Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/qTVGq_tLu-_HpTSoSUGXk0YLVUE.roa
File: qTVGq_tLu-_HpTSoSUGXk0YLVUE.roa (raw, json)
Hash identifier: t+I7d1G+6sfW2yfNesuvxcFrDcApOC5r1YKCKfm2rs0=
Subject key identifier: A9:35:46:AB:FB:4B:BB:EF:C7:A5:34:A8:49:41:97:93:46:0B:55:41
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185397BD708316583A71E1DC77944674458
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/qTVGq_tLu-_HpTSoSUGXk0YLVUE.roa
Signing time: Thu 22 Dec 2022 10:58:15 +0000
ROA not before: Thu 22 Dec 2022 10:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202583
IP address blocks: 185.250.92.0/22 maxlen: 24
185.72.0.0/22 maxlen: 24
157.97.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:7b:d7:08:31:65:83:a7:1e:1d:c7:79:44:67:44:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 22 10:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a93546abfb4bbbefc7a534a849419793460b5541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:25:3d:7b:2e:c7:45:94:b8:71:8e:62:40:
07:d9:75:99:d6:d5:66:a3:6c:41:a8:c5:58:e2:22:
ef:ae:c3:ba:14:29:a1:bc:98:1a:ec:3f:b7:93:1e:
63:c6:06:de:ba:3a:3c:15:95:ff:a5:c4:a5:d1:32:
fa:39:b9:12:0c:44:e8:a6:c5:96:b4:d4:0d:cb:fa:
bc:a4:d4:10:79:eb:6f:84:3b:89:31:7b:5d:63:08:
4a:8d:b2:fb:66:14:20:98:05:3e:fb:9f:f7:29:f7:
17:42:e7:87:8b:fd:4b:9a:cc:fb:ab:c9:d4:b5:63:
3c:81:e8:3e:88:53:a8:a3:cb:63:2b:c5:6b:aa:2d:
f2:ab:93:43:68:68:8e:6b:35:17:71:0d:7b:c4:11:
cf:25:f2:d6:a1:07:13:4c:dd:86:43:23:e4:20:26:
17:04:dc:1f:59:8a:9b:8d:19:84:be:0c:b4:43:78:
53:84:76:65:b0:71:a3:4a:e0:a1:45:8b:78:ba:69:
8b:ed:b7:ea:3c:8e:fa:1a:7a:66:5f:49:a7:6d:9b:
e7:3c:d2:b2:51:61:74:e4:5a:09:28:5a:b4:fa:2f:
3f:74:cf:08:4a:19:8c:15:38:64:f4:ca:04:dc:b3:
a7:b9:a9:d4:8d:5a:0d:c1:71:64:6c:7c:40:b3:cb:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:35:46:AB:FB:4B:BB:EF:C7:A5:34:A8:49:41:97:93:46:0B:55:41
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/qTVGq_tLu-_HpTSoSUGXk0YLVUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.176.0/21
185.72.0.0/22
185.250.92.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:3e:0e:f2:44:86:29:8b:10:21:95:74:dc:7d:bf:49:ae:55:
01:48:9a:76:5f:7a:96:98:1f:41:be:a2:0b:f7:87:a9:74:ab:
db:6e:b8:b8:4a:73:1a:06:f0:e7:7d:db:c9:d7:fe:b6:81:f5:
af:57:bb:92:a7:c6:6b:0d:05:df:c7:2b:8a:32:55:16:d2:51:
d1:5d:e6:38:57:b1:01:f6:7e:79:ce:d0:80:77:6d:83:55:6d:
b2:e6:01:be:05:56:3b:6e:31:6f:5a:50:0a:89:ab:a5:56:dc:
9d:97:41:c9:80:a5:51:e8:57:a5:bb:41:0b:97:15:6b:d5:26:
2b:7d:ec:3e:de:10:0c:8a:83:e8:ce:d2:6d:67:20:98:23:f5:
4b:58:41:50:75:e3:76:fd:4c:58:07:be:2a:c3:04:2d:e7:e5:
b1:74:04:59:16:b1:4c:68:55:a2:9c:5b:ee:02:26:b9:10:35:
97:cd:76:7e:54:47:b7:4e:31:01:76:c4:81:43:fc:ec:8c:1d:
81:d3:f4:db:61:d5:9e:61:cb:f1:e8:86:5f:b3:7c:55:70:f9:
7b:b8:e4:bb:07:1b:78:0e:0c:20:50:52:74:d1:a5:5d:f3:e1:
88:15:99:5f:8b:06:63:29:71:fa:28:a6:84:d6:a5:8d:22:f0:
a2:ad:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org