Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/QSVtmk8ZL0oIGL_B3JtToN0p97Y.roa
File: QSVtmk8ZL0oIGL_B3JtToN0p97Y.roa (raw, json)
Hash identifier: f+QxWjqkT88xZ1XglqOPpJN8g0j5Wq1SOzh4BUmH2Qs=
Subject key identifier: 41:25:6D:9A:4F:19:2F:4A:08:18:BF:C1:DC:9B:53:A0:DD:29:F7:B6
Certificate issuer: /CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Certificate serial: 03BE2432
Authority key identifier: 3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/QSVtmk8ZL0oIGL_B3JtToN0p97Y.roa
Signing time: Sat 01 Jan 2022 04:04:23 +0000
ROA not before: Sat 01 Jan 2022 04:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201814
IP address blocks: 193.35.110.0/24 maxlen: 24
195.128.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62792754 (0x3be2432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Validity
Not Before: Jan 1 04:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41256d9a4f192f4a0818bfc1dc9b53a0dd29f7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:57:ae:2a:ef:47:8d:81:d7:2c:be:b2:21:
18:d8:ec:21:f3:de:f0:34:d7:de:96:d0:2b:b4:29:
a8:1f:90:f2:27:d9:1c:51:35:49:18:c8:a2:c7:93:
8c:cf:e4:e4:1a:2b:0b:f3:d1:f4:06:57:8d:73:cd:
1c:dd:08:c8:f5:d9:8b:11:0a:a7:57:40:b6:20:a7:
47:61:ec:3f:fb:96:0e:0e:34:16:1e:fb:28:f5:18:
00:a3:81:7e:3f:33:ab:88:a3:77:97:d6:82:27:1b:
15:24:e3:93:77:b7:64:25:87:81:b9:07:dc:f8:e9:
a8:dc:d9:51:e0:d4:c0:fa:36:6b:3c:86:90:e2:7f:
6d:1a:34:ba:d3:27:16:ac:d2:58:40:e8:c3:eb:9c:
e4:95:16:c8:2a:2c:86:90:7c:53:26:dd:dc:6b:2a:
70:59:8d:9d:79:51:44:16:ec:91:5e:c4:ae:0a:bd:
2d:97:a6:12:25:08:b9:c4:ca:1f:33:3c:5b:b7:43:
45:77:d4:67:d2:3a:92:8d:bc:2e:f8:e5:2f:08:71:
3d:f4:12:4f:76:71:f7:49:2f:9b:c2:bd:f7:32:28:
4a:65:3a:b9:42:fd:4d:1f:0e:64:9e:06:50:17:54:
c2:d8:cb:c9:2b:36:0f:70:3e:1b:66:c2:48:d8:a6:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:6D:9A:4F:19:2F:4A:08:18:BF:C1:DC:9B:53:A0:DD:29:F7:B6
X509v3 Authority Key Identifier:
keyid:3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/QSVtmk8ZL0oIGL_B3JtToN0p97Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.110.0/24
195.128.154.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bb:50:f4:0b:80:49:a4:09:7d:0d:8a:cf:ef:b5:99:69:64:
38:d4:32:79:d8:09:8e:05:03:e4:14:4e:b7:34:f9:fc:b2:29:
9e:1f:ed:f2:eb:93:d0:cd:9a:db:c1:bd:8e:f0:a9:63:b0:35:
91:46:6c:36:e3:a1:78:b1:56:87:6e:85:97:f1:bd:9a:29:58:
01:63:94:e1:d4:b6:8c:f9:08:9e:77:7c:d2:6c:c5:76:ac:78:
50:28:2e:e9:49:e0:84:b9:74:27:13:d5:77:24:98:7e:52:8b:
af:d5:9b:8a:43:52:3a:60:78:00:e7:49:4c:1b:f8:32:8e:67:
e4:80:7a:db:78:5b:46:c6:1f:72:3b:74:51:ce:52:3c:14:c9:
70:c0:a2:83:48:31:e5:c7:41:80:d0:dc:29:d1:70:f0:f1:86:
62:22:12:b2:e4:c2:60:9f:61:db:cc:69:54:e9:08:3c:39:d7:
b5:fd:5b:bb:ff:9e:31:36:3e:33:4b:6d:63:9d:91:fb:e5:55:
25:f1:8c:74:4c:a6:db:8c:43:54:26:cb:59:94:c5:cc:a1:b4:
10:5f:0f:e4:1f:c0:0a:43:5a:c1:b6:e8:d2:5b:6c:4e:fe:b5:
98:c7:39:c1:1d:04:2c:7f:d2:b6:22:88:94:d5:58:03:f5:00:
a8:bf:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-ams.rpki-client.org