Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/qiyN80sohQIyQJlTgjrK8hzLBuE.roa
File: qiyN80sohQIyQJlTgjrK8hzLBuE.roa (raw, json)
Hash identifier: kieusgTE84MP+1Dlx113eWb1NUbqz+bYMGrBYS/GLqQ=
Subject key identifier: AA:2C:8D:F3:4B:28:85:02:32:40:99:53:82:3A:CA:F2:1C:CB:06:E1
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0182A81099B713EFC540F5C8C16DA010A753
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/qiyN80sohQIyQJlTgjrK8hzLBuE.roa
Signing time: Tue 16 Aug 2022 19:10:36 +0000
ROA not before: Tue 16 Aug 2022 19:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201086
IP address blocks: 193.36.63.0/24 maxlen: 24
185.254.94.0/24 maxlen: 24
2a05:b700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a8:10:99:b7:13:ef:c5:40:f5:c8:c1:6d:a0:10:a7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Aug 16 19:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa2c8df34b28850232409953823acaf21ccb06e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:dd:80:c3:f4:5f:1a:ef:e1:e9:f5:01:69:
73:7e:51:65:07:fb:eb:70:fa:f9:88:3b:b9:ea:c2:
c9:47:d6:7c:c0:e7:79:fc:64:ea:f2:6e:0d:48:13:
8a:d7:1b:6d:61:d5:6c:f7:12:7f:15:95:26:8c:09:
12:ba:30:a7:70:51:02:0f:60:63:7d:34:af:74:72:
fc:9c:44:21:61:7f:cf:54:99:16:31:86:56:d4:34:
1b:67:75:b7:16:42:43:36:b1:b4:b6:91:3d:71:a1:
e4:dd:04:bf:59:d1:b5:e3:d6:9d:2b:f0:6a:79:77:
47:ee:07:b3:00:5c:0a:d7:5c:dd:e2:dc:17:66:e2:
a8:80:2d:b3:26:8f:51:8d:c4:e7:bf:a5:28:3c:ac:
60:1d:d6:4a:e9:ba:96:a0:df:a9:de:81:0c:74:8a:
46:18:9d:a7:06:fd:3b:10:94:ee:83:eb:40:59:f1:
47:f4:ea:ae:c2:1b:fa:69:8c:ef:1d:e7:a9:99:5f:
8f:d5:57:99:94:1d:1f:e7:bb:11:18:5b:64:3f:8f:
07:60:f9:04:3a:0f:3a:8d:71:1c:0b:62:7d:f1:6e:
32:b1:1a:51:30:35:15:7e:73:e9:65:b1:02:09:3b:
93:3a:f8:72:a8:7e:a0:54:31:4c:97:ed:ec:dc:ea:
77:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2C:8D:F3:4B:28:85:02:32:40:99:53:82:3A:CA:F2:1C:CB:06:E1
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/qiyN80sohQIyQJlTgjrK8hzLBuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.94.0/24
193.36.63.0/24
IPv6:
2a05:b700::/29
Signature Algorithm: sha256WithRSAEncryption
6f:d9:e5:fa:91:36:84:bb:fd:ad:7d:ca:87:5a:e1:e2:7f:ff:
ff:79:be:b4:53:47:35:03:13:94:09:6d:d0:ca:db:af:e3:18:
b6:1e:8f:c6:2c:b0:49:9a:94:5c:b2:43:d1:e6:ad:76:5f:e5:
a1:3a:9f:ec:85:78:d8:42:3c:9e:04:5d:1c:63:3d:72:b0:ac:
f2:b3:7d:26:58:77:0a:74:f0:2e:c1:7a:84:a9:69:c3:21:c3:
82:8d:cd:05:ce:f5:aa:b8:f3:e0:db:07:95:da:9e:2c:29:01:
2b:a7:72:dc:dc:c5:4e:41:19:1d:f5:89:1d:7a:45:fb:35:09:
30:56:f4:cc:1f:f2:54:73:09:f1:b1:41:7b:23:bb:ec:83:82:
7c:a7:2d:a1:99:3d:70:c5:cc:10:e3:6b:96:08:d9:97:db:8b:
0a:c0:d2:97:86:e6:05:f4:34:aa:63:96:fc:2f:07:b6:8e:1e:
d4:56:0c:b9:55:4c:12:d9:64:90:a6:30:c2:56:cc:ed:22:44:
94:a8:ba:1f:cd:9b:d8:fe:4c:6a:9b:98:7b:6a:38:e0:69:44:
55:3a:22:05:72:49:93:99:5d:da:1b:2c:85:60:f8:ec:0c:b1:
81:0d:97:4b:22:28:47:3d:fe:6e:39:db:c2:b6:c8:94:90:0f:
51:f0:fd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org