Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/QmndD_YUKMvTxFeHJaBHzFq3es4.roa
File: QmndD_YUKMvTxFeHJaBHzFq3es4.roa (raw, json)
Hash identifier: oq8idot7G4Fxj9NvRQlil4+juzAu4KugvJVYkt3NM4c=
Subject key identifier: 42:69:DD:0F:F6:14:28:CB:D3:C4:57:87:25:A0:47:CC:5A:B7:7A:CE
Certificate issuer: /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Certificate serial: 03677649
Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/QmndD_YUKMvTxFeHJaBHzFq3es4.roa
Signing time: Sat 01 Jan 2022 15:02:01 +0000
ROA not before: Sat 01 Jan 2022 15:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35162
IP address blocks: 194.165.30.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57112137 (0x3677649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Validity
Not Before: Jan 1 15:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4269dd0ff61428cbd3c4578725a047cc5ab77ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:1a:ad:33:1f:3a:36:0d:08:ff:ca:fc:1f:
5d:f9:e6:f8:b2:85:6f:bb:3b:67:72:ab:23:80:17:
e5:40:01:39:75:d0:ce:9e:8e:b9:d6:4d:71:8e:f0:
52:dc:77:3f:56:65:a8:ef:46:18:b2:42:87:5c:3e:
73:46:20:30:87:e8:07:bf:7b:96:ca:89:66:b5:e7:
23:d4:48:9a:5a:e5:4b:40:37:00:db:27:92:e3:d0:
31:fd:cf:4e:5a:1a:ff:29:68:0a:4e:c1:9d:cb:0b:
9e:1b:f2:ab:61:d9:24:4e:4c:9f:e0:f8:69:99:70:
21:0f:c5:14:71:c0:1c:af:7f:7d:05:68:42:a9:05:
45:61:6d:59:70:7f:0a:08:12:88:84:ab:af:ac:ea:
83:1a:7b:89:50:ab:5b:05:26:2d:e9:d8:fd:b7:74:
c2:27:3a:b1:55:cd:13:6e:92:66:f6:90:d0:3d:ee:
a1:34:2b:c3:56:75:f2:c9:8f:ac:61:1f:00:88:5a:
c5:f9:a5:20:b2:8d:6f:0a:d8:3f:2e:51:03:53:41:
bf:db:85:1f:82:55:70:8c:61:9e:3f:55:a0:ab:4c:
db:b5:f9:b8:f0:77:4a:a7:57:d1:60:ae:be:00:5d:
2b:13:fc:3f:e6:66:2f:04:fb:5a:0c:fa:e9:ce:7d:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:DD:0F:F6:14:28:CB:D3:C4:57:87:25:A0:47:CC:5A:B7:7A:CE
X509v3 Authority Key Identifier:
keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/QmndD_YUKMvTxFeHJaBHzFq3es4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:fe:b6:b2:15:2f:65:0f:5c:b1:19:d4:22:55:42:d1:41:aa:
15:40:a7:ca:1c:70:b3:8b:a6:e2:4f:0c:1a:14:2d:e6:a2:ed:
8f:2b:3e:71:3d:67:9a:9b:6a:24:90:de:bc:67:38:e2:d6:db:
d9:22:6a:df:86:75:6e:70:35:b7:d4:6d:2d:7f:88:29:67:1f:
86:4d:ab:81:af:45:70:91:c5:8f:f4:de:96:a7:d4:65:f3:0f:
b5:b4:17:df:38:22:29:68:e1:e5:21:35:6e:6d:b2:00:d1:9c:
ce:17:49:c6:7f:fc:ed:08:41:81:ff:9a:5d:34:42:0c:43:21:
42:e2:94:a0:48:e3:19:ec:cd:81:18:16:5c:99:3d:55:5a:07:
37:8e:18:fa:1a:16:ae:3f:bc:57:42:22:75:a8:3a:98:e2:ce:
84:c7:2e:50:ab:be:aa:86:db:6e:6e:c5:fc:8c:8d:d1:e8:3a:
15:dd:12:7c:5e:19:33:7a:7c:e1:07:6d:11:ed:dc:c7:75:bf:
13:4b:f5:60:fe:0c:f0:24:ff:7f:72:92:67:a6:31:a2:94:c2:
54:24:45:8f:9d:8a:99:8d:db:28:96:be:33:51:a9:61:e3:b1:
4f:41:06:e6:b1:bc:04:be:12:d3:c3:94:1e:cf:c6:5b:5f:fe:
55:f0:cf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:44 2024 by rpki-client on console-ams.rpki-client.org