Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/QC_WXEh4qZmiUNM5euarYYiDraE.roa
File: QC_WXEh4qZmiUNM5euarYYiDraE.roa (raw, json)
Hash identifier: ycXfDyLFmHs7humoNg2BQMVgnCYcfecKU1obQvRg1kY=
Subject key identifier: 40:2F:D6:5C:48:78:A9:99:A2:50:D3:39:7A:E6:AB:61:88:83:AD:A1
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 058B44B6
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/QC_WXEh4qZmiUNM5euarYYiDraE.roa
Signing time: Sat 01 Jan 2022 10:59:42 +0000
ROA not before: Sat 01 Jan 2022 10:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210145
IP address blocks: 193.168.58.0/24 maxlen: 24
193.168.58.0/23 maxlen: 23
193.168.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93013174 (0x58b44b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Jan 1 10:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=402fd65c4878a999a250d3397ae6ab618883ada1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:d7:8b:8a:7b:5b:32:6b:73:2c:ad:f8:8a:
06:c3:d3:11:fb:4f:1d:3b:08:98:f7:8e:7b:50:36:
e5:da:8c:75:d7:a3:2f:d7:af:90:b3:b3:db:b3:ee:
16:25:f3:06:75:6c:fe:15:8a:8e:d0:ba:a2:38:28:
c4:d4:0c:e3:86:3f:ff:ed:25:5d:18:0f:43:ea:f0:
01:30:b4:89:8a:d3:17:40:55:01:fc:79:c0:3c:63:
f8:9b:be:96:cc:da:f5:5d:74:0b:e5:c3:3e:36:45:
0c:0c:78:95:b0:e1:f8:51:3c:73:dc:9b:56:a8:82:
21:ac:2a:fc:c7:d3:e4:b2:c7:23:da:cb:d6:e0:b8:
06:f0:2f:72:d1:df:c0:d9:72:a6:97:6e:a1:df:9f:
88:92:f5:11:c8:bc:fe:1c:b1:d8:2b:c9:0e:ba:33:
f1:0a:10:8b:54:8f:a9:80:cd:b7:1a:35:96:f4:9a:
f8:06:d7:42:4a:bd:9e:3b:0a:60:ab:f1:57:5f:bd:
32:e1:a6:0a:0a:14:40:26:80:32:3d:37:61:88:2e:
2a:eb:a4:d4:db:93:a7:3c:9b:bb:39:5f:84:a8:59:
e4:86:7a:8c:ed:e3:70:b6:e5:db:e5:2d:3d:a3:a6:
07:1d:38:1f:1c:66:b6:c9:4e:89:60:78:05:77:f3:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2F:D6:5C:48:78:A9:99:A2:50:D3:39:7A:E6:AB:61:88:83:AD:A1
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/QC_WXEh4qZmiUNM5euarYYiDraE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.58.0/23
Signature Algorithm: sha256WithRSAEncryption
57:9d:30:21:6a:c3:d6:71:58:18:34:89:a2:72:75:12:fa:e7:
aa:35:f5:78:0f:2b:00:49:06:8b:7e:cf:12:44:91:dd:d3:5e:
de:75:c7:f4:96:9b:da:63:4e:7e:b3:8e:3d:5f:fb:ba:d5:18:
ed:75:e6:f4:8b:7f:f4:87:fa:d9:de:38:a5:43:96:55:40:cf:
7f:9b:34:a4:fe:05:70:1f:71:11:b8:03:47:8e:62:a0:e9:38:
a7:b3:4a:28:2a:77:6f:ab:62:db:5d:1b:1c:48:41:38:eb:ac:
ad:bd:17:b6:a7:a9:7c:08:12:ad:3b:cf:a3:85:47:0a:fd:71:
f1:a9:47:17:fd:42:13:9a:a2:42:8a:ee:71:6e:37:6e:3c:34:
f6:24:ad:08:58:db:be:a2:a0:d1:73:b6:25:da:99:d9:b8:13:
0f:41:3f:2b:ca:f2:75:bc:4e:cb:95:c5:67:6b:77:55:c7:81:
77:04:85:66:15:89:3d:d8:63:18:7e:69:6c:13:9d:3d:01:d1:
e5:c5:38:6f:54:9a:5b:81:01:4a:a6:37:5b:24:2b:ff:3f:5a:
4f:ef:1d:a2:64:5e:80:9a:92:ed:cb:fa:f2:73:bf:56:15:6f:
6f:97:5a:80:a2:e2:6f:ef:5d:36:c9:db:eb:8f:03:22:d8:eb:
c9:bd:b5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:22 2024 by rpki-client on console-ams.rpki-client.org