Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QQFYt9M7AFsvt-8L7bAeOgCakh8.roa
File: QQFYt9M7AFsvt-8L7bAeOgCakh8.roa (raw, json)
Hash identifier: CdQn2imhrtTQO6LGpnTUbHiqgt7SiYj8Ukpo/MoGtMA=
Subject key identifier: 41:01:58:B7:D3:3B:00:5B:2F:B7:EF:0B:ED:B0:1E:3A:00:9A:92:1F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 03EB712B
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QQFYt9M7AFsvt-8L7bAeOgCakh8.roa
Signing time: Thu 24 Feb 2022 09:42:47 +0000
ROA not before: Thu 24 Feb 2022 09:42:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211443
IP address blocks: 192.162.100.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65761579 (0x3eb712b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 24 09:42:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=410158b7d33b005b2fb7ef0bedb01e3a009a921f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:81:c9:9b:a4:e3:95:8b:5a:ea:56:4f:a2:
6d:d5:36:6e:4d:e1:77:06:bb:71:cb:9a:6e:3a:9e:
eb:96:e7:70:49:75:d8:a0:f8:7e:c7:bb:4d:2f:9b:
7f:43:f3:67:e8:28:96:69:c7:ad:d2:b3:32:04:a4:
28:55:79:88:ee:6c:af:c0:10:73:b0:c9:6f:e6:e4:
a3:9e:77:ed:fd:10:eb:95:e6:7a:cb:15:26:eb:c1:
ef:cb:b8:1a:f8:be:ce:8a:fd:cd:6f:37:4e:3b:32:
b2:6b:9b:d6:99:98:83:38:a1:76:b1:f6:c4:9f:e9:
e8:fa:99:8b:c7:42:6b:84:5e:d3:bf:c7:06:35:c4:
19:61:3f:cc:0e:a6:6a:84:9c:ab:14:53:68:5b:bf:
62:0b:6c:f2:8b:f8:a7:d1:62:02:e0:e1:c2:7f:86:
e8:5b:75:8a:03:c3:ba:23:7c:84:a0:00:c9:c5:60:
00:e8:1f:88:f2:a2:0c:9a:b6:7b:38:5d:18:36:77:
b1:d5:06:24:30:92:48:63:f7:70:b3:b0:00:a9:70:
60:39:6e:da:e5:24:d5:f5:aa:84:ca:98:eb:c1:bb:
99:35:45:f3:02:94:0f:60:0d:c7:b3:09:22:05:77:
db:fe:61:73:79:ad:59:6f:99:27:d4:b9:5a:9b:62:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:58:B7:D3:3B:00:5B:2F:B7:EF:0B:ED:B0:1E:3A:00:9A:92:1F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QQFYt9M7AFsvt-8L7bAeOgCakh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.77.0/24
192.162.100.0/22
193.0.200.0/24
193.0.203.0/24
193.168.226.0/24
194.63.140.0/22
Signature Algorithm: sha256WithRSAEncryption
25:f0:91:be:93:3a:2c:ae:a2:29:49:ed:81:ef:a9:07:ce:10:
8b:dd:64:d4:0b:15:6d:51:08:ab:ee:63:d4:c1:75:80:bc:ba:
9c:91:43:2b:13:e1:c1:fc:e3:f5:74:97:04:0e:0d:67:fd:93:
e7:cf:6f:ce:ff:6f:cb:d7:be:26:52:8b:b0:08:81:e8:af:b8:
69:ab:a1:3f:2d:cb:7a:28:bb:16:ba:dc:ac:4c:77:be:38:0d:
36:b4:49:0e:0e:32:6c:49:50:15:0b:03:d9:07:1a:64:3a:04:
60:a5:33:b3:0e:de:0f:8e:d6:79:04:9f:4e:d8:67:29:18:37:
8b:9b:cf:54:b9:ee:e2:5f:86:bb:7b:98:31:c1:19:27:12:e6:
3c:8a:12:80:77:b4:3c:dc:60:15:76:fa:0a:ab:47:01:4a:42:
8c:b7:6c:a1:f3:19:ed:75:26:a6:0e:3a:7e:73:a7:54:2a:b7:
10:31:32:50:fe:70:9e:aa:4c:d1:66:d3:d2:9d:83:9f:60:4a:
6f:fa:9e:08:78:f7:07:6d:cb:ae:f9:b0:b7:55:07:31:90:5a:
af:8b:6d:b5:1e:11:82:72:fe:03:83:4b:c7:06:cf:6e:51:47:
cf:ed:98:d9:58:06:c6:d5:c3:34:83:20:d2:6b:d8:ca:4e:7c:
1e:24:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org