Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Qi_x8XGYZan5LcjgUm0mnCmzbj0.roa
File: Qi_x8XGYZan5LcjgUm0mnCmzbj0.roa (raw, json)
Hash identifier: 7nsCaapU1Ck0OiFFcnVrM/6Q7Ws390USL/sNCVusGX8=
Subject key identifier: 42:2F:F1:F1:71:98:65:A9:F9:2D:C8:E0:52:6D:26:9C:29:B3:6E:3D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0744E607
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Qi_x8XGYZan5LcjgUm0mnCmzbj0.roa
Signing time: Wed 23 Mar 2022 16:11:38 +0000
ROA not before: Wed 23 Mar 2022 16:11:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 185.223.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121955847 (0x744e607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 23 16:11:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=422ff1f1719865a9f92dc8e0526d269c29b36e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:73:cf:1e:84:b8:ed:3e:39:a5:58:fc:1f:
76:30:49:66:fd:27:bd:bb:6a:bf:49:84:a2:83:6f:
d8:4f:2b:28:86:53:b3:f8:d7:cb:a0:a8:2f:e8:8a:
ca:b4:86:7b:73:fc:e2:2a:d9:e9:d8:d4:b5:25:03:
9f:05:60:dd:ee:0f:65:5a:b7:c8:fb:54:0c:b5:f9:
d7:8b:d2:d1:e7:e4:ab:ba:9e:39:7d:1c:1d:56:cd:
d7:4c:73:dd:2f:82:93:9d:9a:a0:63:fd:be:5e:03:
01:17:00:fb:0f:95:75:38:8e:1a:00:da:c9:7a:be:
82:5a:3a:9b:27:a2:d0:ff:b1:97:32:e0:b3:e8:9e:
23:d7:6a:f1:65:81:a3:9e:cb:47:a0:6e:58:a4:7f:
67:96:63:59:da:21:96:0c:a3:a4:d1:b1:ab:f0:aa:
43:21:f3:d6:33:a3:a4:f5:88:28:cc:cb:8b:7a:2a:
3d:ac:51:6b:56:f4:4e:dd:b3:a5:c7:26:6c:f2:63:
91:d1:31:6d:e8:7d:94:de:7b:bf:ee:6b:c2:7d:f7:
1a:f7:cc:28:79:f7:70:4a:49:a9:32:1d:3b:9f:f6:
af:cd:a6:8e:79:9b:d1:9e:4d:91:d1:d0:56:bd:70:
ac:6b:d8:23:4d:e9:a8:5a:97:3c:31:a2:71:00:7d:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:F1:F1:71:98:65:A9:F9:2D:C8:E0:52:6D:26:9C:29:B3:6E:3D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Qi_x8XGYZan5LcjgUm0mnCmzbj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.152.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f6:26:c7:51:93:44:c3:0a:e0:9b:c5:60:4b:28:49:c0:c3:
10:87:ef:b9:a4:91:75:de:17:38:06:a4:3e:c7:5e:17:f5:bd:
22:98:7c:f8:8a:24:78:20:02:fc:79:1e:db:e2:14:01:35:8c:
37:c2:be:21:c2:19:db:d7:84:1b:40:c3:61:02:67:12:8b:af:
c9:61:24:67:20:78:ef:0b:77:63:37:7b:8f:fc:8a:11:2e:f2:
59:7a:c2:85:18:a6:a6:91:91:8d:a9:11:8d:82:8c:78:02:9f:
bc:77:b1:f4:8f:aa:e7:d6:ae:a7:00:16:ea:6f:da:5a:0a:5e:
39:bd:9b:38:8c:b9:45:60:85:ea:af:e2:8d:89:76:3f:e0:47:
bf:b2:43:bf:0a:31:1f:65:69:c1:c8:01:c6:03:9e:bb:b8:eb:
1f:60:75:67:c8:f5:fd:ac:35:42:d5:2a:f3:8c:e1:c3:86:20:
cc:5e:0b:7b:45:57:31:b1:89:18:ae:dc:8c:e2:22:48:50:80:
75:b1:e6:ee:cc:f3:53:a6:58:5b:aa:87:a1:b5:cd:75:38:45:
08:c3:1b:0a:8a:dd:ea:79:0f:d3:3e:d3:73:8c:19:42:ab:09:
a8:59:3b:28:61:45:7e:13:e7:ef:b6:60:f7:db:71:f7:d4:c8:
1e:c0:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:15 2023 by rpki-client on console-fra.rpki-client.org