Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/qjTdpzacywQ7i3A-Ihn7ILcY5-w.roa
File: qjTdpzacywQ7i3A-Ihn7ILcY5-w.roa (raw, json)
Hash identifier: jQGiTYu1qOsf8GBuN4PFd/bE67SbTk0qooP6nuWQte8=
Subject key identifier: AA:34:DD:A7:36:9C:CB:04:3B:8B:70:3E:22:19:FB:20:B7:18:E7:EC
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 13F4D914
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/qjTdpzacywQ7i3A-Ihn7ILcY5-w.roa
Signing time: Sat 01 Jan 2022 06:57:33 +0000
ROA not before: Sat 01 Jan 2022 06:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1930
IP address blocks: 192.84.13.0/24 maxlen: 24
192.84.15.0/24 maxlen: 24
192.138.204.0/24 maxlen: 24
192.92.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334813460 (0x13f4d914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Jan 1 06:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa34dda7369ccb043b8b703e2219fb20b718e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:8a:fa:35:1f:e2:87:5e:f5:1b:d1:eb:de:
4f:f3:b6:cf:36:94:7c:50:73:b9:3d:cf:80:b6:31:
33:9a:22:e8:02:68:42:f1:f0:14:4a:1d:b2:0a:c3:
ca:83:ec:e8:e5:0c:88:07:11:98:a3:5b:0c:04:e7:
0d:98:36:e4:9c:d8:cb:d1:45:bc:e8:e4:fa:81:a0:
95:f5:29:a8:e1:6d:75:ae:c6:f1:95:04:81:25:c5:
f1:fa:04:af:fd:37:1f:7e:3d:b4:3d:1f:5d:90:36:
6f:61:64:9c:b9:d0:f6:84:de:de:e2:10:36:60:57:
44:e1:8b:fe:55:8b:db:08:7f:2f:6c:02:a8:a6:69:
e6:10:78:a9:e5:2f:0a:41:3c:3e:d2:2d:79:a6:00:
f9:77:17:a3:d9:7f:bd:78:c3:96:43:95:3b:3c:3d:
cb:98:6f:09:f9:36:67:b0:ef:70:a4:72:2f:f2:ed:
91:79:2b:fb:6d:f6:96:1b:ee:58:5d:a9:15:1c:fa:
d8:58:b8:ff:6a:4d:67:01:dc:d8:84:60:9c:ce:0f:
4b:c9:d7:dd:87:39:a6:6d:2a:3a:2c:2f:92:1d:f9:
a4:97:34:d8:e2:73:e0:5b:aa:d5:8a:1d:f2:1c:61:
68:8c:f0:3c:9e:a9:c7:57:8c:23:9d:1a:b0:03:56:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:34:DD:A7:36:9C:CB:04:3B:8B:70:3E:22:19:FB:20:B7:18:E7:EC
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/qjTdpzacywQ7i3A-Ihn7ILcY5-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.84.13.0/24
192.84.15.0/24
192.92.144.0/24
192.138.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:88:5b:2c:ff:6a:c2:9a:3f:fd:ac:db:df:c0:23:d3:2f:f2:
5c:12:82:d7:3c:01:f9:35:eb:8e:c4:b7:e3:7c:bf:90:88:16:
99:15:3e:aa:e7:8a:c6:18:2a:bb:81:c3:b1:09:8a:54:37:7a:
68:88:6d:99:c0:d5:8e:ff:61:81:bf:96:43:e7:ae:b0:64:54:
b1:fb:4c:0a:74:d1:2e:09:05:bd:1a:56:ad:0f:63:3e:d9:cc:
9f:60:a2:95:f2:60:09:3a:05:53:93:47:a0:52:fd:f7:7a:de:
23:5c:a1:10:45:f6:00:5d:99:68:d0:80:71:5c:cd:f1:be:3b:
0e:d9:fd:3c:82:59:08:32:a6:e7:d9:93:8c:1c:a6:ac:92:29:
4c:14:3b:a6:b8:82:f1:ce:5d:a3:5b:e2:11:78:0f:15:20:2a:
ec:92:3c:1c:31:72:ce:00:fe:56:f7:85:6d:f8:87:94:1a:22:
82:2c:7b:bc:44:2b:75:1a:c8:4f:68:3d:41:6f:1a:75:b1:3a:
3a:3f:2c:83:04:5d:3f:1e:99:90:98:b6:76:d3:73:99:96:04:
a5:5d:28:73:03:25:bf:63:54:41:86:35:11:7a:12:ef:0a:dc:
e4:5f:22:f8:50:b7:5e:4a:f8:15:4f:a5:4d:2e:6a:6a:35:b9:
13:a3:58:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:19 2024 by rpki-client on console-fra.rpki-client.org