Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/QXUsqYUm2UqW3l3wvKwitM5ESek.roa
File: QXUsqYUm2UqW3l3wvKwitM5ESek.roa (raw, json)
Hash identifier: +Ds5Dkoiv1Rxy8KJFmePterkiJ1hzzV5C0ug3aRI/yQ=
Subject key identifier: 41:75:2C:A9:85:26:D9:4A:96:DE:5D:F0:BC:AC:22:B4:CE:44:49:E9
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: DA23D7
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/QXUsqYUm2UqW3l3wvKwitM5ESek.roa
Signing time: Sat 01 Jan 2022 12:59:07 +0000
ROA not before: Sat 01 Jan 2022 12:59:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21060
IP address blocks: 185.126.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14296023 (0xda23d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Jan 1 12:59:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41752ca98526d94a96de5df0bcac22b4ce4449e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:e1:af:a2:3e:2a:2e:b7:7b:7c:81:de:95:
24:f6:55:5a:17:5a:16:0c:ca:47:6f:08:f5:a7:3c:
9e:8a:71:e7:de:f7:da:8e:96:55:89:90:fc:b6:00:
0e:3e:7f:9e:4d:e3:19:37:10:56:de:ee:4e:4a:49:
2c:83:21:dd:21:74:36:2e:4b:ed:0c:65:af:5a:3a:
82:8d:a1:31:00:a7:30:1d:d9:b8:97:4f:29:ac:fe:
be:99:24:d8:cd:c3:af:1f:cb:a2:a0:93:ba:78:91:
da:17:72:9e:31:d7:b6:cb:61:5b:5d:d9:e0:65:de:
d6:71:63:6e:ae:e1:52:ce:7b:4a:8d:89:7e:60:ae:
6d:f1:69:a3:fd:a0:5d:f0:7c:c8:f9:5d:bd:22:ea:
a1:20:a8:05:eb:45:ee:da:5d:9f:e5:27:8b:f9:0f:
9e:01:e3:03:ac:e5:19:06:7a:55:88:4f:ea:79:4c:
07:33:88:d7:a3:1e:89:07:7f:48:6f:e5:e6:21:ea:
e4:a3:99:eb:45:89:f4:d9:fa:b5:1a:ea:5d:81:c3:
e8:ef:c0:39:d4:06:d7:a3:f8:36:e9:88:b7:14:e6:
d5:37:66:15:0c:86:f1:ef:f8:b5:70:34:f5:02:60:
4c:ea:7c:ec:56:c2:5c:17:5e:0c:51:b0:c9:16:90:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:75:2C:A9:85:26:D9:4A:96:DE:5D:F0:BC:AC:22:B4:CE:44:49:E9
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/QXUsqYUm2UqW3l3wvKwitM5ESek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.52.0/24
Signature Algorithm: sha256WithRSAEncryption
88:81:e0:85:f9:08:da:69:ac:b5:3f:b2:3c:9b:90:ba:af:34:
c5:5c:54:9c:e8:32:d9:42:37:7a:f0:01:98:ed:7a:4b:bd:17:
01:d9:c4:3d:4d:ee:58:ed:ce:d4:ad:b2:38:01:51:c3:60:a9:
91:a5:28:34:1b:43:b1:4e:aa:bc:96:f2:d8:f9:94:45:53:6c:
79:5f:2f:f0:aa:ce:86:d4:bd:fa:a5:d1:38:73:6b:a3:02:d4:
de:98:b7:83:49:b6:c1:55:8f:d3:6e:22:71:73:f6:e7:e2:11:
e1:6c:4f:bd:7b:04:94:98:c6:0d:8f:7e:9f:4c:1b:4d:eb:4d:
d8:90:ac:62:97:bf:9d:ff:d1:8f:0a:77:ff:93:1e:8a:ce:b6:
72:97:19:1a:06:9c:58:cf:ec:b4:0b:71:a7:1e:df:c2:2a:4a:
ea:38:bf:21:2c:ca:ab:c6:d9:52:ef:51:36:5e:6b:8d:0c:87:
05:46:cc:8a:cd:a8:27:8f:4a:f6:32:a4:f2:01:eb:3b:fe:13:
b8:1a:a0:a3:13:f4:72:e5:bd:d2:00:1e:8f:ac:17:b2:55:27:
d3:f8:e4:31:6b:9f:ba:10:df:82:a6:c9:06:94:31:db:2b:2c:
42:4a:1b:42:57:d5:64:37:ba:9d:1f:9f:f1:ab:5c:f7:7c:3b:
b7:56:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:03 2024 by rpki-client on console-fra.rpki-client.org