Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/QQUfav-wPYUZiVGESVVYM9RhL1E.roa
File: QQUfav-wPYUZiVGESVVYM9RhL1E.roa (raw, json)
Hash identifier: pYyi8pFO4JGJ+yRR5QMz1LvcJZgQC+lnSug2sTscWck=
Subject key identifier: 41:05:1F:6A:FF:B0:3D:85:19:89:51:84:49:55:58:33:D4:61:2F:51
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 018B46E7024F7E682886B7292412A43256AC
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/QQUfav-wPYUZiVGESVVYM9RhL1E.roa
Signing time: Thu 19 Oct 2023 07:47:06 +0000
ROA not before: Thu 19 Oct 2023 07:47:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 194.56.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:e7:02:4f:7e:68:28:86:b7:29:24:12:a4:32:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Oct 19 07:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41051f6affb03d851989518449555833d4612f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:b0:37:12:5a:23:d0:60:96:6b:86:a0:88:
35:e1:a5:3c:7a:37:61:7c:73:8b:9b:a7:83:88:00:
fc:91:3d:e1:3c:f1:97:94:33:93:19:82:97:6a:4e:
4f:76:0c:7c:13:1e:21:6d:50:2c:d2:02:b4:d0:85:
84:df:e9:71:98:65:c7:0e:2d:b4:3c:24:3c:26:7f:
a2:d9:41:cc:a5:5d:30:ce:53:e5:cc:a7:9c:37:de:
af:49:31:41:b5:ed:0c:c2:59:ee:96:68:8c:a9:e3:
14:8d:8f:6d:b3:db:44:4b:54:45:1b:c5:2f:1a:cd:
20:f0:1b:3f:ae:2b:71:ca:7c:11:56:34:e0:d9:24:
93:44:d6:00:2d:fd:ae:1b:bc:9d:49:74:40:11:8f:
c4:3e:00:6a:b6:17:71:58:9b:89:e3:c2:d5:69:2d:
3f:ea:8e:86:10:2f:05:b1:cc:c6:c5:98:3e:de:d5:
7c:72:c1:c9:d8:aa:a6:f7:0a:7c:cf:1e:91:62:4f:
9b:42:a4:94:39:ac:f4:a4:5f:2b:81:ed:ef:fa:b1:
b5:50:b7:3a:eb:e1:fd:e7:77:ff:0f:1d:ab:7d:e0:
e0:a3:60:83:f6:da:a0:e1:cc:d3:00:1a:e4:0f:9a:
e1:19:44:00:26:f2:25:b5:bd:58:00:6f:83:b1:64:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:1F:6A:FF:B0:3D:85:19:89:51:84:49:55:58:33:D4:61:2F:51
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/QQUfav-wPYUZiVGESVVYM9RhL1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.244.0/24
Signature Algorithm: sha256WithRSAEncryption
98:64:ed:a0:02:5d:ab:24:a2:b5:93:d4:ff:48:a0:91:1c:7d:
62:3a:97:e0:3e:8f:9e:a4:0e:27:32:86:65:dd:ea:9e:aa:93:
19:2b:21:4c:75:7b:5d:19:f6:bf:a1:d7:b0:51:28:93:ea:64:
31:aa:56:0a:f4:d7:35:ef:71:b3:b2:8b:6c:5d:a5:70:33:df:
e2:57:98:18:59:05:3c:3e:e4:c7:7e:6f:e5:53:9d:d9:00:e4:
c0:3c:d1:38:fc:9b:78:3c:83:07:a6:91:92:25:6c:70:bf:39:
ad:98:a8:b1:2c:72:af:25:26:ab:46:7b:5d:c9:fe:7a:ec:dd:
bb:81:95:14:b5:19:d8:9b:f2:ea:97:65:52:e5:25:97:0e:d3:
43:0d:5e:1c:8b:b4:23:73:c9:dd:a8:2b:89:28:e6:56:a0:4e:
7a:85:94:dd:74:f6:76:26:b0:4f:65:56:78:9f:fc:6b:11:c1:
0d:0e:92:f3:a5:88:2c:a8:78:0c:9c:9f:e2:87:a1:af:3f:40:
34:52:df:f5:d1:4b:f4:a1:93:bc:43:69:1c:47:31:50:51:0c:
ce:ca:a6:3c:46:7c:53:52:dc:4d:59:34:96:10:14:b3:0d:41:
a1:05:66:7a:6a:2e:48:41:6d:8f:11:78:31:10:d3:f2:10:b2:
7a:45:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:35:03 2025 by rpki-client