Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/QCsVblipiGFjhWglBzAxNwiQ_vI.roa
File: QCsVblipiGFjhWglBzAxNwiQ_vI.roa (raw, json)
Hash identifier: EDsjhLEJA1E2orP7yXY/ljfUkLyr9Jo67dCeBaKgPxE=
Subject key identifier: 40:2B:15:6E:58:A9:88:61:63:85:68:25:07:30:31:37:08:90:FE:F2
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 10A4D2B7
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/QCsVblipiGFjhWglBzAxNwiQ_vI.roa
Signing time: Sat 01 Jan 2022 07:53:15 +0000
ROA not before: Sat 01 Jan 2022 07:53:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206746
IP address blocks: 185.176.100.0/24 maxlen: 24
185.176.102.0/24 maxlen: 24
185.176.103.0/24 maxlen: 24
185.176.101.0/24 maxlen: 24
2a0a:1181::/32 maxlen: 32
2a0a:1180::/32 maxlen: 32
2a0a:1182::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279237303 (0x10a4d2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jan 1 07:53:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=402b156e58a9886163856825073031370890fef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:cb:02:80:bb:16:16:40:6f:30:c0:c8:12:
86:97:74:11:9f:48:a4:54:14:d7:05:bf:ad:96:e6:
55:47:1d:2e:4b:b4:9e:f7:11:31:f3:6d:7d:56:6a:
d2:f3:16:aa:25:f8:aa:4c:39:26:3e:ab:bd:66:6d:
7d:9d:25:17:d6:70:a9:eb:cd:62:b9:36:73:36:c2:
6c:72:79:74:bc:cc:80:6a:26:b7:f1:d1:ec:09:1d:
0c:0e:5f:a5:68:f3:f8:3e:10:73:10:60:07:56:79:
ec:50:b1:5f:0c:ed:4b:45:81:ab:41:27:ac:9a:94:
f4:86:15:ff:50:d9:12:36:22:20:8a:47:a7:a4:43:
83:9a:e2:c4:ec:95:1b:45:31:d6:99:74:a8:46:ac:
16:ef:56:73:15:e6:1f:fb:9d:1c:de:b5:49:38:93:
2c:a1:7e:37:d8:33:5d:84:67:73:21:58:67:50:21:
92:ae:83:48:ed:ab:0a:67:db:f1:c4:d1:42:18:78:
9e:d0:13:af:a1:20:b4:61:95:d4:12:78:41:5b:15:
a9:ed:0b:13:f5:31:86:1b:e7:93:8b:de:37:22:33:
51:de:9e:a0:60:6b:85:cd:44:24:b3:c2:6c:fd:67:
35:3b:12:8a:99:93:20:c4:15:c5:e6:99:96:55:8b:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:15:6E:58:A9:88:61:63:85:68:25:07:30:31:37:08:90:FE:F2
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/QCsVblipiGFjhWglBzAxNwiQ_vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.100.0/22
IPv6:
2a0a:1180::-2a0a:1182:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:d9:05:99:50:4c:16:69:ea:b2:e5:b9:23:da:1b:5d:76:98:
bd:fe:64:c0:5d:22:9f:0b:d7:3b:c2:31:b7:c5:a8:30:f4:fe:
c3:ee:77:ef:e0:7c:17:6b:d2:92:a9:a2:4c:57:ac:8c:44:cf:
64:d5:38:4d:44:1f:3e:00:89:50:7b:17:a5:ca:cf:03:b2:65:
41:9f:60:ab:9b:19:28:ea:90:cf:a3:a6:79:5c:b0:77:91:75:
51:af:c0:dc:74:de:bf:98:5e:a1:e7:82:22:eb:77:8b:e0:c7:
de:7b:50:93:5e:24:1b:02:a9:90:1e:d6:78:53:b2:eb:a4:6d:
f4:41:1f:5b:54:7e:8c:6f:92:08:9c:7a:51:58:1c:ea:1c:54:
dc:8e:93:0f:0a:62:f7:06:64:bc:55:26:8f:61:72:67:d9:17:
29:95:b4:24:50:86:bb:b3:a1:33:ee:62:ca:4c:31:50:d7:14:
06:86:85:a2:81:2f:16:dd:2e:92:e1:b6:4c:8b:88:43:aa:06:
80:b6:73:2f:86:ab:f8:6b:66:5d:9b:4b:44:2c:76:0c:7c:a3:
11:ee:55:a3:73:89:dd:60:f6:5b:64:5e:20:5a:9d:9a:52:d2:
e9:a8:91:88:08:fa:ba:9f:10:9d:de:97:b2:37:46:63:ce:04:
8a:54:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:11 2024 by rpki-client on console-fra.rpki-client.org