Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/qqPon8uvu9VlwScdX7o0gEfA_CY.roa
File: qqPon8uvu9VlwScdX7o0gEfA_CY.roa (raw, json)
Hash identifier: d3HBmy6ps3EcRHgEVAsdxg5a/gTSugR/SdqUPtefS/8=
Subject key identifier: AA:A3:E8:9F:CB:AF:BB:D5:65:C1:27:1D:5F:BA:34:80:47:C0:FC:26
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 034FE8CC
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/qqPon8uvu9VlwScdX7o0gEfA_CY.roa
Signing time: Wed 19 Jan 2022 07:20:39 +0000
ROA not before: Wed 19 Jan 2022 07:20:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47777
IP address blocks: 185.154.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55568588 (0x34fe8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Jan 19 07:20:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aaa3e89fcbafbbd565c1271d5fba348047c0fc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:eb:e8:f2:1e:dc:31:55:8a:5e:73:67:ef:
f5:51:29:18:c1:a0:ed:e5:69:e9:cf:b7:dd:00:14:
9f:de:80:ff:d1:6b:99:96:9e:97:94:69:5d:83:26:
7c:3b:79:ee:13:06:bc:84:26:7b:49:4e:47:20:60:
bc:2f:08:e8:75:13:d7:10:b2:30:d7:46:c5:39:e3:
07:2b:55:a5:48:6c:cb:c5:82:2e:a2:c9:63:f7:8a:
b1:f3:4b:35:77:36:69:b8:6d:58:37:e8:04:82:10:
88:c2:84:7d:a5:2e:1e:cd:6d:a5:f1:a1:20:3f:59:
9c:b5:08:e5:2d:d7:77:33:99:d4:88:98:04:7f:ea:
e9:38:25:c6:33:88:29:25:f9:02:ad:d0:a6:f5:5d:
1f:1d:3c:3e:e1:5a:c5:49:13:ae:be:32:d1:97:25:
6b:c3:a6:04:21:ad:18:65:7f:8e:5a:bd:30:4b:98:
76:22:a7:5b:e9:9a:e1:6e:e0:e3:71:c5:31:d4:a2:
bb:63:9a:00:23:79:5d:5a:44:2c:8c:44:f4:eb:70:
54:2f:78:60:c2:63:f3:53:d6:b2:8e:3e:1b:c5:a7:
5d:48:20:79:67:c4:03:a2:91:cc:e9:97:f6:c4:c8:
83:84:fe:67:20:d6:bb:bd:89:6f:fc:dc:f4:8b:9c:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A3:E8:9F:CB:AF:BB:D5:65:C1:27:1D:5F:BA:34:80:47:C0:FC:26
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/qqPon8uvu9VlwScdX7o0gEfA_CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:76:52:01:00:1d:3d:37:f8:ca:76:f5:6e:fb:ff:53:8b:68:
77:59:d5:69:b9:0b:80:22:7c:96:19:4a:72:00:7b:b9:b0:31:
ca:2a:1b:40:71:11:78:76:e3:94:f2:40:03:db:d5:18:a4:8b:
c6:23:4a:34:81:d5:6e:00:69:4e:12:0d:b3:1b:41:31:52:79:
59:07:26:c3:59:11:44:52:1b:8b:18:97:50:4e:64:24:13:5e:
67:e1:4a:16:a3:ee:a4:45:7d:3b:bc:e0:ca:e2:b1:4a:98:36:
24:02:64:cd:8d:f5:fd:e9:cc:db:59:98:82:52:1e:7e:08:f5:
c8:eb:73:3a:62:18:1b:f6:28:68:de:ee:64:99:14:9d:f5:20:
22:fb:04:6c:ce:33:20:a0:37:1c:bf:c4:73:ec:e6:ab:f1:70:
7e:23:12:c5:c0:62:d1:8f:a4:57:6a:53:e5:dd:fb:00:9b:f9:
ac:b1:45:e7:3c:04:f3:6c:ad:1f:c4:e3:c0:d6:8a:bc:2c:0b:
09:df:10:d9:fd:71:97:76:18:26:32:9b:e4:9a:08:af:c3:9d:
b5:99:a0:a8:c2:83:68:6a:6c:83:9a:b5:de:0c:e8:c5:0a:ff:
7f:f7:6a:cb:d2:dd:d2:11:65:3b:2b:01:ef:8b:c1:5b:1f:17:
b8:56:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:55 2024 by rpki-client on console-ams.rpki-client.org