:69:57:80:aa:9d:e3:7b:b5:85:af:
a5:ec:2e:07:45:b0:c9:1e:8d:b8:6b:62:9a:c2:f1:
d1:8d:ae:78:3f:48:0f:11:45:8d:82:1d:1d:98:b5:
08:c9:66:b8:15:ac:d4:7e:ae:0a:13:56:a7:9c:32:
b5:f6:9e:c3:39:30:a4:ad:1a:61:e4:51:bd:72:73:
30:44:61:72:02:83:d5:f8:3e:58:2d:f8:d9:7a:f2:
6d:bc:05:4f:bb:75:fd:68:7c:5b:ee:07:a8:61:fa:
90:a9:9e:15:1f:e4:29:72:a9:53:b7:4c:d5:2e:9f:
ff:2a:17:74:60:5c:6b:19:3f:3a:7a:4e:67:75:03:
05:78:e5:f5:f1:67:bc:c7:82:04:d2:35:05:16:49:
7a:c6:33:fa:1d:a9:2a:d8:fb:11:eb:3d:83:69:0f:
8e:ae:c3:84:d6:5b:9c:6b:11:8c:fd:4a:4c:6f:40:
b9:54:c8:ac:c5:d2:bb:58:7c:df:b6:05:e9:49:0a:
c9:1f:87:3b:b7:77:cf:7d:dc:7c:d9:4b:39:36:8d:
06:de:92:e1:1e:97:ae:f8:96:0b:9d:0c:07:2f:b6:
40:15:b5:f8:1d:3f:dc:55:76:65:44:cd:cd:9c:44:
c9:ac:d0:33:ac:78:4a:89:0e:c1:37:78:b3:e7:b0:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7A:51:67:17:6A:B6:AD:43:6D:F4:A0:B2:00:1E:49:0F:EF:38:D6
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/qnpRZxdqtq1DbfSgsgAeSQ_vONY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.146.0/24
Signature Algorithm: sha256WithRSAEncryption
88:97:7f:24:9b:d7:82:4f:ec:bd:d0:cb:b1:9b:64:f2:69:57:
10:ae:d7:7e:d4:de:41:1f:37:6d:0f:d5:3a:1d:56:94:a2:9a:
b5:13:44:52:39:16:31:b6:bd:0b:8c:33:66:7a:71:2c:98:55:
1e:15:a7:80:0a:af:d3:92:a2:25:d4:ad:de:6d:ed:8b:b6:4b:
c3:46:3c:d1:62:44:d1:ba:54:3b:6c:78:48:14:9c:bf:19:89:
db:01:45:9a:a9:b0:c0:78:18:e4:c9:f0:a3:29:6a:31:aa:6c:
cd:31:35:a2:5c:8d:e9:a3:4c:b0:34:1e:6d:0b:2e:37:91:4a:
95:e0:49:7b:3b:17:12:05:97:7e:99:04:46:56:36:89:5c:6b:
17:db:3b:8f:6d:72:a9:ec:53:c6:29:da:c4:8a:44:7f:81:5e:
a3:41:95:41:29:d6:30:e5:04:ab:90:cb:20:83:cd:f0:20:f0:
b2:32:1e:8d:22:fe:11:80:82:17:eb:e4:b5:dc:2b:01:5b:09:
f8:cb:f1:d0:22:57:ea:23:0b:51:43:81:a7:bf:75:63:b2:65:
92:64:27:3f:cb:25:26:37:53:ef:ce:9a:c4:e5:77:12:83:c1:
26:1e:0d:99:4c:16:73:1a:60:c8:3a:7b:c3:a5:49:23:16:d2:
fd:18:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:36 2024 by rpki-client on console-fra.rpki-client.org