Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/qj0We2oAkORf6OM3Pu4EP3_0YiQ.roa
File: qj0We2oAkORf6OM3Pu4EP3_0YiQ.roa (raw, json)
Hash identifier: ByVrm8pxGATrW2Rf8wFfBlxKrtpvl5fGtQx0hSxtobA=
Subject key identifier: AA:3D:16:7B:6A:00:90:E4:5F:E8:E3:37:3E:EE:04:3F:7F:F4:62:24
Certificate issuer: /CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Certificate serial: 0A2CD613
Authority key identifier: C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/qj0We2oAkORf6OM3Pu4EP3_0YiQ.roa
Signing time: Sat 01 Jan 2022 03:02:49 +0000
ROA not before: Sat 01 Jan 2022 03:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204570
IP address blocks: 185.246.148.0/22 maxlen: 24
2a0d:8680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170710547 (0xa2cd613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Validity
Not Before: Jan 1 03:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa3d167b6a0090e45fe8e3373eee043f7ff46224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:25:5b:27:1d:a9:79:79:a9:79:88:be:9c:
5d:87:20:a4:2d:3a:a4:2c:38:9f:96:5b:ea:5c:dc:
5e:29:04:5c:7d:97:6c:0a:56:fd:71:e9:68:cd:33:
7c:b0:6f:ff:05:bc:a4:df:b7:a2:3b:24:2e:48:1b:
42:90:1b:e1:7c:04:95:2a:0b:4e:91:41:08:33:33:
c3:9e:4c:f9:50:1c:c0:d1:b6:e5:e0:26:cc:41:eb:
c6:31:d8:e0:06:62:0e:0b:93:bb:89:7a:76:0c:60:
0d:4e:13:27:ff:70:7c:40:01:c5:76:74:eb:00:cb:
74:e5:72:cf:5a:cc:2d:13:26:76:17:1e:7c:fa:87:
9c:64:9c:5d:2a:6f:42:1f:1c:32:55:a1:dc:34:46:
25:14:05:df:30:5a:91:f4:2f:fb:42:2c:aa:c6:e4:
49:56:77:8e:a5:b2:2d:c3:74:f2:14:0e:75:65:5c:
92:a8:75:a4:3a:bf:58:51:2f:2e:e2:18:3b:44:04:
28:e3:83:6d:17:9f:fb:bb:e7:1d:41:83:12:49:3c:
2c:0f:6a:fe:f0:08:ac:6a:1a:2a:a0:67:ac:53:36:
a0:74:c0:eb:a1:a6:11:b1:5e:14:63:af:c5:ab:38:
15:c9:fb:b4:1e:34:23:20:4f:f9:b2:89:63:a5:fd:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:16:7B:6A:00:90:E4:5F:E8:E3:37:3E:EE:04:3F:7F:F4:62:24
X509v3 Authority Key Identifier:
keyid:C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/qj0We2oAkORf6OM3Pu4EP3_0YiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.148.0/22
IPv6:
2a0d:8680::/32
Signature Algorithm: sha256WithRSAEncryption
97:3c:87:0b:62:77:e9:b8:57:34:8e:13:29:d3:6f:eb:0b:57:
f8:d8:f5:02:3b:5f:a0:d8:47:06:e4:90:62:23:1e:5a:71:2f:
1f:e6:5d:03:cd:8b:e9:fd:b1:5d:c9:c5:ae:4b:e3:34:8e:bb:
f7:c0:3a:a0:c6:82:52:8e:03:9d:40:fc:fe:b3:10:b9:db:32:
4f:27:21:15:d2:ba:6b:4e:f5:5d:cf:5e:54:3e:ef:e7:b7:9a:
1c:40:58:4c:08:58:2c:ae:c7:83:57:4e:dd:38:8e:cb:96:1a:
a1:db:b1:ba:f7:c8:14:45:99:d6:79:57:74:8b:5b:d6:4d:db:
21:21:03:df:4a:1c:75:56:8a:33:ed:6f:91:82:da:dd:cc:0e:
f2:e9:69:ad:c8:e2:1b:eb:3d:f8:12:89:71:46:26:8f:a5:2b:
cb:56:1f:db:b9:ad:13:52:42:67:00:32:22:1c:cb:c4:89:1f:
ed:10:a3:74:63:9e:96:5f:f5:35:99:8b:74:9d:fe:41:f4:d1:
30:07:0a:74:4b:4d:08:d9:9c:d6:b1:7a:8d:6f:06:54:3a:6d:
40:32:b8:65:db:5b:57:18:16:03:4f:cc:35:9d:47:96:e1:5b:
77:8e:2f:e6:61:29:41:f5:d6:e4:d7:44:54:4a:7a:2f:73:6f:
fe:3a:7b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:30 2024 by rpki-client on console-fra.rpki-client.org