Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/qqwxvu3BGivvZW0zzhVp6K7MTU4.roa
File: qqwxvu3BGivvZW0zzhVp6K7MTU4.roa (raw, json)
Hash identifier: ByugdG+KtgGN6EX7qTfjZnUTxGCqQZZC1a3hsRIT/5Y=
Subject key identifier: AA:AC:31:BE:ED:C1:1A:2B:EF:65:6D:33:CE:15:69:E8:AE:CC:4D:4E
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01851F649A79B88615027DB39D23A063199D
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/qqwxvu3BGivvZW0zzhVp6K7MTU4.roa
Signing time: Sat 17 Dec 2022 09:22:44 +0000
ROA not before: Sat 17 Dec 2022 09:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 80.246.239.0/24 maxlen: 24
80.246.238.0/24 maxlen: 24
80.246.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:64:9a:79:b8:86:15:02:7d:b3:9d:23:a0:63:19:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Dec 17 09:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aaac31beedc11a2bef656d33ce1569e8aecc4d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:dd:10:c2:ab:67:f0:7c:0d:22:c9:d1:2d:
a9:63:69:8e:a6:80:b5:5a:e3:95:3a:63:1b:e6:f1:
f2:5b:d2:11:20:09:dc:32:34:28:71:7f:52:93:30:
54:57:65:c6:e0:ac:78:42:8a:a1:df:4d:5a:9b:d3:
8f:bf:0d:88:9e:ab:75:13:83:a3:94:d3:50:bc:5d:
0c:08:6f:37:67:d6:a5:d6:6a:72:98:8b:2e:1f:22:
47:a0:0c:ad:3a:87:aa:65:73:47:cd:c7:ef:69:d5:
1b:a4:ea:a5:57:9d:1a:f3:57:26:b7:0b:31:13:e8:
88:c9:9d:1b:d2:e2:5c:18:84:ef:f9:1c:f7:04:ef:
82:d9:c8:cb:7e:c5:48:f5:3b:31:82:89:e7:42:f4:
5a:42:1c:46:5d:e9:53:c1:eb:a0:bc:44:60:e0:e5:
02:4b:11:0a:46:b9:42:cf:fc:8d:a2:b6:57:b8:a6:
7d:8f:67:86:d9:58:ea:d6:17:7f:9d:2c:ec:a4:04:
a0:21:e0:f4:c8:85:b0:95:ef:9c:aa:0c:43:f5:3b:
4c:16:d9:0d:5a:a3:2d:cd:c4:64:ee:eb:08:e9:ff:
8a:40:a2:59:c8:1e:bd:db:cb:6f:a2:b4:97:70:21:
04:d4:4d:ac:bd:7e:c7:fb:e3:c5:00:24:9a:72:e9:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:31:BE:ED:C1:1A:2B:EF:65:6D:33:CE:15:69:E8:AE:CC:4D:4E
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/qqwxvu3BGivvZW0zzhVp6K7MTU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.237.0-80.246.239.255
Signature Algorithm: sha256WithRSAEncryption
60:83:5d:63:0b:83:b4:2f:a5:bc:7d:c1:70:c3:88:f9:6f:e7:
18:6d:68:26:21:6a:33:a6:14:45:19:f8:85:57:aa:75:38:b9:
74:18:a2:9d:c3:2a:e7:1d:2a:e9:71:74:85:69:04:c8:04:a6:
f7:1c:ec:82:fd:a3:ac:51:06:e8:92:01:12:8b:db:c9:72:7d:
53:97:80:21:09:89:6e:74:82:ba:8c:92:e5:0a:bd:06:fe:ea:
c8:80:62:0c:06:0b:4e:4b:c8:f5:67:d1:38:87:33:16:1a:90:
79:e2:a7:b2:a4:01:d6:de:25:eb:c5:86:51:c8:50:a0:09:66:
1f:c0:35:b2:09:01:dd:45:ba:73:b2:bd:7a:b4:b3:95:9f:78:
d8:d7:0b:50:32:63:1b:39:b5:fb:d0:c7:fd:e8:af:67:8f:a1:
90:b0:95:80:ae:c3:5c:e5:1c:29:9b:c5:26:74:2a:c4:c0:2c:
92:b5:c7:26:b1:34:7c:ec:b6:6c:81:be:ac:4e:12:fe:55:39:
36:c0:08:08:20:84:e7:31:28:14:b7:60:d9:b8:e0:09:c1:e4:
55:d6:a6:fa:70:2b:41:81:5c:f2:c7:af:4d:9d:a4:fa:af:1e:
de:23:54:2f:16:26:6b:6e:4d:aa:7d:72:c0:2d:90:42:b3:f6:
86:0d:96:c0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYUfZJp5uIYVAn2znSOgYxmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjIxMjE3MDkyMjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWFjMzFiZWVkYzExYTJiZWY2NTZkMzNjZTE1NjllOGFlY2M0ZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoundEMKrZ/B8DSLJ0S2pY2mOpoC1
WuOVOmMb5vHyW9IRIAncMjQocX9SkzBUV2XG4Kx4Qoqh301am9OPvw2Inqt1E4Oj
lNNQvF0MCG83Z9al1mpymIsuHyJHoAytOoeqZXNHzcfvadUbpOqlV50a81cmtwsx
E+iIyZ0b0uJcGITv+Rz3BO+C2cjLfsVI9TsxgonnQvRaQhxGXelTweugvERg4OUC
SxEKRrlCz/yNorZXuKZ9j2eG2Vjq1hd/nSzspASgIeD0yIWwle+cqgxD9TtMFtkN
WqMtzcRk7usI6f+KQKJZyB6928tvorSXcCEE1E2svX7H++PFACSacukE4wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKqsMb7twRor72VtM84VaeiuzE1OMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvcXF3eHZ1M0JHaXZ2WlcwenpoVnA2SzdNVFU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABQ9u0D
BARQ9uAwDQYJKoZIhvcNAQELBQADggEBAGCDXWMLg7Qvpbx9wXDDiPlv5xhtaCYh
ajOmFEUZ+IVXqnU4uXQYop3DKucdKulxdIVpBMgEpvcc7IL9o6xRBuiSARKL28ly
fVOXgCEJiW50grqMkuUKvQb+6siAYgwGC05LyPVn0TiHMxYakHnip7KkAdbeJevF
hlHIUKAJZh/ANbIJAd1FunOyvXq0s5WfeNjXC1AyYxs5tfvQx/3or2ePoZCwlYCu
w1zlHCmbxSZ0KsTALJK1xyaxNHzstmyBvqxOEv5VOTbACAgghOcxKBS3YNm44AnB
5FXWpvpwK0GBXPLHr02dpPqvHt4jVC8WJmtuTap9csAtkEKz9oYNlsA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org