Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/qjWD715isEcxJFvotSmSG3m15kA.roa
File: qjWD715isEcxJFvotSmSG3m15kA.roa (raw, json)
Hash identifier: DVRe7whN9/uTtfxnJwWGc4FlS8G5ffCeoWlAw7UEZpM=
Subject key identifier: AA:35:83:EF:5E:62:B0:47:31:24:5B:E8:B5:29:92:1B:79:B5:E6:40
Certificate issuer: /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial: 011068B4
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/qjWD715isEcxJFvotSmSG3m15kA.roa
Signing time: Sat 01 Jan 2022 07:52:43 +0000
ROA not before: Sat 01 Jan 2022 07:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198781
IP address blocks: 185.121.16.0/22 maxlen: 22
185.121.16.0/24 maxlen: 24
185.121.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17852596 (0x11068b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
Validity
Not Before: Jan 1 07:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa3583ef5e62b04731245be8b529921b79b5e640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4c:fa:7f:ee:1d:96:02:3a:48:64:d6:6b:20:
aa:0e:0b:75:5f:93:af:a5:e5:ec:1c:f2:d6:06:15:
ca:06:25:e2:df:cf:b3:a6:29:6d:8b:a7:fd:4e:f4:
16:c7:3e:b0:ce:12:cb:1e:d9:48:50:9a:4f:b9:3c:
c8:5f:78:10:0b:38:1a:e6:f8:b0:1f:25:ba:26:3c:
ef:35:b9:14:2e:01:2c:5d:b3:b8:d4:8d:59:52:25:
27:de:65:80:b9:ff:ea:0a:61:62:4b:88:7e:1e:bc:
ac:57:e3:c1:60:76:50:7b:42:cf:da:1d:cc:4a:3e:
71:cc:08:6b:a0:b5:6d:5f:47:9d:8e:5a:f1:2e:fc:
f6:05:34:bd:dd:9f:5b:30:42:6a:03:57:81:1b:62:
e3:95:92:04:b3:41:6e:ee:b7:cd:17:b6:11:f2:4e:
ff:c7:54:08:fd:42:82:15:09:0b:c1:da:2a:9d:0e:
2e:b7:0a:8d:fa:12:58:5c:f2:8b:91:76:56:8c:8a:
9c:85:32:d0:23:51:61:7e:e7:f1:aa:df:b5:a1:52:
6e:b5:93:65:ed:8a:d3:99:f9:c3:19:06:67:88:3f:
da:85:ed:9d:d0:e1:61:55:5c:91:45:ce:e6:e1:19:
58:f9:b8:00:28:ff:b6:d5:b5:a8:f6:3f:10:cb:8b:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:35:83:EF:5E:62:B0:47:31:24:5B:E8:B5:29:92:1B:79:B5:E6:40
X509v3 Authority Key Identifier:
keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/qjWD715isEcxJFvotSmSG3m15kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:54:9c:e2:a1:54:a1:1e:fa:dd:f2:9e:2a:52:c7:de:1a:5b:
d0:1d:8c:12:df:5c:6e:06:9b:e0:12:99:28:3c:e9:fa:54:10:
a0:86:88:9f:72:42:4c:03:c9:5d:91:b3:88:5d:6b:5b:8f:9d:
c5:36:f7:98:85:9b:2e:67:12:a4:20:38:da:4c:3f:b5:c8:c8:
ab:73:4e:39:b4:36:c7:90:97:da:4b:9c:07:98:d9:b8:79:d3:
f0:01:5a:94:13:61:1b:ee:3a:a1:17:6e:b7:a4:02:1f:f0:72:
2c:da:09:9a:78:30:6a:6f:66:97:de:c7:be:85:4c:c1:41:3e:
20:eb:2c:ea:a7:f1:70:dc:3a:2c:5a:44:df:ef:67:9e:a2:97:
6f:5b:6a:6b:1f:b6:54:4e:67:15:62:b7:57:21:9d:80:9d:41:
15:b3:4f:dc:8b:1b:27:70:52:45:4d:ac:f4:e4:f7:70:34:69:
7e:9b:a1:32:43:bc:91:0b:33:e8:32:c8:2b:71:4f:18:a8:f6:
40:2f:10:00:df:88:9b:ca:b2:b4:01:16:fc:7e:43:b9:04:86:
17:b5:64:a1:6a:1a:42:5d:2b:8d:a2:27:ba:c2:09:aa:36:3d:
c3:6c:60:4c:e9:4f:6b:8b:58:97:79:d8:74:19:1b:c0:b9:83:
dc:5b:1f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:21 2024 by rpki-client on console-ams.rpki-client.org