Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/Qhs41Maaz-lyP10TM3_3_SN_qIk.roa
File: Qhs41Maaz-lyP10TM3_3_SN_qIk.roa (raw, json)
Hash identifier: zLCyVh+p8+iwTaUjash3MmGGJr7J1LyaWkD/z7FW5W0=
Subject key identifier: 42:1B:38:D4:C6:9A:CF:E9:72:3F:5D:13:33:7F:F7:FD:23:7F:A8:89
Certificate issuer: /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial: 07B49281
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/Qhs41Maaz-lyP10TM3_3_SN_qIk.roa
Signing time: Sat 01 Jan 2022 01:54:19 +0000
ROA not before: Sat 01 Jan 2022 01:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2906
IP address blocks: 185.9.188.0/22 maxlen: 24
2a03:5640::/32 maxlen: 48
2a03:5640:f000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129274497 (0x7b49281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Validity
Not Before: Jan 1 01:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=421b38d4c69acfe9723f5d13337ff7fd237fa889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:1a:f4:f3:75:20:48:e1:5e:2a:15:7e:2e:
61:eb:8e:f0:84:ae:3d:cd:66:67:d0:58:66:42:03:
87:62:56:b5:96:4f:bb:42:a2:c2:66:80:08:6d:0c:
b3:87:16:ca:7e:0f:57:90:41:4b:93:85:66:38:0b:
1f:2c:ba:f2:9c:56:ed:8d:f7:2d:c4:00:14:f4:82:
60:53:be:5e:1e:cc:50:6b:e6:93:43:c0:82:3f:0b:
64:7f:68:a5:18:60:c5:59:5f:b7:9d:cd:0b:eb:f0:
9d:63:e5:44:60:59:46:98:20:5a:8e:57:48:31:5c:
d6:72:57:e3:16:4e:81:72:cb:90:d1:08:5c:d6:1a:
4b:a4:0e:c1:55:72:d0:d7:e5:f3:d5:6b:c3:08:99:
81:a6:c4:21:3b:ff:59:17:a7:4d:cf:16:4c:3b:c2:
3c:0d:ae:8a:58:96:f5:35:a3:39:e3:25:00:ca:66:
8b:2f:2a:85:09:fc:eb:b8:05:c0:8d:d8:02:e9:05:
6d:9a:17:39:c6:10:df:14:84:6d:34:7b:eb:d2:fe:
77:08:26:c7:a2:ec:4e:b7:fb:0e:14:83:68:30:f0:
b5:1d:fd:59:9b:44:64:a5:25:f1:67:06:ac:76:da:
81:b1:b1:26:06:19:40:59:a0:e4:5b:87:03:9a:2d:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:38:D4:C6:9A:CF:E9:72:3F:5D:13:33:7F:F7:FD:23:7F:A8:89
X509v3 Authority Key Identifier:
keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/Qhs41Maaz-lyP10TM3_3_SN_qIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.188.0/22
IPv6:
2a03:5640::/32
Signature Algorithm: sha256WithRSAEncryption
ab:a8:37:d6:0e:17:93:02:c5:af:10:7e:36:1a:5e:b4:4d:30:
b2:bf:a6:8f:be:c2:5c:e6:c0:91:59:42:d0:30:6f:e3:72:02:
6c:f1:9d:c0:13:5a:6e:06:37:5a:04:dd:8b:9f:ff:f7:4e:9c:
fb:20:47:72:d7:ff:65:27:83:b6:02:26:7a:30:37:6c:5b:38:
31:23:f3:a3:19:15:51:ec:53:1e:69:fe:c0:bc:ca:2d:4d:94:
f2:1d:12:96:24:66:28:0b:86:b9:be:cf:d9:d6:84:bc:f0:94:
35:5a:d7:95:02:e7:06:c4:f2:20:30:d2:b4:d9:cd:cd:08:e4:
a1:df:47:0d:ee:ac:c7:d9:e2:65:92:b1:2b:f8:24:c7:30:08:
de:5e:17:a2:5c:d6:70:fb:c7:7c:bb:7d:ef:da:3c:14:81:96:
4b:5d:ec:73:18:fe:93:38:7c:c3:d8:74:2d:8c:eb:d9:67:ad:
16:9f:68:b9:5e:02:da:82:b4:ad:e4:8f:d0:a6:78:16:3a:73:
06:ff:b8:2b:d2:e3:0e:97:b1:0f:7c:29:8b:9a:14:8c:f7:6a:
df:7c:ed:f8:0b:0a:19:bb:9b:da:86:43:34:bb:29:7e:4e:d7:
e5:3b:84:ba:4b:2a:ca:c0:f2:48:74:02:c9:3d:d0:60:4d:45:
94:44:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:22 2024 by rpki-client on console-ams.rpki-client.org