Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fQMDKTQqLrgkNE1gdHy4rVP4Yv0.roa
File: fQMDKTQqLrgkNE1gdHy4rVP4Yv0.roa (raw, json)
Hash identifier: B6bEDfZc8NLNFXcTCz8NfJxL5fBDeC7x3QmYOwA5Dr4=
Subject key identifier: 7D:03:03:29:34:2A:2E:B8:24:34:4D:60:74:7C:B8:AD:53:F8:62:FD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842D620D9FFB84EA7431F5090A78D0912C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fQMDKTQqLrgkNE1gdHy4rVP4Yv0.roa
Signing time: Mon 31 Oct 2022 09:31:51 +0000
ROA not before: Mon 31 Oct 2022 09:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24913
IP address blocks: 213.172.3.0/24 maxlen: 24
217.195.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:62:0d:9f:fb:84:ea:74:31:f5:09:0a:78:d0:91:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 09:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d030329342a2eb824344d60747cb8ad53f862fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:c4:56:fe:31:d1:31:49:cd:f7:32:cd:ec:
e7:ba:45:11:45:8b:11:70:6f:aa:3c:87:62:18:b9:
3d:c7:d0:29:e9:d3:47:03:53:ca:8b:e7:c4:cf:d9:
d1:a0:47:cc:fa:71:98:dd:50:58:a5:ca:a7:6a:e2:
11:15:24:39:8c:7b:f9:dc:0a:52:9e:06:6b:a2:75:
bc:f1:e8:50:15:93:d5:81:62:b2:86:30:6c:a4:9f:
bc:a7:f2:74:c2:d1:af:45:52:24:75:65:7f:4e:cc:
75:50:39:66:2f:71:2e:49:5c:22:dc:8e:e3:08:93:
ec:18:16:c2:4c:f3:2a:8a:df:f9:8e:3d:63:ec:23:
c1:2b:5f:5f:8f:55:4f:86:b3:a1:66:8c:ad:89:d2:
f0:16:52:de:0a:9a:b8:b3:b1:7a:69:3c:65:e6:99:
f9:51:2a:9f:ed:4d:ec:ca:30:33:6d:99:01:5d:d8:
c4:6e:d1:f3:7e:29:c1:cb:e8:83:e4:de:f7:a7:20:
2f:62:1f:35:d8:3b:77:38:23:35:a2:df:b5:88:2b:
db:29:39:72:36:6e:5d:9f:58:d5:c3:48:66:30:bb:
9a:4a:f7:75:50:f7:06:18:54:0c:de:64:9d:62:bf:
b1:90:c1:91:e3:e1:0f:0f:60:3d:8f:90:c8:14:5a:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:03:29:34:2A:2E:B8:24:34:4D:60:74:7C:B8:AD:53:F8:62:FD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fQMDKTQqLrgkNE1gdHy4rVP4Yv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.172.3.0/24
217.195.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ab:97:c8:ab:1d:93:0c:21:7f:76:4e:96:5d:8b:42:9b:fd:
ca:55:62:25:0f:d9:64:30:98:3b:a1:56:0c:e7:b5:3a:27:cd:
78:83:67:12:f6:c5:3f:8c:f4:9e:f1:1c:f9:7a:87:ae:43:ca:
18:6a:9d:30:5d:ef:4a:fb:1c:2a:b7:4e:fe:f5:5d:87:ab:98:
d9:2c:64:6f:8d:89:a5:55:04:85:1d:8b:98:c1:08:34:bf:67:
31:53:9d:a7:c3:48:e3:5e:ce:47:86:5d:c1:33:2b:64:06:5f:
d7:88:84:a0:44:27:89:67:91:1f:a2:cc:bf:03:e6:93:d1:09:
37:09:96:17:aa:ec:90:cb:fb:af:7b:89:8e:f1:1e:d9:42:93:
86:4c:e9:31:d2:38:57:66:0e:6f:46:b1:13:8e:95:12:b8:dc:
38:bd:a7:10:50:63:ff:57:26:70:3f:28:f8:2a:a2:44:1a:55:
8a:8c:d5:d7:82:bd:9d:85:ef:e4:1e:4d:7b:df:8c:fe:72:ca:
49:6c:62:38:d3:a6:95:3a:6d:87:7a:e5:b1:f7:01:16:69:9c:
bb:4b:1e:38:0b:2a:a6:13:34:a3:5b:9f:36:32:38:48:51:7f:
5b:9e:08:67:26:45:54:56:96:26:3f:2a:75:a7:08:c0:02:23:
b8:7f:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org