Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/qtQn_3m7pu5nVBl5QB34nyOwXXw.roa
File: qtQn_3m7pu5nVBl5QB34nyOwXXw.roa (raw, json)
Hash identifier: 5mjUYNU7WMFXZKGQvLb5ysc51PBax+B5W/urbfXLMfY=
Subject key identifier: AA:D4:27:FF:79:BB:A6:EE:67:54:19:79:40:1D:F8:9F:23:B0:5D:7C
Certificate issuer: /CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Certificate serial: D597B1
Authority key identifier: BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/qtQn_3m7pu5nVBl5QB34nyOwXXw.roa
Signing time: Sat 01 Jan 2022 02:50:56 +0000
ROA not before: Sat 01 Jan 2022 02:50:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202470
IP address blocks: 178.212.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13998001 (0xd597b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Validity
Not Before: Jan 1 02:50:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aad427ff79bba6ee67541979401df89f23b05d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:1e:48:25:3b:e1:f7:82:83:4c:25:95:40:
15:2d:ad:96:d1:6a:49:62:97:2e:6d:4c:88:11:99:
85:f5:1b:72:34:26:2d:2a:9b:b9:3e:be:79:43:cf:
f1:8d:d2:8a:51:85:e1:02:f5:85:f9:23:27:07:99:
1c:25:ba:b1:37:1e:04:56:1b:8b:06:dd:42:c9:f4:
2c:da:d8:64:d1:1f:e1:b0:19:a4:e1:55:63:f8:2e:
b6:43:62:30:14:ee:09:1f:50:0c:c7:5c:16:b6:53:
e2:91:7d:b2:c0:7e:22:c6:47:3a:17:d0:fb:d8:72:
0e:60:b4:45:37:21:27:a2:89:84:87:10:c9:e5:ab:
38:bb:da:1b:c3:eb:e8:0c:c2:70:97:46:e4:22:bd:
50:d4:7f:49:ac:16:8d:9d:76:03:e1:e9:28:6c:02:
96:46:74:98:68:32:6b:ef:05:39:91:71:20:e5:26:
74:94:a9:88:85:1b:0b:63:9c:86:f1:69:0a:7f:c5:
23:45:d1:ef:45:72:29:c2:28:27:3a:59:9f:90:d4:
61:8d:c8:18:6d:6d:52:71:8f:43:24:04:c9:8f:a8:
06:80:1a:0e:4c:00:ca:3f:1c:e3:1a:68:c9:05:ef:
1b:5a:d4:3e:04:44:8b:4b:8b:19:04:f3:c2:f8:33:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:27:FF:79:BB:A6:EE:67:54:19:79:40:1D:F8:9F:23:B0:5D:7C
X509v3 Authority Key Identifier:
keyid:BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/qtQn_3m7pu5nVBl5QB34nyOwXXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e3:4d:f6:63:e5:af:e2:56:3e:7e:12:e6:79:58:aa:0c:44:
e4:41:fc:73:9d:c7:fd:b3:69:29:ac:37:76:7f:bb:5c:f5:af:
7e:48:6f:3d:1a:a6:48:a4:b4:85:33:09:96:d1:d9:c6:25:fc:
98:a5:a2:a6:ea:6b:a2:77:4f:7a:6a:2a:3c:52:a5:8a:0c:ec:
4b:03:04:ce:b6:70:74:49:29:99:8c:fe:ab:31:db:4f:22:68:
f5:e7:35:5c:7e:ce:d9:3f:b9:7a:15:9b:0c:e5:6b:df:5f:81:
cd:be:5d:ae:52:1d:1f:fe:8c:14:85:17:cf:f1:03:4d:1e:2d:
29:23:fa:d1:82:de:76:0a:6f:16:55:69:4d:3f:0c:93:b9:11:
35:ab:6b:15:6b:dd:16:62:08:69:46:98:f6:72:d9:24:c7:aa:
17:3d:7b:b5:3e:00:ab:4f:2f:0f:ed:a4:e8:1b:53:65:d8:44:
15:eb:a4:32:d5:e3:b4:fe:78:ff:52:49:ad:9d:97:49:6f:c0:
c3:c7:4e:73:7a:1b:ea:56:06:d0:f8:0d:b3:c5:f8:4a:59:45:
ed:d8:81:87:e7:cb:39:a4:2e:88:70:be:90:32:30:f3:e9:f3:
d2:5f:c6:e4:c6:f0:9c:75:1b:14:e5:ac:3c:37:36:28:fb:0c:
0f:30:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:50 2023 by rpki-client on console-fra.rpki-client.org