Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zqc-WhXBRhOT0B0Md8X-Q986AsQ.roa
File: zqc-WhXBRhOT0B0Md8X-Q986AsQ.roa (raw, json)
Hash identifier: rlR6gEbn5MX+apSqLaSXTyR3QyZkXaF0R6/MeBwC9FA=
Subject key identifier: CE:A7:3E:5A:15:C1:46:13:93:D0:1D:0C:77:C5:FE:43:DF:3A:02:C4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 424C0F9A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zqc-WhXBRhOT0B0Md8X-Q986AsQ.roa
Signing time: Sat 01 Jan 2022 14:02:52 +0000
ROA not before: Sat 01 Jan 2022 14:02:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 193.235.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112280986 (0x424c0f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:02:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cea73e5a15c1461393d01d0c77c5fe43df3a02c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:bc:45:8f:94:f1:81:d6:f4:bd:b0:48:3f:
42:9b:72:f4:36:a9:5e:de:13:32:ee:d0:e9:3c:99:
d7:71:43:ef:47:3b:d9:66:c1:cd:db:7c:0e:a9:68:
46:b6:19:44:7a:5f:8a:df:ff:1d:3e:27:3b:d0:60:
fe:35:55:f0:dd:68:d4:51:0b:8c:2c:cb:2e:66:2d:
53:d4:b9:9e:26:e7:8b:69:84:d5:2f:2e:fa:ba:21:
20:5a:d8:66:f8:57:81:32:d4:cb:c5:30:a0:ea:3e:
c7:9e:b4:09:e3:22:2b:4e:07:84:b0:08:6b:02:d9:
89:99:ab:49:75:61:53:da:5f:56:8e:05:cd:4b:92:
4d:eb:87:b1:75:61:d1:ab:61:dd:1e:19:1e:55:b2:
34:8c:06:85:4b:6f:ed:aa:ae:ee:e4:61:39:35:44:
7b:b8:33:d6:c9:b1:15:49:4a:af:d1:34:44:81:73:
02:e4:39:71:2c:de:3c:42:59:90:f9:2e:f5:6a:50:
ad:93:c2:c3:49:ac:d1:15:ed:2b:5b:f6:f8:aa:cf:
95:af:ab:11:51:40:ed:73:6d:ea:6d:3f:3e:c3:ad:
fc:f9:dc:49:bf:50:a3:08:a2:0f:18:0b:2b:93:88:
51:85:db:67:4d:81:82:01:63:92:e2:0b:e7:9f:18:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:3E:5A:15:C1:46:13:93:D0:1D:0C:77:C5:FE:43:DF:3A:02:C4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zqc-WhXBRhOT0B0Md8X-Q986AsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:41:f1:48:fb:b9:06:69:fa:2b:61:c3:7f:ea:ca:4d:5c:5f:
c6:7b:70:fa:cf:25:95:8f:51:37:12:4d:1d:0c:f8:54:de:fc:
a1:8a:1e:67:8c:da:1e:6e:ac:88:9e:4f:7f:b7:22:ad:04:f1:
88:95:65:f0:48:f9:05:a3:3c:83:79:7d:9b:c4:d1:0c:4e:4f:
94:d0:7f:f6:68:5a:7b:af:25:c3:7c:5c:6e:d7:8f:c0:d3:ca:
48:27:ff:86:be:12:ea:2d:ba:60:f8:62:47:bc:0c:a8:5d:dd:
79:da:93:13:a3:82:49:21:c2:5f:b3:c1:e5:18:d4:00:02:7d:
ed:13:f7:45:59:28:d2:c5:56:d6:85:ef:82:76:22:39:aa:d0:
2c:bf:d5:b5:78:77:a2:b7:74:95:56:59:5e:5c:4b:52:6d:86:
18:94:89:9a:80:6d:ab:5a:ca:c6:b5:46:d9:ca:17:bb:8d:49:
99:58:7a:9d:fc:04:41:82:36:87:fe:d2:0d:4d:fc:75:c7:08:
80:62:f6:4d:e3:dd:82:11:29:5e:8d:84:72:4c:de:f9:77:34:
19:4b:b1:5a:79:4f:ef:7c:69:91:d5:c9:38:49:db:28:04:5b:
19:b5:42:e5:49:2c:7a:b0:4b:b2:b0:a9:15:2e:bb:67:5f:66:
49:72:0a:71
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQkwPmjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTM1YzdmNTcxZWVmZWI2NzQwNGFiNmM0NWZkNDc1NTUxYWRhZjFiMB4XDTIyMDEw
MTE0MDI1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2VhNzNlNWExNWMx
NDYxMzkzZDAxZDBjNzdjNWZlNDNkZjNhMDJjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN/PvEWPlPGB1vS9sEg/Qpty9DapXt4TMu7Q6TyZ13FD70c7
2WbBzdt8DqloRrYZRHpfit//HT4nO9Bg/jVV8N1o1FELjCzLLmYtU9S5nibni2mE
1S8u+rohIFrYZvhXgTLUy8UwoOo+x560CeMiK04HhLAIawLZiZmrSXVhU9pfVo4F
zUuSTeuHsXVh0ath3R4ZHlWyNIwGhUtv7aqu7uRhOTVEe7gz1smxFUlKr9E0RIFz
AuQ5cSzePEJZkPku9WpQrZPCw0ms0RXtK1v2+KrPla+rEVFA7XNt6m0/PsOt/Pnc
Sb9QowiiDxgLK5OIUYXbZ02BggFjkuIL558YJeECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTOpz5aFcFGE5PQHQx3xf5D3zoCxDAfBgNVHSMEGDAWgBQhNcf1ce7+tnQE
q2xF/UdVUa2vGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8x
L3pxYy1XaFhCUmhPVDBCME1kOFgtUTk4NkFzUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
NjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8xL0lUWEg5WEh1X3Ja
MEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHrzzANBgkqhkiG9w0BAQsFAAOC
AQEAb0HxSPu5Bmn6K2HDf+rKTVxfxntw+s8llY9RNxJNHQz4VN78oYoeZ4zaHm6s
iJ5Pf7cirQTxiJVl8Ej5BaM8g3l9m8TRDE5PlNB/9mhae68lw3xcbtePwNPKSCf/
hr4S6i26YPhiR7wMqF3dedqTE6OCSSHCX7PB5RjUAAJ97RP3RVko0sVW1oXvgnYi
OarQLL/VtXh3ord0lVZZXlxLUm2GGJSJmoBtq1rKxrVG2coXu41JmVh6nfwEQYI2
h/7SDU38dccIgGL2TePdghEpXo2Eckze+Xc0GUuxWnlP73xpkdXJOEnbKARbGbVC
5UkserBLsrCpFS67Z19mSXIKcQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org