Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/QtcN8tj41_oMjaxzfzTeOatu06I.roa
File: QtcN8tj41_oMjaxzfzTeOatu06I.roa (raw, json)
Hash identifier: edKUWsl76e/6JEfw0+loiLkOELawVkQ5JUnKEuD9Z/4=
Subject key identifier: 42:D7:0D:F2:D8:F8:D7:FA:0C:8D:AC:73:7F:34:DE:39:AB:6E:D3:A2
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 36713425
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/QtcN8tj41_oMjaxzfzTeOatu06I.roa
Signing time: Mon 27 Jun 2022 02:55:40 +0000
ROA not before: Mon 27 Jun 2022 02:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1290
IP address blocks: 195.152.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913388581 (0x36713425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jun 27 02:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42d70df2d8f8d7fa0c8dac737f34de39ab6ed3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4c:f5:7e:37:f9:0c:6b:52:35:ec:48:06:6c:
1d:32:af:e8:92:86:36:40:90:69:a9:28:8f:c1:e4:
0b:85:34:dc:fb:49:ce:01:30:0c:e2:8d:f7:51:18:
5c:64:60:9a:46:80:75:31:5b:f2:c6:1c:dc:4b:27:
6d:23:cd:a7:dd:f4:f6:0c:f6:3a:91:4c:aa:61:f5:
39:bb:ee:64:8d:35:6a:ef:21:cd:d5:83:80:62:fd:
f1:b8:68:41:95:b8:61:06:b4:2f:f9:49:04:38:4f:
0e:6b:80:6a:64:75:b3:a0:11:1b:3a:b7:e2:24:25:
21:ef:a8:c7:7a:db:a4:d5:df:a7:c9:bd:af:9e:a1:
88:dc:96:73:71:b1:59:47:6f:d8:85:81:8e:09:95:
b7:43:44:44:9b:75:8f:87:c5:7f:72:ee:82:17:e6:
be:55:2f:fa:a4:ac:39:79:cf:70:7b:72:8f:06:02:
ec:20:0e:0b:be:b0:b4:05:b9:f2:b5:57:85:2a:62:
62:d8:52:90:0e:c1:0a:a2:bb:74:de:fe:e9:35:8b:
88:76:7c:76:14:d7:90:bf:0b:99:49:6b:7d:d1:14:
19:e6:bd:b2:f7:e0:40:bd:15:06:77:87:b6:45:17:
a7:2b:05:fe:c4:e8:7a:25:bc:c0:76:41:eb:28:94:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:0D:F2:D8:F8:D7:FA:0C:8D:AC:73:7F:34:DE:39:AB:6E:D3:A2
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/QtcN8tj41_oMjaxzfzTeOatu06I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.152.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9e:1b:7f:78:85:19:f4:5d:54:61:09:b4:17:af:50:cf:1a:2f:
4e:0d:5c:c0:d2:ae:09:25:85:1a:b7:39:1f:ed:53:4c:8a:17:
3e:a9:f0:15:9c:27:1d:a9:f2:eb:03:3d:7a:e1:0b:c4:e4:29:
d8:43:58:2c:54:90:04:0a:9d:9e:7b:1b:84:9b:11:bc:b0:d2:
1a:84:fc:47:64:cb:f4:b1:42:f5:b9:69:bf:44:78:17:a3:bd:
7a:99:64:b7:9b:b5:86:ed:7f:cb:65:bf:a5:cc:1e:bb:75:df:
a8:c8:cc:a3:aa:82:87:d6:d4:68:64:75:34:1d:e7:bd:69:c5:
d1:29:56:01:22:32:62:86:ee:7a:a2:ea:fa:13:d6:d4:4b:89:
8d:8b:1f:b9:4c:d1:d4:3d:b1:9a:a9:bc:9a:4a:0c:62:64:3c:
df:4e:6c:2e:76:16:40:3f:23:43:6c:db:c4:fb:94:38:7f:6d:
2d:40:88:78:51:b2:76:bb:6d:b1:ae:90:d5:9d:cf:fd:19:a7:
7b:01:ce:0c:03:1f:55:8d:b3:4a:35:06:25:6b:86:db:6d:ff:
34:9d:be:82:74:d6:c4:ed:e1:67:2d:91:cf:1f:ab:03:1a:4b:
a5:46:8d:52:7c:a3:cf:bb:c9:88:bf:02:50:cb:37:7f:51:bd:
d7:02:ff:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org