Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/QT7SINCZHICS_RwMiNKATGTgCEQ.roa
File: QT7SINCZHICS_RwMiNKATGTgCEQ.roa (raw, json)
Hash identifier: OYzom42zunvw2vly2va65Cm+Wm7oI7SRR2RllPeigv0=
Subject key identifier: 41:3E:D2:20:D0:99:1C:80:92:FD:1C:0C:88:D2:80:4C:64:E0:08:44
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 03ED794B
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/QT7SINCZHICS_RwMiNKATGTgCEQ.roa
Signing time: Sat 01 Jan 2022 09:54:15 +0000
ROA not before: Sat 01 Jan 2022 09:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135377
IP address blocks: 23.90.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65894731 (0x3ed794b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 1 09:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=413ed220d0991c8092fd1c0c88d2804c64e00844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:4b:0e:2f:8c:99:ba:83:d8:71:03:36:3d:
0c:d8:62:0f:25:da:6c:d3:68:d7:34:8f:5f:10:85:
6a:f2:da:af:a7:84:cf:6f:54:5a:6d:6a:1b:e1:15:
0c:a6:60:7f:4f:bc:c0:48:41:de:96:0f:7b:ec:81:
55:b5:85:d6:97:ec:b6:9f:01:b0:ad:7c:48:06:59:
56:d8:30:48:d8:75:a6:5c:6d:72:6f:de:f4:db:8b:
2a:c6:34:ca:c8:60:54:33:81:74:c1:a4:b7:2e:67:
27:e1:45:17:b3:67:e0:60:0a:bc:c7:a8:0b:32:d2:
32:5e:64:c2:03:58:50:f9:fb:f0:26:8d:6a:aa:72:
01:00:f8:00:cc:9c:ec:7e:4e:c4:36:ef:b7:05:77:
96:e7:df:13:37:93:3b:ee:3f:a2:d2:b8:6a:85:13:
a6:91:da:fd:ea:a0:72:3a:75:9b:1b:7a:d1:58:6a:
8a:d2:2c:f7:1e:62:6d:ca:1b:13:1a:e7:65:d7:09:
ad:8d:b5:f8:a1:43:33:aa:d0:0a:1a:93:eb:56:b3:
cc:06:47:d4:c5:41:17:86:4c:c4:3e:4e:03:d6:d1:
a0:65:7d:6e:90:6f:bf:30:33:71:59:6e:f1:08:32:
f8:55:74:8c:db:b2:1a:3f:63:13:43:6a:6c:5f:43:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3E:D2:20:D0:99:1C:80:92:FD:1C:0C:88:D2:80:4C:64:E0:08:44
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/QT7SINCZHICS_RwMiNKATGTgCEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.90.156.0/24
Signature Algorithm: sha256WithRSAEncryption
17:26:8c:41:0d:d2:f2:ac:d1:69:8a:6e:a6:4b:b5:6a:d6:17:
6e:e7:e2:a0:aa:51:40:7d:f6:07:2a:32:c1:5a:e9:f7:cb:f7:
28:f2:af:bc:57:c3:25:e2:2a:1a:67:e3:91:93:f4:de:8a:a2:
69:08:bf:2b:36:1c:8a:c4:2e:65:5d:78:65:d9:07:ec:79:b7:
b6:59:a8:7b:f3:74:8d:13:b9:46:ce:6b:02:ad:e2:1b:83:a2:
71:9f:98:d0:53:3d:0f:ca:48:fd:62:06:69:fd:26:eb:73:cc:
03:fc:f1:3c:28:73:7c:84:29:2a:9d:b8:9b:08:51:c1:e2:c9:
87:69:75:89:18:25:b4:c9:e7:91:e8:5a:79:ae:c9:0d:ea:2e:
83:0d:ca:2d:e4:b0:71:da:5a:09:be:e2:c1:38:9c:50:46:b9:
52:5a:e3:57:1d:4c:11:29:0f:8f:e8:b8:f7:40:10:a4:b5:fb:
b4:a7:ae:e4:24:e8:04:c4:ce:64:47:44:5c:73:1f:cd:c1:11:
6e:a8:39:cc:48:13:e2:73:21:ba:0a:1c:e1:c1:3d:5c:0c:b1:
42:4c:e4:d1:ed:e8:30:82:d8:93:aa:b0:64:90:da:26:f3:12:
ec:1f:ca:6d:6c:b5:8d:37:33:28:3f:62:8f:31:6b:79:19:6b:
8a:c7:63:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+15SzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NTc3NmM3N2Y4ZWJlNzA5NGNhMDA3YWNlMWE5YzBiZmRjMmIzYWVjMB4XDTIyMDEw
MTA5NTQxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDEzZWQyMjBkMDk5
MWM4MDkyZmQxYzBjODhkMjgwNGM2NGUwMDg0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMkpSw4vjJm6g9hxAzY9DNhiDyXabNNo1zSPXxCFavLar6eE
z29UWm1qG+EVDKZgf0+8wEhB3pYPe+yBVbWF1pfstp8BsK18SAZZVtgwSNh1plxt
cm/e9NuLKsY0yshgVDOBdMGkty5nJ+FFF7Nn4GAKvMeoCzLSMl5kwgNYUPn78CaN
aqpyAQD4AMyc7H5OxDbvtwV3luffEzeTO+4/otK4aoUTppHa/eqgcjp1mxt60Vhq
itIs9x5ibcobExrnZdcJrY21+KFDM6rQChqT61azzAZH1MVBF4ZMxD5OA9bRoGV9
bpBvvzAzcVlu8Qgy+FV0jNuyGj9jE0NqbF9DAvcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRBPtIg0JkcgJL9HAyI0oBMZOAIRDAfBgNVHSMEGDAWgBQld2x3+OvnCUyg
B6zhqcC/3Cs67DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pYZHNkX2pyNXdsTW9BZXM0YW5Bdjl3ck91dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmEvNTdlMDhjLWNhM2EtNDA5OS1hZTc0LWU3ZGFlYzE5NGE2OS8x
L1FUN1NJTkNaSElDU19Sd01pTktBVEdUZ0NFUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEv
NTdlMDhjLWNhM2EtNDA5OS1hZTc0LWU3ZGFlYzE5NGE2OS8xL0pYZHNkX2pyNXds
TW9BZXM0YW5Bdjl3ck91dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdanDANBgkqhkiG9w0BAQsFAAOC
AQEAFyaMQQ3S8qzRaYpupku1atYXbufioKpRQH32ByoywVrp98v3KPKvvFfDJeIq
GmfjkZP03oqiaQi/KzYcisQuZV14ZdkH7Hm3tlmoe/N0jRO5Rs5rAq3iG4OicZ+Y
0FM9D8pI/WIGaf0m63PMA/zxPChzfIQpKp24mwhRweLJh2l1iRgltMnnkehaea7J
Deougw3KLeSwcdpaCb7iwTicUEa5UlrjVx1MESkPj+i490AQpLX7tKeu5CToBMTO
ZEdEXHMfzcERbqg5zEgT4nMhugoc4cE9XAyxQkzk0e3oMILYk6qwZJDaJvMS7B/K
bWy1jTczKD9ijzFreRlrisdj4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:30 2024 by rpki-client on console-fra.rpki-client.org