Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/qoWaUbHzatBC-51N9FLFL142QYA.roa
File: qoWaUbHzatBC-51N9FLFL142QYA.roa (raw, json)
Hash identifier: NZHNQWJvJY6TJOPyLCz2EbsMkeAhVkHTHcHpzPJKTXc=
Subject key identifier: AA:85:9A:51:B1:F3:6A:D0:42:FB:9D:4D:F4:52:C5:2F:5E:36:41:80
Certificate issuer: /CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Certificate serial: 018273F8D39A385315D5CD9E9B285B456343
Authority key identifier: DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/qoWaUbHzatBC-51N9FLFL142QYA.roa
Signing time: Sat 06 Aug 2022 16:24:23 +0000
ROA not before: Sat 06 Aug 2022 16:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44547
IP address blocks: 178.211.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:73:f8:d3:9a:38:53:15:d5:cd:9e:9b:28:5b:45:63:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Validity
Not Before: Aug 6 16:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa859a51b1f36ad042fb9d4df452c52f5e364180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:7a:f8:ff:41:81:14:c6:fb:18:f9:ad:93:
0e:18:59:72:d1:40:28:42:1b:3a:32:87:93:d7:36:
35:b8:f9:b4:2b:06:19:40:e0:b0:5b:bb:75:5b:ce:
41:2e:9e:0e:84:0c:08:cc:6e:8e:72:01:5a:02:0b:
e0:5b:53:f0:a9:48:eb:80:10:d8:c5:20:20:c4:c8:
f8:c1:a9:c8:a2:25:7c:6c:95:d0:c0:04:85:89:f4:
7f:36:0c:6c:b4:c2:dc:90:21:9e:97:84:a0:bc:9a:
d9:e8:2d:fc:21:ee:b2:f9:7b:77:3c:32:68:f0:f4:
f6:ea:1e:ac:21:4b:79:c6:1b:d0:5c:c7:55:42:8f:
14:28:29:5f:98:46:a1:c1:55:38:12:07:eb:47:c6:
04:72:84:c8:b7:aa:be:18:8c:01:ac:66:d1:eb:3e:
74:a0:06:07:59:20:14:e1:6e:62:6b:8f:e8:73:9b:
cc:04:42:1a:8e:d5:a4:60:c0:76:6d:a7:fa:f0:85:
33:a0:6d:73:9e:ed:4d:41:2a:c1:6f:49:25:7d:13:
9e:31:c2:11:29:d8:7a:94:94:e6:de:29:f3:a0:16:
37:4a:d9:15:f4:49:14:a9:a2:c9:85:06:af:fd:9b:
a1:6a:c0:10:1c:fb:82:99:e4:a3:e2:72:b4:38:13:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:9A:51:B1:F3:6A:D0:42:FB:9D:4D:F4:52:C5:2F:5E:36:41:80
X509v3 Authority Key Identifier:
keyid:DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/qoWaUbHzatBC-51N9FLFL142QYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.130.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e3:13:69:b5:9d:b5:76:a1:a3:25:90:3d:73:25:18:e2:b2:
24:df:a9:27:94:09:15:b4:64:74:e4:99:77:c6:ae:44:d2:15:
4f:78:ca:bc:35:91:e3:d3:84:62:40:d0:8b:d9:6a:14:e7:22:
3e:20:26:d9:98:7c:6d:43:59:c5:82:af:7b:9e:92:3f:21:08:
5b:7c:81:41:35:9c:1f:66:2e:f5:b1:87:94:5e:38:3b:a0:6b:
1f:98:00:53:43:8e:0a:4b:93:0d:cd:05:b3:8c:c2:2f:38:e7:
26:4d:b1:b2:26:8e:ac:f6:00:07:25:60:d4:43:a4:5d:80:24:
01:53:cd:cb:7a:16:d6:c9:4b:f8:e7:b6:0d:1d:ec:41:4a:90:
b9:70:45:c2:38:e8:b1:bf:b2:2f:ff:cb:88:4b:04:43:4f:41:
82:5b:de:33:7d:59:85:84:ef:f2:ef:f3:bd:0d:a0:78:d3:3e:
35:76:f6:19:97:1a:83:8f:6e:1e:ad:a8:f3:93:63:24:92:5e:
64:77:93:f7:d1:9e:17:bf:f0:ee:c5:6a:d1:7e:7b:c5:e7:3b:
9a:ea:fa:a4:ac:50:95:79:45:db:9c:19:5a:6a:7e:f5:2c:ea:
5e:2f:e1:d9:4d:dd:4b:8f:d4:9e:a1:88:61:f7:60:b9:0e:64:
43:7e:1a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:33 2023 by rpki-client on console-fra.rpki-client.org