Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QAGq6HiYox6tyRmWpKQYDhKS_Rw.roa
File: QAGq6HiYox6tyRmWpKQYDhKS_Rw.roa (raw, json)
Hash identifier: FamjaF3BhwGwLXk8fSwkN4uF/EF/kN7DpJ45/BAt3Ls=
Subject key identifier: 40:01:AA:E8:78:98:A3:1E:AD:C9:19:96:A4:A4:18:0E:12:92:FD:1C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018409B350531C36BA4E60325935807F5142
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QAGq6HiYox6tyRmWpKQYDhKS_Rw.roa
Signing time: Mon 24 Oct 2022 11:14:17 +0000
ROA not before: Mon 24 Oct 2022 11:14:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 91.186.216.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:b3:50:53:1c:36:ba:4e:60:32:59:35:80:7f:51:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 24 11:14:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4001aae87898a31eadc91996a4a4180e1292fd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:d4:1e:2a:5f:21:69:2e:f6:f2:18:2a:a4:
2c:7a:96:22:c9:89:90:5d:13:05:95:bf:33:f8:28:
15:09:2e:67:e5:89:52:d8:22:6a:78:37:f1:b2:a4:
84:f3:e0:19:14:5a:e8:df:6b:da:00:16:0d:19:86:
77:7b:7d:cf:ce:be:88:8d:26:c6:77:51:46:47:ba:
48:5b:84:2e:b1:4f:b5:38:48:e0:58:43:87:14:f8:
ef:a4:8d:d6:ac:2b:9f:59:32:26:53:72:99:9d:b8:
21:ab:ee:16:29:e0:38:64:7d:09:97:ee:7c:85:23:
dd:a1:c2:ca:bc:6e:09:67:1f:06:58:2a:19:e8:f4:
1e:78:8b:b6:b7:25:63:b4:8f:84:da:73:48:31:38:
99:ed:30:35:5e:9f:3c:40:7b:ec:3e:f9:09:b6:c9:
78:02:ef:da:b4:9a:9c:ca:7b:ea:b0:a6:4f:19:43:
95:1f:e3:40:60:d0:2f:33:5b:19:02:43:af:b4:f1:
51:82:2c:80:f8:94:17:93:b2:95:15:cb:81:fa:3c:
c1:15:26:5b:3c:89:f4:81:4f:b3:f6:24:c4:21:75:
f6:5b:75:c6:16:e9:ec:65:31:fa:07:20:21:93:b7:
8d:98:17:ef:8b:5f:a1:44:22:26:34:20:f7:ae:11:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:01:AA:E8:78:98:A3:1E:AD:C9:19:96:A4:A4:18:0E:12:92:FD:1C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QAGq6HiYox6tyRmWpKQYDhKS_Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.216.0/21
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:78:bb:82:8e:cd:be:de:0d:01:e1:89:c5:fb:70:d9:84:24:
4e:4d:d3:c8:0a:b1:ea:ae:a7:16:f7:54:b9:2f:27:f1:0e:d7:
eb:e8:33:d8:d3:1d:e4:cb:4d:4f:e5:a7:ad:0c:77:7c:1d:36:
d4:d0:42:15:d5:fc:7a:2c:40:03:98:95:fb:27:0b:1d:a1:8c:
6f:e5:80:42:ac:04:96:cb:2b:60:1d:a0:19:17:9c:3e:be:20:
53:3e:6c:b6:89:08:cd:e7:ea:39:9b:64:95:1c:23:d3:32:39:
df:f5:3e:75:a0:91:bb:fb:af:be:2d:d3:7a:e7:f9:8a:55:74:
bc:99:78:51:ce:15:79:f1:2b:05:62:b9:e4:6d:c6:db:84:1a:
d2:55:d2:fc:f4:dc:e2:71:f5:6d:85:49:ab:e6:36:d0:cd:fb:
02:b6:d2:45:d5:d2:0d:24:40:ba:0c:73:b1:da:30:59:ba:3b:
c3:db:e1:bb:27:4c:8c:4a:79:fe:ee:1c:0a:ae:c5:fc:6a:1a:
d0:90:f7:5a:49:d7:9c:2c:e3:8a:a4:14:a9:ea:cc:eb:c7:1c:
62:b3:5f:c5:c5:7a:44:e2:fa:97:41:a1:17:10:9a:d5:13:ba:
13:f5:03:f3:f2:b4:58:dd:c5:8e:06:bc:92:95:7d:02:6f:b1:
7e:11:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org