Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qKoTxJnCDyzQ67TXE-UKmWzhb6Q.roa
File: qKoTxJnCDyzQ67TXE-UKmWzhb6Q.roa (raw, json)
Hash identifier: WHLORWVVH1ONiC7ivK9XwNRlRapEiduJF0gYV/ZiFrc=
Subject key identifier: A8:AA:13:C4:99:C2:0F:2C:D0:EB:B4:D7:13:E5:0A:99:6C:E1:6F:A4
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0181CF76A9B2786862221A03313811B7701D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qKoTxJnCDyzQ67TXE-UKmWzhb6Q.roa
Signing time: Tue 05 Jul 2022 17:44:29 +0000
ROA not before: Tue 05 Jul 2022 17:44:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212396
IP address blocks: 45.85.194.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cf:76:a9:b2:78:68:62:22:1a:03:31:38:11:b7:70:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jul 5 17:44:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8aa13c499c20f2cd0ebb4d713e50a996ce16fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c6:9d:ce:bb:18:41:9f:25:3a:b5:27:8b:01:
fc:68:12:18:8c:cb:39:71:3d:bd:0a:bb:16:e4:ac:
ad:f5:1f:72:a4:35:25:80:36:62:ab:e7:51:38:81:
f1:ed:b1:78:75:0b:bd:6d:6f:97:c1:55:8f:a6:98:
e9:0d:d7:66:f7:e6:2a:b0:02:ec:9b:58:19:6b:28:
df:7a:98:54:21:b9:d0:59:c8:25:4f:01:b8:b7:5f:
f3:b3:8b:2d:1d:9d:1d:2e:83:3e:65:cc:a7:7c:98:
f8:5a:7d:b5:f5:e7:ca:ae:97:a7:23:10:a4:fc:0a:
c3:7c:a3:5e:c8:4e:f7:08:e4:90:46:47:62:d3:b7:
b5:b4:cb:80:d1:59:15:46:3f:03:08:13:59:30:76:
14:af:10:13:eb:ff:a7:2e:c8:d8:e8:59:6c:f4:3d:
08:47:eb:69:65:31:42:f1:fc:70:cd:0e:66:9e:2e:
b4:1b:d7:c5:67:79:62:b8:18:ed:38:49:b8:7d:69:
07:08:6b:fd:6d:7a:0b:38:7c:b0:a6:38:ff:8d:7f:
3b:ec:da:97:02:9a:94:1c:de:db:11:8d:cf:18:5c:
cc:9a:5c:73:68:1f:5a:94:05:b8:92:b5:12:49:5e:
16:a1:33:dd:f3:c6:77:6e:12:26:5e:4f:4f:b9:48:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:13:C4:99:C2:0F:2C:D0:EB:B4:D7:13:E5:0A:99:6C:E1:6F:A4
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qKoTxJnCDyzQ67TXE-UKmWzhb6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.194.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6f:cd:73:36:e7:54:6e:1e:c0:ed:2a:3e:07:4e:17:f3:e6:
5b:a7:78:bc:14:45:7e:c0:7a:ab:d0:10:42:dd:f2:6f:3e:67:
3a:b7:7d:a0:3c:8a:bf:20:94:27:71:59:73:67:bf:67:1f:44:
6b:6f:19:a8:91:00:7d:f3:e9:8f:7d:e1:7e:55:2d:df:7f:5c:
65:78:ec:bd:2b:40:76:ac:7a:84:92:b3:76:a1:79:1d:3e:65:
01:51:6a:0f:c1:e1:11:90:cc:9a:60:96:f4:30:98:f4:0a:47:
fb:aa:88:2a:1c:55:79:df:e6:7b:9b:a2:6c:1a:16:7b:66:1e:
c2:39:79:c7:fd:77:c8:51:48:15:e5:37:ee:de:68:9a:d5:32:
5c:b1:b8:55:03:cd:4c:54:d8:25:18:17:d3:0f:5d:c5:23:96:
6e:98:fe:79:c5:5a:60:8f:ad:49:37:e0:94:10:58:2d:14:ee:
c8:3f:c7:3b:45:7b:51:31:a5:56:eb:f9:3d:c1:fc:ae:b8:f0:
28:2f:d1:c7:29:12:e6:44:e6:c8:ea:ff:1e:1a:78:2c:82:71:
38:53:2a:72:9f:71:65:8a:ac:e8:cf:8b:d8:d8:58:d3:c0:04:
cc:97:9f:f8:67:28:00:63:fe:15:4a:0f:08:08:32:02:3e:4e:
ef:b4:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org