Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/5QQrkrYYDXvGs2qFWWPy_gQor6s.roa
File: 5QQrkrYYDXvGs2qFWWPy_gQor6s.roa (raw, json)
Hash identifier: 89DYgCKx7YLtA4bA0GqQRKiXlwuCxBPAYCKicbJ78Qs=
Subject key identifier: E5:04:2B:92:B6:18:0D:7B:C6:B3:6A:85:59:63:F2:FE:04:28:AF:AB
Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial: 035C894D
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/5QQrkrYYDXvGs2qFWWPy_gQor6s.roa
Signing time: Sat 01 Jan 2022 10:57:53 +0000
ROA not before: Sat 01 Jan 2022 10:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32611
IP address blocks: 141.113.144.0/21 maxlen: 21
141.113.152.0/21 maxlen: 21
141.113.160.0/21 maxlen: 21
141.113.168.0/21 maxlen: 21
2a03:9e41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56396109 (0x35c894d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
Validity
Not Before: Jan 1 10:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5042b92b6180d7bc6b36a855963f2fe0428afab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:48:97:a8:86:48:21:b9:7b:d5:28:7c:c8:
ed:80:3a:7a:aa:98:66:84:ae:bb:b2:24:19:a4:e3:
72:48:da:a0:99:d0:66:72:43:bc:cc:55:1f:17:ca:
63:a2:9c:f7:86:c5:cb:b0:55:af:03:0d:c5:26:15:
47:a0:27:03:17:06:d8:fb:d1:20:80:80:b8:ac:33:
a2:73:90:3f:e6:03:d2:b3:cb:b6:86:27:46:89:42:
cc:6c:20:d4:4d:8c:14:f6:6e:bc:5f:8e:c9:14:45:
62:12:66:62:2d:fb:f4:6f:f8:5e:b5:08:5a:5f:db:
d2:0a:8c:20:27:6e:75:e3:95:bd:23:3b:70:48:c8:
01:dd:bb:d4:80:4c:be:ed:10:6c:a9:5f:f3:d1:e1:
5c:32:8c:ce:00:f2:c1:ce:11:0b:35:41:2b:e4:6f:
35:dd:1a:80:95:b0:ce:04:7b:76:1d:f3:85:0f:d0:
5d:9f:41:ef:24:c4:d3:91:41:03:ab:3d:6b:72:92:
3c:ec:c1:92:27:59:35:89:00:0e:05:f5:da:2d:04:
ac:f8:81:41:64:65:e2:44:84:56:0b:13:3f:71:ee:
8a:e3:eb:a1:71:e8:81:52:4e:70:ea:9b:f9:d1:18:
03:74:8e:b9:be:55:50:a2:ce:3d:e4:23:61:37:6d:
18:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:04:2B:92:B6:18:0D:7B:C6:B3:6A:85:59:63:F2:FE:04:28:AF:AB
X509v3 Authority Key Identifier:
keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/5QQrkrYYDXvGs2qFWWPy_gQor6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.113.144.0-141.113.175.255
IPv6:
2a03:9e41::/32
Signature Algorithm: sha256WithRSAEncryption
43:b0:05:76:05:bd:60:d2:db:83:b0:de:b8:63:db:7f:86:23:
21:cc:aa:c7:d3:27:97:7e:bd:61:ef:66:15:f6:2d:13:86:31:
d3:d7:eb:ab:04:87:79:d0:20:b9:86:27:47:95:f2:e3:74:c4:
43:36:ea:f7:97:5e:58:5c:ca:24:b0:88:15:9d:9d:98:7b:ff:
78:28:81:81:33:ee:fa:ee:e6:6c:33:da:14:ef:57:f1:5f:cc:
9d:6f:96:69:d8:f7:41:14:07:f0:c9:1b:47:3a:02:db:8a:4e:
1b:d8:42:5f:a2:9d:69:47:50:1b:16:82:bc:dd:27:cb:62:00:
4a:b8:38:38:5a:0b:2f:9a:6e:72:b3:e6:9a:ac:19:89:bd:89:
78:3e:64:97:05:ce:fc:44:f8:d7:f1:0f:84:c3:9d:c1:1a:7f:
d6:8b:3d:34:4d:db:c4:36:94:5f:d0:42:e9:1c:5e:ae:14:e8:
9c:0f:f7:d5:72:55:0c:cd:df:5f:5c:2b:2f:cb:5d:a3:65:7f:
c1:30:40:ad:05:ec:5a:0d:72:9d:ad:80:71:e7:42:fe:3a:0f:
3a:ff:ea:9b:29:73:46:a1:bc:df:ae:c0:29:5e:ce:be:ab:64:
50:bd:ae:4e:c3:ec:08:d5:ee:c3:e5:35:62:23:22:36:9d:51:
f4:5e:26:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:14 2024 by rpki-client on console-ams.rpki-client.org