Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/QPMnRA-2vD6HGdlrsxeQ3zROkZA.roa
File: QPMnRA-2vD6HGdlrsxeQ3zROkZA.roa (raw, json)
Hash identifier: N84On6XVy3dT7Lr2sP2wJNS+v5VL4dCfIV8JBHLvesM=
Subject key identifier: 40:F3:27:44:0F:B6:BC:3E:87:19:D9:6B:B3:17:90:DF:34:4E:91:90
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 0F2A0B3F
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/QPMnRA-2vD6HGdlrsxeQ3zROkZA.roa
Signing time: Sat 01 Jan 2022 09:58:50 +0000
ROA not before: Sat 01 Jan 2022 09:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15490
IP address blocks: 185.141.252.0/22 maxlen: 24
185.141.252.0/24 maxlen: 24
2a07:2780::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254413631 (0xf2a0b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Jan 1 09:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40f327440fb6bc3e8719d96bb31790df344e9190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:74:f7:08:cd:8a:62:04:19:44:25:b9:77:
a6:91:52:76:4d:d2:01:2d:c7:f6:de:07:08:31:54:
ae:46:0d:b3:4e:4e:0f:9b:50:88:32:43:5e:e6:4d:
3b:25:07:22:a9:08:81:12:ff:1e:6d:ad:cc:c3:4a:
68:3e:49:51:c9:fe:38:14:c6:e8:a3:b2:65:02:68:
72:e6:93:c2:de:cc:f4:ca:dd:05:26:fe:f1:6e:97:
46:5d:f2:67:89:95:87:21:3f:1f:bd:3f:43:a6:85:
e2:cc:de:98:37:ff:5c:0e:74:cc:a5:7a:51:b6:91:
3c:0c:73:f4:90:9f:56:54:87:e1:2d:26:44:05:ac:
80:24:5f:75:a3:73:22:a5:09:64:9e:d4:5d:ed:66:
e4:14:36:a8:8c:24:19:90:d8:35:6b:29:9b:4c:89:
4a:97:0c:a1:ce:ac:df:29:4e:80:4a:54:95:ed:33:
cc:bb:f8:09:8c:67:cd:c3:f4:1a:e7:d9:f9:51:76:
3f:5b:eb:7d:01:1f:d0:37:09:2b:b1:97:f4:71:be:
d9:ce:52:88:15:f3:0c:81:18:f9:65:c0:ca:98:a9:
0c:85:60:e1:c1:2b:18:af:7c:dc:9f:13:45:f5:2a:
e8:56:45:d6:c1:a2:cf:e1:8f:85:bf:8f:9e:c7:4a:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F3:27:44:0F:B6:BC:3E:87:19:D9:6B:B3:17:90:DF:34:4E:91:90
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/QPMnRA-2vD6HGdlrsxeQ3zROkZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.252.0/22
IPv6:
2a07:2780::/29
Signature Algorithm: sha256WithRSAEncryption
23:9a:2c:62:18:9a:2a:d8:ba:8e:62:47:32:a4:c6:c9:8b:c4:
2d:9f:5d:55:e7:22:43:5d:3c:5f:01:52:36:ed:ba:93:65:e1:
f8:ec:b7:bf:c5:ed:d3:a4:dc:92:0e:4a:0e:21:83:78:75:00:
ed:56:7b:f0:88:f6:30:06:20:fc:3f:f9:9a:7d:1f:c5:21:bf:
5f:bb:63:6c:e3:df:7a:b8:49:c9:ac:2a:39:8d:3e:b3:49:16:
02:c4:b5:62:10:7e:27:c9:01:41:9d:28:6d:52:13:7e:d9:91:
b4:a6:29:84:8d:b7:8e:87:6a:f0:ce:1f:ae:15:36:51:8f:13:
3a:04:3b:27:88:68:bd:31:59:e5:8a:d9:f8:5e:9c:6e:69:98:
a8:50:a5:a6:f6:f0:3b:ec:20:bd:0d:4d:6a:00:71:8b:b5:7f:
64:c9:4e:3a:ad:04:15:80:5d:98:f3:ac:90:dd:13:a0:e5:8f:
fb:c3:38:ef:ce:d7:04:92:d6:92:d4:c8:7c:22:96:4d:1b:5a:
6e:c4:b6:25:f0:e0:a5:05:74:ab:1e:47:67:2c:fa:31:9b:22:
18:0e:28:c0:d6:b5:38:ef:96:25:4e:1d:e9:df:84:78:22:f6:
11:51:54:64:ee:2b:0e:d4:93:14:aa:1e:53:0c:82:28:2d:26:
2b:8a:95:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:44 2023 by rpki-client on console-ams.rpki-client.org