Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/qMG25Y8GaWAmmQTtTS_5P-iUKrc.roa
File: qMG25Y8GaWAmmQTtTS_5P-iUKrc.roa (raw, json)
Hash identifier: yurB4m3um74CheI8d7t+oIL0YuKmhNwwCFsI6c08akc=
Subject key identifier: A8:C1:B6:E5:8F:06:69:60:26:99:04:ED:4D:2F:F9:3F:E8:94:2A:B7
Certificate issuer: /CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Certificate serial: 08CEF657
Authority key identifier: 08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/qMG25Y8GaWAmmQTtTS_5P-iUKrc.roa
Signing time: Sat 01 Jan 2022 14:55:33 +0000
ROA not before: Sat 01 Jan 2022 14:55:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57795
IP address blocks: 185.157.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147781207 (0x8cef657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Validity
Not Before: Jan 1 14:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8c1b6e58f066960269904ed4d2ff93fe8942ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:18:a6:c3:bd:e6:1f:5b:77:64:de:e2:2f:
b6:57:31:f4:dc:1e:5d:c5:23:3d:bd:c3:aa:6f:ce:
da:4d:7b:12:27:b2:ab:69:0b:91:b3:6e:96:df:f9:
50:65:14:55:88:b7:c7:8d:c6:dd:2a:c0:ab:43:fc:
70:3f:b4:9d:e3:80:d0:27:fd:19:cd:7b:7c:3d:8c:
76:5e:98:88:34:55:c0:22:e4:e4:0a:31:a0:e8:8b:
b7:0b:c2:d8:12:b2:c9:29:22:b3:d7:c5:40:65:8f:
74:37:38:e9:40:e4:a3:a0:20:36:20:0c:34:62:ac:
e9:71:1f:1a:c7:b5:7d:dd:33:e0:80:44:05:2f:9b:
84:64:6a:cf:a3:f0:34:cd:01:24:49:ba:cd:a0:4d:
d5:f1:b1:63:67:47:84:28:ea:9f:91:7e:57:28:87:
94:f5:59:e3:25:dc:47:a8:4c:ec:24:84:ed:0f:d7:
d7:46:71:44:cf:25:70:1d:c0:5c:ec:72:09:fa:4e:
f8:64:b3:31:c7:8b:40:4e:74:eb:8e:ed:f4:c4:bf:
af:c4:53:a0:1a:c2:24:4f:ee:e8:9c:65:67:16:a0:
ed:51:85:5d:4f:08:ce:40:5b:68:40:bc:2c:ab:3b:
f4:a5:e4:e4:9e:77:0e:48:a7:10:52:57:d0:14:9b:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C1:B6:E5:8F:06:69:60:26:99:04:ED:4D:2F:F9:3F:E8:94:2A:B7
X509v3 Authority Key Identifier:
keyid:08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/qMG25Y8GaWAmmQTtTS_5P-iUKrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.144.0/22
Signature Algorithm: sha256WithRSAEncryption
66:9b:6b:fd:3e:fc:9d:31:ab:88:8c:dc:cc:0b:0b:62:07:3e:
73:df:a3:7d:82:c6:8d:be:f8:d1:53:e4:ab:a1:d6:50:62:ad:
91:a4:47:15:dd:d6:a2:ee:14:fc:8e:f8:bc:2e:c2:53:c5:77:
37:9d:3d:5d:a9:c6:be:ce:d6:06:c3:55:b0:bd:dc:79:e3:a9:
6d:d4:32:32:50:4f:43:05:32:65:e6:5a:29:ff:f8:03:4a:3f:
09:24:18:38:ed:ea:b5:b6:82:20:ca:5f:21:f1:c1:71:ea:af:
a5:38:6a:15:08:8e:e8:58:ab:37:55:c7:43:7d:94:7c:7f:8a:
21:d5:ae:e1:00:bf:e1:ac:f1:bc:1a:01:f4:e2:1d:66:b9:ab:
51:9d:45:5d:85:19:fe:a3:7e:bc:bc:36:f8:c5:34:ea:00:2b:
f5:ae:5e:07:3b:dd:60:1e:db:85:ea:b5:41:c8:e6:b3:9f:56:
a0:78:5f:a2:66:c8:05:1b:5c:9e:26:6d:40:f7:7b:0b:25:52:
c6:71:99:91:2d:7c:25:2a:78:8e:9f:0a:ce:9d:1c:9d:4f:d2:
ae:01:34:21:5a:86:e3:2a:ce:ac:77:4d:6c:7a:d2:dc:ee:c4:
e2:5b:d0:ce:0b:b4:1b:29:cc:3c:58:57:c3:8e:8c:87:45:af:
95:fa:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:51 2024 by rpki-client on console-ams.rpki-client.org