Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/Qz67AYnyfYkFLHjpSKkisncM43k.roa
File: Qz67AYnyfYkFLHjpSKkisncM43k.roa (raw, json)
Hash identifier: mpltlLNAh77r5krHI92TVUsQBpRsdI/isfbAtpV++3Y=
Subject key identifier: 43:3E:BB:01:89:F2:7D:89:05:2C:78:E9:48:A9:22:B2:77:0C:E3:79
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 06F640C6
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/Qz67AYnyfYkFLHjpSKkisncM43k.roa
Signing time: Sat 01 Jan 2022 04:59:06 +0000
ROA not before: Sat 01 Jan 2022 04:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6776
IP address blocks: 185.150.52.0/22 maxlen: 22
193.247.239.0/24 maxlen: 24
193.247.251.0/24 maxlen: 24
193.247.252.0/23 maxlen: 23
193.135.252.0/24 maxlen: 24
193.135.253.0/24 maxlen: 24
193.135.152.0/23 maxlen: 23
193.135.164.0/24 maxlen: 24
193.135.165.0/24 maxlen: 24
193.247.184.0/23 maxlen: 23
193.247.93.0/24 maxlen: 24
193.247.100.0/24 maxlen: 24
193.247.102.0/24 maxlen: 24
193.247.120.0/22 maxlen: 22
193.247.78.0/23 maxlen: 23
2a00:efa0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116801734 (0x6f640c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Jan 1 04:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=433ebb0189f27d89052c78e948a922b2770ce379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:b3:d8:54:46:9a:d5:dc:aa:d2:f1:6c:8b:
e9:96:a6:a7:7d:6f:25:fc:e9:33:ab:2c:65:6a:7c:
bd:40:0f:c6:ed:a5:95:d8:37:7f:ba:de:b6:ef:a7:
0a:df:32:f4:35:9f:2d:07:b5:46:34:52:d0:02:fe:
4d:37:30:c9:0a:48:13:b1:19:db:88:4d:31:6c:9c:
88:e7:26:f4:66:fa:d5:c5:04:dd:8d:9a:26:43:05:
50:11:49:20:94:16:72:da:4b:39:f4:e2:0e:8b:81:
2c:64:3a:29:81:98:fa:26:c2:99:2a:8b:13:65:e3:
d3:fe:e0:cf:83:59:b2:b4:c8:e0:5d:55:d6:e3:a6:
06:0f:ab:0f:46:5f:fe:66:78:03:94:49:52:bb:90:
27:a2:3f:fb:85:99:c8:27:b1:07:54:fc:95:30:a2:
88:99:ab:27:ed:fe:59:1b:11:ff:d6:0c:bc:4b:90:
d3:46:39:11:e4:15:59:43:f2:52:04:56:b8:03:8d:
07:c0:30:cd:9e:fb:24:9e:2f:8a:d7:4d:7e:55:fe:
7c:ee:47:0a:2b:35:e7:03:58:29:06:71:07:24:30:
4a:a5:44:22:12:0e:13:d0:26:c8:40:3e:1d:cb:d7:
60:d9:f7:49:d3:9f:47:ce:ca:25:ca:8d:32:f6:96:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3E:BB:01:89:F2:7D:89:05:2C:78:E9:48:A9:22:B2:77:0C:E3:79
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/Qz67AYnyfYkFLHjpSKkisncM43k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.52.0/22
193.135.152.0/23
193.135.164.0/23
193.135.252.0/23
193.247.78.0/23
193.247.93.0/24
193.247.100.0/24
193.247.102.0/24
193.247.120.0/22
193.247.184.0/23
193.247.239.0/24
193.247.251.0-193.247.253.255
IPv6:
2a00:efa0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:71:55:25:6e:dc:ca:dc:01:de:fd:b9:b7:a6:e8:58:68:f3:
c0:f6:78:c4:bd:38:0a:64:99:a1:a9:6b:d8:ba:ec:39:18:d1:
9f:4a:d0:cd:6a:fd:9d:dd:a0:d8:3d:ae:0b:c2:5c:83:3b:32:
ce:73:d5:04:ce:0b:c8:98:b9:7b:b7:c4:c8:ba:af:a6:e7:e0:
12:02:3a:ea:84:82:bf:0b:7d:a9:a0:13:a3:f6:c3:96:20:2e:
ac:7b:e9:e3:ce:ac:7b:f5:ee:76:a3:db:db:c7:83:ca:9c:3f:
72:af:66:41:f4:85:f8:62:ce:9e:8c:e2:1c:6a:f5:2a:88:06:
8b:e0:8c:55:f5:8c:53:3a:5e:aa:1e:b0:22:ee:81:5f:c7:1b:
7c:3c:f9:53:e6:2b:73:91:71:09:8a:df:21:66:ff:c9:eb:a6:
16:95:99:84:9f:88:9b:df:49:32:e3:8e:79:23:87:bc:d3:1f:
03:ad:86:7b:c3:95:58:ad:57:bf:49:e1:c1:64:e3:98:3d:01:
ad:12:fe:2e:80:a4:3a:82:d0:3c:a5:2e:77:f3:2f:9c:49:9a:
23:23:11:c3:b5:e4:59:23:ac:04:9e:98:a9:05:ef:29:3c:da:
c9:22:f9:88:35:3d:5c:86:db:e7:df:25:9a:09:02:4b:16:f3:
dc:db:7b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:40 2024 by rpki-client on console-ams.rpki-client.org