Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/qzzu3CBqkUp1dobWS5ExpK1hbhE.roa
File: qzzu3CBqkUp1dobWS5ExpK1hbhE.roa (raw, json)
Hash identifier: 91+360an9cD4oU8rb6ku/IDRV2yon4IMsXkUywVi1SU=
Subject key identifier: AB:3C:EE:DC:20:6A:91:4A:75:76:86:D6:4B:91:31:A4:AD:61:6E:11
Certificate issuer: /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial: 0D6F20AF
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/qzzu3CBqkUp1dobWS5ExpK1hbhE.roa
Signing time: Sat 01 Jan 2022 15:55:56 +0000
ROA not before: Sat 01 Jan 2022 15:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12945
IP address blocks: 194.126.241.0/24 maxlen: 24
91.212.176.0/24 maxlen: 24
2001:67c:2e20::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225386671 (0xd6f20af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Validity
Not Before: Jan 1 15:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab3ceedc206a914a757686d64b9131a4ad616e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:57:cd:e1:6d:6f:3b:54:62:4a:00:fb:74:
95:e9:aa:62:aa:b7:92:f7:1a:5a:0a:c7:19:4f:29:
a4:ab:cf:bd:6b:fd:64:20:9f:1a:f9:14:4b:77:72:
d3:56:b0:f8:94:c0:db:49:c2:86:93:9c:d9:6c:0a:
ec:5e:8c:2f:b8:e9:27:f4:59:81:18:fd:cf:cc:eb:
88:10:70:36:eb:fe:37:6a:58:b9:08:c3:a7:97:ed:
73:22:ad:a8:29:5d:d0:76:be:b9:fb:73:0d:12:b0:
08:98:f7:fc:de:32:b4:2d:78:a9:45:92:16:af:f0:
37:4a:d9:6c:d7:7b:bf:e2:c5:bf:3f:47:8d:71:25:
18:d9:38:2e:12:f5:a3:7f:39:d6:d1:cc:8c:63:48:
d0:0c:d4:7f:a7:4a:2f:cb:fb:c1:3c:94:56:80:9b:
a7:b4:18:bc:b6:0e:1e:d9:f4:58:e5:8b:eb:92:7e:
3f:9a:3f:66:d2:5d:97:8e:ca:0c:16:ae:32:db:ba:
a1:89:e5:c1:e4:b4:b7:65:ce:81:de:9c:19:04:2c:
f8:01:2e:a6:ff:3e:15:6d:3e:6a:04:87:5c:f0:59:
dc:a9:47:90:8f:bf:97:6a:d7:55:fa:0d:74:96:8e:
74:57:bf:eb:7e:62:06:32:7b:2d:5c:dd:04:a0:d3:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3C:EE:DC:20:6A:91:4A:75:76:86:D6:4B:91:31:A4:AD:61:6E:11
X509v3 Authority Key Identifier:
keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/qzzu3CBqkUp1dobWS5ExpK1hbhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.176.0/24
194.126.241.0/24
IPv6:
2001:67c:2e20::/48
Signature Algorithm: sha256WithRSAEncryption
92:cf:4f:2a:dc:1a:0d:e5:93:6b:96:f4:97:5e:1f:0d:29:32:
ee:f9:98:f8:f3:07:f8:95:ea:d6:8d:67:df:fb:59:73:f0:72:
01:d8:fe:5d:af:07:f0:62:74:2f:41:1b:99:34:ef:2e:c7:20:
64:f1:fc:e1:a7:67:ac:73:c6:6f:cc:1f:d2:5d:05:fb:d0:63:
62:f0:aa:af:91:08:04:2a:10:e5:c4:90:d3:9b:2d:cb:1a:3c:
af:49:46:f1:be:46:28:a1:11:4e:89:bb:24:e0:e5:12:32:d5:
f6:d7:dd:65:5d:0f:56:f4:53:f3:7b:21:41:e3:54:25:9e:75:
55:d3:4f:5d:90:63:38:08:23:cb:82:1c:b6:bf:07:01:52:71:
6c:ef:cb:9a:d3:60:14:b4:a5:6e:1f:53:02:80:bd:81:65:1f:
8f:ba:78:9b:98:60:95:af:44:66:63:86:02:36:5f:3c:e5:dc:
bc:f7:57:63:5f:d8:ce:f5:3f:aa:e0:27:c4:12:e5:62:9f:e2:
8a:9a:61:0b:4b:70:7f:36:54:a0:0c:6d:21:f5:9e:aa:49:95:
cb:a0:28:5e:4c:10:40:d0:a0:4f:4e:a7:69:05:dd:24:1d:af:
00:27:7f:82:3f:49:2f:79:67:6d:18:fe:96:03:08:9c:d2:c8:
b2:3e:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org