Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/q1p_KIIv6VBC-P57e2seXnLkvpM.roa
File: q1p_KIIv6VBC-P57e2seXnLkvpM.roa (raw, json)
Hash identifier: jZNq8O6B8KIMN88rFRkGr26XVvZe22zEyYFpsaMkbZc=
Subject key identifier: AB:5A:7F:28:82:2F:E9:50:42:F8:FE:7B:7B:6B:1E:5E:72:E4:BE:93
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0183B90B7E77982AEA012A238DFAF6032CDA
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/q1p_KIIv6VBC-P57e2seXnLkvpM.roa
Signing time: Sat 08 Oct 2022 19:21:21 +0000
ROA not before: Sat 08 Oct 2022 19:21:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208476
IP address blocks: 194.180.225.0/24 maxlen: 24
185.231.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b9:0b:7e:77:98:2a:ea:01:2a:23:8d:fa:f6:03:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Oct 8 19:21:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab5a7f28822fe95042f8fe7b7b6b1e5e72e4be93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:75:4f:29:b5:74:a8:2a:a8:09:e0:68:78:
12:d2:59:c2:02:cc:6e:8f:10:b1:f1:87:83:b0:ac:
d4:78:70:d9:cb:ca:88:e3:79:c3:4d:81:3a:f9:b6:
f5:79:99:c4:2b:22:12:27:b4:53:72:ed:57:8d:90:
28:c8:fa:69:e1:54:6d:77:57:04:72:a4:02:d6:86:
d7:c5:98:42:01:89:e2:3a:28:cf:80:90:7c:a7:97:
97:23:29:b9:2a:3e:40:74:a4:3e:b9:7e:3c:61:52:
b7:b5:33:fe:30:1b:9e:21:f3:40:22:ab:f0:0a:9b:
21:0f:f2:5a:64:e9:5f:ad:a1:83:79:15:ec:81:59:
6f:44:d9:8d:31:31:c1:2b:d4:b3:26:9e:48:1f:17:
16:a7:21:70:1b:f3:49:96:1f:a4:13:d7:10:4c:11:
2f:21:5c:0d:06:92:a4:46:88:75:6d:94:67:6c:d4:
43:fb:45:11:8c:32:7c:c9:72:a4:a2:fa:c9:e0:b8:
1f:d4:80:3e:cf:14:78:ac:03:3c:87:bc:71:a0:5d:
f7:fb:1e:8b:6a:ea:73:6b:91:3e:01:06:53:58:23:
b2:50:4e:96:38:d8:87:30:d4:7f:4e:ac:96:b7:19:
01:7b:37:92:0f:10:34:83:4f:ba:1a:0a:07:15:6c:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5A:7F:28:82:2F:E9:50:42:F8:FE:7B:7B:6B:1E:5E:72:E4:BE:93
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/q1p_KIIv6VBC-P57e2seXnLkvpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.113.0/24
194.180.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0e:63:94:86:da:ae:f4:da:c2:f3:28:e4:c7:6b:b4:81:34:
c2:a7:ec:c0:cd:e6:46:25:0b:c3:33:30:c2:03:1f:22:6a:3e:
be:a5:de:34:11:b7:65:ff:09:2a:9f:90:80:aa:19:5b:61:39:
dd:c4:37:75:ac:24:e6:5a:03:59:87:a7:bf:c6:b6:f3:74:3e:
45:ba:69:d5:08:89:57:d5:86:cc:9f:62:c7:20:4b:b0:b9:37:
14:c7:c0:43:cb:23:45:af:75:74:f9:3d:61:31:ac:89:34:68:
fe:9c:e8:d8:a8:35:8c:4e:f6:43:a5:4a:ad:2c:ed:b2:01:44:
59:6e:15:40:7a:8b:cf:9b:a0:7c:de:c0:2b:1c:62:95:6e:e5:
b0:77:42:1d:e1:b2:13:3f:2e:09:58:06:fa:01:bf:0b:53:e4:
94:c9:f2:c8:af:73:1b:76:e8:e4:19:df:02:4f:40:88:94:de:
84:26:58:15:55:b1:d2:b6:d3:70:3e:cd:85:2c:2b:9e:4f:d2:
93:db:62:ed:eb:7f:48:7b:d7:79:c8:89:f9:b3:95:5e:37:9c:
70:fd:de:f4:4d:50:a2:42:f4:c6:d9:83:9c:12:0f:f4:64:c6:
7d:aa:bf:4f:9b:9d:ca:c8:f1:6d:2c:32:26:fd:2e:1d:40:1f:
5a:f7:8d:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYO5C353mCrqASojjfr2AyzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4N2I1OTRlNWU2NzEzYTViODBhNTQ4MWE1Y2U3MWU2NTJk
ODQ1NzMwHhcNMjIxMDA4MTkyMTIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjVhN2YyODgyMmZlOTUwNDJmOGZlN2I3YjZiMWU1ZTcyZTRiZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ51Tym1dKgqqAngaHgS0lnCAsxu
jxCx8YeDsKzUeHDZy8qI43nDTYE6+bb1eZnEKyISJ7RTcu1XjZAoyPpp4VRtd1cE
cqQC1obXxZhCAYniOijPgJB8p5eXIym5Kj5AdKQ+uX48YVK3tTP+MBueIfNAIqvw
CpshD/JaZOlfraGDeRXsgVlvRNmNMTHBK9SzJp5IHxcWpyFwG/NJlh+kE9cQTBEv
IVwNBpKkRoh1bZRnbNRD+0URjDJ8yXKkovrJ4Lgf1IA+zxR4rAM8h7xxoF33+x6L
aupza5E+AQZTWCOyUE6WONiHMNR/TqyWtxkBezeSDxA0g0+6GgoHFWy/4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKtafyiCL+lQQvj+e3trHl5y5L6TMB8GA1UdIwQY
MBaAFMh7WU5eZxOluApUgaXOceZS2EVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYt
MzhjYjZlNDE2ZjNhLzEvcTFwX0tJSXY2VkJDLVA1N2Uyc2VYbkxrdnBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYtMzhjYjZlNDE2ZjNh
LzEveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuedxAwQA
wrThMA0GCSqGSIb3DQEBCwUAA4IBAQBKDmOUhtqu9NrC8yjkx2u0gTTCp+zAzeZG
JQvDMzDCAx8iaj6+pd40Ebdl/wkqn5CAqhlbYTndxDd1rCTmWgNZh6e/xrbzdD5F
umnVCIlX1YbMn2LHIEuwuTcUx8BDyyNFr3V0+T1hMayJNGj+nOjYqDWMTvZDpUqt
LO2yAURZbhVAeovPm6B83sArHGKVbuWwd0Id4bITPy4JWAb6Ab8LU+SUyfLIr3Mb
dujkGd8CT0CIlN6EJlgVVbHSttNwPs2FLCueT9KT22Lt639Ie9d5yIn5s5VeN5xw
/d70TVCiQvTG2YOcEg/0ZMZ9qr9Pm53KyPFtLDIm/S4dQB9a940a
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org