Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/qmel8lDjqSBe4Rg29rLbcKBhXzg.roa
File: qmel8lDjqSBe4Rg29rLbcKBhXzg.roa (raw, json)
Hash identifier: Drp+0W0GnY+SM3zNn1a2WEYWNauXjQw+iAE19J93Bww=
Subject key identifier: AA:67:A5:F2:50:E3:A9:20:5E:E1:18:36:F6:B2:DB:70:A0:61:5F:38
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 08A2A4A4
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/qmel8lDjqSBe4Rg29rLbcKBhXzg.roa
Signing time: Sat 01 Jan 2022 11:04:11 +0000
ROA not before: Sat 01 Jan 2022 11:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16247
IP address blocks: 185.201.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144876708 (0x8a2a4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 11:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa67a5f250e3a9205ee11836f6b2db70a0615f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:f0:23:95:6e:c6:84:67:5e:a6:42:1f:ff:
cd:6e:0a:a2:56:47:52:6f:58:ee:c5:80:26:b2:f0:
20:f7:8a:18:66:5b:4d:74:23:21:59:3e:fd:5b:d4:
4a:dc:2a:63:d6:29:f6:92:95:61:f1:97:eb:eb:cc:
68:a9:2a:dd:e4:85:40:8e:43:86:f5:41:5a:b0:13:
4d:fa:2e:3c:6a:76:0f:b9:f5:39:de:f9:1d:10:5d:
80:f0:98:cd:c9:2e:73:2e:26:39:41:8b:6b:b7:55:
62:56:13:e1:6c:58:33:69:6a:66:76:bd:f4:fe:8e:
e4:5f:9b:e9:99:18:82:ae:a3:bc:29:a7:76:d2:c8:
04:4d:66:8f:83:50:55:07:1a:5d:7f:db:a2:cb:c3:
6c:b8:48:72:75:06:78:fa:9d:2d:32:17:1f:ea:b9:
b0:3c:e6:e7:c5:9d:6b:d3:6b:b8:f0:3c:20:1b:61:
1c:db:3b:1d:dc:50:0a:b2:c4:d4:ee:59:ed:70:e2:
31:7a:78:c1:32:f7:46:8c:58:82:f3:ff:89:61:9f:
14:e1:de:2e:2c:93:10:c5:96:81:69:19:17:b8:63:
cc:f1:86:96:d1:f1:5a:14:27:fb:67:51:fa:1f:eb:
51:15:14:50:e4:8e:58:71:8e:db:69:d3:d1:31:98:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:67:A5:F2:50:E3:A9:20:5E:E1:18:36:F6:B2:DB:70:A0:61:5F:38
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/qmel8lDjqSBe4Rg29rLbcKBhXzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ee:27:f8:88:3a:59:12:43:9b:c1:9a:2f:88:32:b1:64:68:
db:cc:6b:cd:60:67:c1:45:e5:1e:a5:b0:aa:04:ca:7b:9f:c2:
9b:1a:7b:92:fa:4f:2d:bd:cc:23:68:e5:7b:39:7d:4b:9b:67:
b1:37:08:a8:e6:f0:24:02:a5:8c:97:67:57:54:10:34:89:f5:
57:42:23:15:2b:bb:13:e4:4e:d7:33:02:1f:fc:63:18:95:e3:
59:ea:e0:42:0d:c4:92:d6:8c:fb:9b:4f:1d:0d:a3:9f:f2:1f:
9c:84:dc:38:d1:c5:be:2a:39:55:17:f2:da:20:d9:ac:9d:dd:
7c:32:84:e3:37:75:e7:3c:db:1e:a1:ca:68:52:e7:12:36:44:
7d:5f:0b:ee:9c:ef:25:c4:06:2e:ff:eb:c9:06:8d:b6:c5:be:
48:f3:7e:22:6c:7b:93:f8:95:61:21:9a:1f:a2:a4:5e:80:c2:
5b:00:dc:cb:c3:0c:84:7d:c6:08:e1:57:73:a1:66:a5:bb:0d:
08:62:c0:69:79:d5:d4:dc:9c:78:85:79:ec:da:1d:68:e8:0a:
00:3d:65:cc:b4:b2:db:d8:6e:93:1b:05:f7:86:7c:d1:82:db:
fc:7b:44:bf:49:ab:7b:4f:2d:a2:e9:a7:5a:4e:e1:16:6e:4e:
05:66:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:58 2023 by rpki-client on console-fra.rpki-client.org