Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/qxqMh00Sxx4I18ZG5EmNOmfKsV4.roa
File: qxqMh00Sxx4I18ZG5EmNOmfKsV4.roa (raw, json)
Hash identifier: ALhKNf0/xGq1aGbJ9UZcEkKb0uSykFU/Bdq/kXBJ7x0=
Subject key identifier: AB:1A:8C:87:4D:12:C7:1E:08:D7:C6:46:E4:49:8D:3A:67:CA:B1:5E
Certificate issuer: /CN=13eb7b7df835b113abb3f626f6203fee97b1992c
Certificate serial: 021EFF46
Authority key identifier: 13:EB:7B:7D:F8:35:B1:13:AB:B3:F6:26:F6:20:3F:EE:97:B1:99:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/qxqMh00Sxx4I18ZG5EmNOmfKsV4.roa
Signing time: Wed 25 May 2022 19:29:58 +0000
ROA not before: Wed 25 May 2022 19:29:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201990
IP address blocks: 185.205.84.0/22 maxlen: 22
193.46.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35585862 (0x21eff46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13eb7b7df835b113abb3f626f6203fee97b1992c
Validity
Not Before: May 25 19:29:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab1a8c874d12c71e08d7c646e4498d3a67cab15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:97:ea:4c:61:48:d3:93:54:ea:43:1f:11:
1e:ed:44:8a:35:b7:af:f3:cc:67:e8:5d:8f:87:6c:
4e:90:42:47:27:45:5b:a9:07:d5:eb:e5:ac:df:b1:
6d:8c:e5:9a:29:b5:ad:47:4d:25:34:60:63:89:b8:
9e:b7:79:cd:b5:54:a0:e8:b9:2e:90:65:c0:80:62:
d3:45:79:01:bf:53:3f:95:5e:10:50:eb:5b:c6:fb:
da:10:2e:d1:ce:f5:d9:d8:61:14:77:26:15:56:0f:
74:51:c5:66:36:23:6c:fb:42:e9:5f:a7:64:03:50:
a9:da:ea:6d:64:a0:f1:9e:ac:84:84:4f:04:93:b0:
c9:41:a7:8b:2f:d5:c6:7b:24:6f:19:f4:b3:fd:c4:
a9:60:83:c9:19:b9:e8:8a:c4:35:cc:e5:bc:a6:ba:
ea:ee:da:54:be:64:dc:33:8e:f5:de:bd:1e:90:4d:
49:01:2e:28:ad:0d:19:6a:4d:27:70:40:d0:ec:9d:
00:2d:8d:9b:5b:3b:b4:25:a5:bc:df:ec:e8:2b:d6:
44:e9:4d:f5:82:31:bb:82:ff:cb:d4:c3:a1:bf:24:
65:3d:9c:6e:1c:ed:99:d1:1b:51:7b:45:1d:40:e6:
88:90:11:f5:19:54:d8:72:27:da:9d:e0:d9:99:e5:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:8C:87:4D:12:C7:1E:08:D7:C6:46:E4:49:8D:3A:67:CA:B1:5E
X509v3 Authority Key Identifier:
keyid:13:EB:7B:7D:F8:35:B1:13:AB:B3:F6:26:F6:20:3F:EE:97:B1:99:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/qxqMh00Sxx4I18ZG5EmNOmfKsV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.84.0/22
193.46.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:82:f2:cb:25:4e:57:94:89:6a:7d:f7:bf:80:91:28:d2:58:
b2:86:7a:9b:90:9a:6c:d7:2b:69:3e:fa:f8:19:78:98:af:d6:
58:51:59:a7:ba:99:1e:12:c4:2a:33:ee:c2:cc:aa:6e:95:a1:
1f:78:9d:79:13:48:25:30:f3:14:ac:7b:42:6c:e6:87:f3:d4:
9f:b0:26:36:05:88:7c:fb:18:60:7d:5a:f0:b8:67:f3:33:ab:
65:3e:83:e2:6d:5b:f9:5a:67:30:77:b5:7e:60:7a:32:0a:33:
a5:06:b2:f9:22:ae:d3:80:10:73:84:59:00:5e:31:a2:62:58:
af:7e:a3:37:e5:65:a3:db:bb:f7:29:30:90:bc:1d:16:88:91:
5e:ce:18:eb:b6:87:16:f1:a1:20:e5:b5:d3:1b:dd:24:cc:ee:
4e:73:85:47:0f:fc:9f:09:19:fe:24:20:94:0a:5e:8d:fd:08:
54:1f:d0:6c:e4:df:8a:d7:d6:14:70:74:d7:b2:f0:b5:a3:3c:
bd:3d:37:92:d9:7a:c9:8b:20:0c:21:36:c9:70:4e:eb:21:ea:
a7:3d:60:b2:d5:0f:dc:49:b9:90:af:6c:9d:97:ea:37:7f:e8:
19:a5:f3:d8:a2:a0:65:94:45:e1:ef:39:fd:00:83:76:f3:6f:
bc:7b:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:36 2024 by rpki-client on console-ams.rpki-client.org