Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QCZ5-skBk1NJ-DyYCSJQKQOpDhE.roa
File: QCZ5-skBk1NJ-DyYCSJQKQOpDhE.roa (raw, json)
Hash identifier: 3c5XMEGzT3pQ1fvIyvtGpe5gCCiz4YPFGG2dkvd0LKI=
Subject key identifier: 40:26:79:FA:C9:01:93:53:49:F8:3C:98:09:22:50:29:03:A9:0E:11
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01850CFC38A8C098B5E776C89DEEC2706BEA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QCZ5-skBk1NJ-DyYCSJQKQOpDhE.roa
Signing time: Tue 13 Dec 2022 19:35:34 +0000
ROA not before: Tue 13 Dec 2022 19:35:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 45.147.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:fc:38:a8:c0:98:b5:e7:76:c8:9d:ee:c2:70:6b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 13 19:35:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=402679fac901935349f83c980922502903a90e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:3e:0b:36:a7:f4:6d:52:8f:cc:87:b2:ff:
3f:a9:51:7c:9f:1f:01:91:ff:13:dd:a1:38:e4:db:
be:f1:01:d4:70:ca:d5:6b:2c:01:fc:da:5a:3d:d5:
a2:86:80:d0:57:84:d0:05:d9:8e:85:95:64:6f:2d:
ea:fc:cf:a1:30:c2:05:4b:79:e2:b0:be:11:6c:7b:
25:5d:04:9a:00:d2:00:99:b0:22:58:a1:80:78:03:
ad:b7:d1:cb:b2:7b:93:a9:18:5f:ec:c1:13:3e:b3:
49:3e:2c:8b:8a:bc:73:c2:13:c5:9e:2c:14:07:d0:
15:d7:3f:64:57:b5:50:7e:dc:6b:84:28:6c:b6:64:
24:70:b8:33:7f:4a:e7:87:02:a8:6a:34:57:82:40:
c2:b1:fd:2a:01:12:e4:6c:05:ac:bd:af:83:e0:8f:
1b:5b:e4:22:fc:af:f3:7a:86:8a:0e:43:cf:5b:22:
c4:aa:c2:77:8a:57:7a:4a:77:20:82:54:e1:0d:52:
bc:59:89:8b:99:97:95:47:ae:d9:26:c1:11:fd:e5:
06:31:1b:21:1a:f0:b0:6e:bb:68:c5:17:1b:cb:06:
c1:85:d1:42:8c:3f:f3:4a:7d:43:27:89:38:d2:47:
81:2d:37:ea:ae:32:db:67:0d:ad:39:5d:23:28:85:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:26:79:FA:C9:01:93:53:49:F8:3C:98:09:22:50:29:03:A9:0E:11
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QCZ5-skBk1NJ-DyYCSJQKQOpDhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d5:c6:51:0f:27:19:41:28:63:4d:6d:9d:80:82:c4:a5:45:
e7:69:9e:e6:46:66:9e:d9:28:81:1e:42:31:60:14:0d:2f:f2:
cc:ab:00:b2:27:55:e9:1b:2e:5d:87:4c:55:36:43:75:72:6b:
a6:16:1e:25:59:a8:04:3c:e3:3f:7f:a1:1a:34:35:26:4a:8e:
98:88:82:a7:fd:02:7e:01:89:0b:25:c4:f2:ad:ac:f8:af:39:
7f:96:21:c8:be:dc:b7:f6:8f:73:35:96:4d:1e:c3:cf:86:89:
cb:0a:a7:ac:78:ea:da:3a:1f:fb:90:9f:d7:cc:ce:b9:cc:e7:
f3:7f:d2:d6:a0:cb:c3:80:14:e2:ff:33:d7:18:54:c8:e4:05:
e8:4b:fe:7b:57:44:b7:a8:9b:07:c3:33:cc:d6:40:91:ad:07:
a9:86:b8:62:23:77:c0:ac:a4:3a:da:e0:0a:3f:f4:ff:19:fd:
2f:0d:a7:d4:91:6c:e1:cf:fc:61:3e:7e:da:c2:4e:f2:f0:f7:
ca:94:83:4f:8a:0b:eb:62:97:de:90:4d:9a:16:ce:42:55:c1:
f3:b1:b2:66:34:bb:39:d6:cc:74:15:2a:98:ee:8c:52:aa:02:
24:4d:19:33:00:62:18:0f:f1:55:8e:51:d3:33:13:d4:6c:75:
b5:70:b7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org