Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QLGfBAwmjzC6p4yoaA3XC8dMEr8.roa
File: QLGfBAwmjzC6p4yoaA3XC8dMEr8.roa (raw, json)
Hash identifier: VYnOFCKTritWsFiX+W3UbAboe66HaLVu/mclnX31ZUE=
Subject key identifier: 40:B1:9F:04:0C:26:8F:30:BA:A7:8C:A8:68:0D:D7:0B:C7:4C:12:BF
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 033DFD0E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QLGfBAwmjzC6p4yoaA3XC8dMEr8.roa
Signing time: Sat 01 Jan 2022 16:04:34 +0000
ROA not before: Sat 01 Jan 2022 16:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207064
IP address blocks: 185.125.48.0/23 maxlen: 23
185.125.48.0/24 maxlen: 24
185.125.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54394126 (0x33dfd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40b19f040c268f30baa78ca8680dd70bc74c12bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:4e:e9:70:7f:7e:be:ae:2f:ff:02:df:cd:
6d:80:4d:43:8f:05:34:08:b7:69:66:14:aa:31:0d:
2c:d0:c8:df:cc:50:ba:84:b5:c8:0c:e9:f6:16:20:
33:8c:65:eb:37:8a:0c:8c:75:54:93:4e:65:1f:87:
0d:8e:4f:d1:69:d8:ab:17:80:9b:6c:b6:88:f4:c2:
f6:19:6a:9c:f2:e5:d8:f5:2f:c0:c5:3d:7f:ca:1f:
c5:68:85:b7:be:e9:c4:7c:aa:12:c1:1e:b9:c2:1d:
1c:e6:a1:57:fe:e3:74:ec:65:aa:62:06:3c:17:d3:
a0:cd:5f:f2:7c:da:f0:15:29:c0:88:30:57:28:bd:
2d:a3:ed:76:58:f8:38:9c:16:a1:6a:30:b5:ed:cc:
f4:ad:63:81:72:08:a7:d8:dc:29:96:3e:cb:8c:90:
cd:90:90:86:37:b4:de:5e:09:60:47:a1:e6:93:7f:
be:90:02:bc:f8:94:93:a4:e4:2b:03:26:41:71:f8:
a4:f7:6b:90:7d:6b:79:07:eb:bf:a5:0c:6f:be:56:
43:82:a0:01:2a:1d:02:e5:b0:0c:62:fa:1e:f2:9b:
83:08:3a:e3:58:24:e6:33:5d:2a:1b:e4:0e:da:68:
b5:5d:30:e4:9b:f2:00:2a:41:b6:f3:cb:34:68:77:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:9F:04:0C:26:8F:30:BA:A7:8C:A8:68:0D:D7:0B:C7:4C:12:BF
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QLGfBAwmjzC6p4yoaA3XC8dMEr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.48.0/23
Signature Algorithm: sha256WithRSAEncryption
79:01:20:65:ff:dc:91:83:13:3b:31:c0:6b:c2:bb:25:89:04:
76:4c:57:5c:63:d7:2e:a9:c4:80:18:eb:91:c4:2c:ca:7b:76:
e2:00:18:ee:e9:df:82:e2:0c:80:d3:97:d5:11:e8:75:79:b1:
f5:e0:cc:b4:65:93:02:29:2d:8b:f2:b1:20:39:34:eb:0b:e4:
2b:58:66:38:23:73:48:7c:0c:04:41:08:f0:d0:d0:9a:04:46:
32:fd:88:43:b9:15:09:da:1a:2c:18:21:35:7e:bf:a2:e4:7c:
3d:1d:19:53:d0:bd:66:8f:d6:f2:5b:fb:d2:e7:e9:7c:11:14:
c7:6c:96:e1:81:8a:e9:9b:0e:ea:da:40:f7:9c:15:de:a8:36:
a1:bf:b8:3b:a0:ee:cd:11:d5:20:b7:bf:f7:05:f4:a1:43:40:
d5:53:be:5b:d8:11:c3:64:13:9c:6b:d5:70:a4:c7:f0:aa:9a:
dc:70:13:4b:c7:37:e5:00:ac:58:f7:6d:44:21:4d:95:98:5e:
9e:e8:a4:cd:6b:93:84:6d:96:0d:33:ac:ba:fb:2f:94:0a:46:
5c:b9:cb:72:ff:fc:3d:2f:ac:8b:73:9e:91:bb:99:07:68:d8:
57:c3:b5:f2:7d:cb:36:5a:f6:80:05:15:80:c9:45:4c:7e:0a:
ff:d3:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org