Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QlqZQrPlPXW5CVVwJIA65El1jK8.roa
File: QlqZQrPlPXW5CVVwJIA65El1jK8.roa (raw, json)
Hash identifier: /gPOvWeezqxtNe23EfpiCZOJzGhBAUyVHqCSzPD5liY=
Subject key identifier: 42:5A:99:42:B3:E5:3D:75:B9:09:55:70:24:80:3A:E4:49:75:8C:AF
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 049BF811
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QlqZQrPlPXW5CVVwJIA65El1jK8.roa
Signing time: Fri 15 Apr 2022 10:59:32 +0000
ROA not before: Fri 15 Apr 2022 10:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211443
IP address blocks: 194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.40.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77330449 (0x49bf811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 15 10:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=425a9942b3e53d75b909557024803ae449758caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:2b:cc:3b:7f:e3:6a:1c:49:4d:1f:36:e6:
b2:ae:91:a1:4a:41:80:f1:4c:6c:8c:e8:3c:5b:99:
e4:1e:47:63:39:f9:35:3e:81:71:f9:94:97:4a:96:
e6:e0:9e:61:b6:41:bd:ff:24:a8:de:9a:d7:0a:6f:
0d:ab:98:c4:46:89:88:21:11:17:65:70:ba:f7:3f:
5b:fa:0a:13:05:c3:60:63:05:67:b2:b7:4b:52:e2:
5c:9c:27:ea:58:ed:a5:bf:01:b2:96:18:82:af:41:
46:91:00:79:df:15:42:17:94:a5:25:dd:fd:bd:bd:
23:27:fb:81:f7:69:da:27:50:c3:9a:4b:10:7e:0b:
4a:65:f9:e7:30:d4:ff:87:a7:02:c3:ea:ad:fe:7e:
5e:76:25:8b:d9:b0:17:78:58:84:65:3c:91:68:15:
1c:c7:61:68:46:84:3b:3d:cb:10:ae:19:35:3d:51:
51:38:29:e4:f3:b7:13:99:a2:20:a9:6f:57:ac:ba:
5c:3c:9e:31:73:08:b3:d9:25:3a:c5:76:c2:0b:5d:
dc:a2:c0:fc:42:7c:c0:94:af:26:10:c0:c2:99:80:
18:3c:6e:af:7b:3c:45:25:53:1e:ba:e2:81:ae:3e:
8b:65:04:85:24:b0:93:ff:43:cf:a9:4f:72:2b:4f:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5A:99:42:B3:E5:3D:75:B9:09:55:70:24:80:3A:E4:49:75:8C:AF
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QlqZQrPlPXW5CVVwJIA65El1jK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.77.0/24
185.40.7.0/24
192.162.100.0/22
193.0.200.0/24
193.0.203.0/24
193.168.226.0/24
194.63.140.0/22
Signature Algorithm: sha256WithRSAEncryption
32:38:71:a7:f6:35:48:59:87:15:c1:6f:a4:73:a3:49:7a:98:
e4:7f:15:25:7e:1c:67:b4:9c:7e:18:00:ef:d5:73:fb:35:d8:
34:ee:c1:8b:5f:61:f7:4a:3b:eb:81:b9:66:a5:1b:7d:11:72:
d9:93:fe:20:d6:2d:ef:89:27:ee:48:50:0d:9a:19:be:6f:d8:
21:39:25:b1:cc:4f:76:73:6c:c5:a8:80:a6:05:8d:27:71:0c:
54:18:09:db:25:94:5e:c9:ae:3e:ca:bc:30:e8:50:3f:41:11:
ae:1c:f0:e4:74:f5:85:e4:73:92:cf:2d:d4:6a:e4:81:f9:07:
bf:45:74:af:ec:35:c0:f3:a4:a8:4e:f6:2f:ed:cc:31:9e:88:
c5:88:c3:2e:f4:e8:6c:f0:50:58:1c:28:fb:86:4e:2a:71:52:
9b:ae:e2:c4:d3:16:68:96:50:2b:fe:af:c6:46:0c:9d:8f:52:
d2:49:5f:fe:24:43:f6:9c:2d:4e:46:2d:99:57:fa:77:4e:15:
c5:1c:11:b2:74:94:35:38:d4:da:c4:4e:78:57:cc:9c:44:a2:
0a:cc:62:82:56:a7:c3:46:b5:de:ab:4d:7c:1e:f7:ac:c3:78:
c0:36:1a:29:6f:b8:f3:51:5e:0a:c6:40:7c:57:8f:43:7f:a2:
58:5e:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org