Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/QIGuWlAAodpL8KJpw3GHVdG7h8A.roa
File: QIGuWlAAodpL8KJpw3GHVdG7h8A.roa (raw, json)
Hash identifier: UBMl95mFUVNVUk1IabZyeB2AoivPAZnBtlUztzmbSbo=
Subject key identifier: 40:81:AE:5A:50:00:A1:DA:4B:F0:A2:69:C3:71:87:55:D1:BB:87:C0
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0B082E66
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/QIGuWlAAodpL8KJpw3GHVdG7h8A.roa
Signing time: Fri 01 Apr 2022 08:24:32 +0000
ROA not before: Fri 01 Apr 2022 08:24:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44066
IP address blocks: 212.224.64.0/18 maxlen: 24
185.26.96.0/22 maxlen: 24
84.200.205.0/24 maxlen: 24
185.171.204.0/22 maxlen: 24
79.133.32.0/19 maxlen: 24
159.100.0.0/19 maxlen: 24
84.201.17.0/24 maxlen: 24
84.201.18.0/24 maxlen: 24
37.114.96.0/19 maxlen: 24
84.200.0.0/16 maxlen: 24
82.211.0.0/18 maxlen: 24
31.172.80.0/20 maxlen: 24
82.211.17.0/24 maxlen: 24
84.200.39.0/24 maxlen: 24
84.201.0.0/18 maxlen: 24
2a01:7e0:1fc::/48 maxlen: 48
2a01:7e0::/29 maxlen: 48
2a01:7e0::/32 maxlen: 32
2001:1608::/32 maxlen: 48
2a01:7e0:2f::/48 maxlen: 48
2001:1638::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185085542 (0xb082e66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Apr 1 08:24:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4081ae5a5000a1da4bf0a269c3718755d1bb87c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:0b:be:fd:e0:33:3c:91:6d:c5:d0:4e:ed:
29:4e:f0:3a:56:76:56:65:35:db:43:05:09:51:20:
b8:97:6e:66:f3:3e:71:9d:e5:58:d5:d2:6f:46:69:
b8:ac:fa:70:33:1f:b2:98:2a:e5:e6:c5:98:96:42:
31:70:3e:45:3e:a5:6c:b1:e6:dd:80:e7:4a:c9:1a:
fb:2b:95:0f:71:d3:1f:6c:c5:7e:2a:ba:4c:d7:4e:
13:91:32:68:86:34:96:91:96:a5:fd:6b:94:1c:2e:
a7:4e:e0:9f:81:58:3f:7e:ea:f0:16:f1:f3:d8:d0:
f2:05:24:d9:7d:d7:22:bb:e1:03:a9:79:08:bc:52:
bc:27:f0:dc:61:4c:79:a1:e0:af:1c:c5:da:8f:dc:
73:83:c6:05:6b:10:46:b9:f7:96:5c:cc:a5:c3:d3:
f2:43:b4:c9:e9:89:b6:fe:10:4c:21:28:d2:12:2b:
d0:ac:62:e2:5b:ef:57:6d:bd:c9:69:54:c8:df:95:
dd:b3:46:93:c0:9b:21:81:73:cc:00:5e:1e:ef:c4:
af:98:ff:54:3c:ae:4e:a4:75:db:2f:10:f4:5e:88:
ee:93:c0:21:d3:1c:fe:5c:31:64:ad:30:fe:be:37:
6e:a5:43:e4:98:e1:74:62:04:56:38:63:0c:d3:ce:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:81:AE:5A:50:00:A1:DA:4B:F0:A2:69:C3:71:87:55:D1:BB:87:C0
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/QIGuWlAAodpL8KJpw3GHVdG7h8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.80.0/20
37.114.96.0/19
79.133.32.0/19
82.211.0.0/18
84.200.0.0-84.201.63.255
159.100.0.0/19
185.26.96.0/22
185.171.204.0/22
212.224.64.0/18
IPv6:
2001:1608::/32
2001:1638::/32
2a01:7e0::/29
Signature Algorithm: sha256WithRSAEncryption
93:df:a8:9a:d8:cb:7c:32:b2:04:11:3c:3c:c4:58:d7:dc:36:
29:f3:84:d9:3f:53:2e:37:73:18:65:c5:81:1e:6e:c7:b4:74:
4a:ce:39:cb:c5:25:45:29:ec:38:e5:ae:5f:27:2b:ce:3b:d4:
20:72:77:f5:8d:9d:a8:f4:3e:b5:fc:27:58:fd:25:36:24:f5:
9d:4e:7e:98:fb:dd:15:18:6e:93:9b:a1:25:1d:9d:67:a6:fb:
a6:e2:75:af:c4:47:33:3b:61:23:b8:bc:de:d3:32:65:7b:18:
59:56:b1:86:09:8e:26:79:cd:51:dd:f1:86:be:b4:d3:d2:21:
5e:98:c3:2c:5a:c6:d3:e5:ca:7f:6d:d4:17:05:50:83:b3:94:
2a:40:5c:25:2f:0f:ce:68:b5:52:6f:7e:f1:bf:2b:95:35:18:
a8:5c:9d:cc:33:05:14:89:3b:1f:aa:67:16:0d:9a:4f:e3:69:
e3:9e:af:00:25:42:b9:ba:96:29:f4:7c:04:91:98:0a:e3:1a:
23:93:14:b6:65:75:64:95:72:ec:8c:d1:54:56:73:30:41:68:
e2:52:a5:e6:61:98:41:ff:f3:bb:79:34:6e:f1:58:17:e8:e0:
4d:69:36:68:f8:77:43:07:05:7b:c1:34:73:26:d2:f7:e6:6e:
3d:d0:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:36 2024 by rpki-client on console-fra.rpki-client.org