Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/qQuPGjd5lLJ3c-Eg4AKDmT6TFrY.roa
File: qQuPGjd5lLJ3c-Eg4AKDmT6TFrY.roa (raw, json)
Hash identifier: M+MKqiRDkdfvdHQMGa826li1azfw6oIufKMFUKJzy1o=
Subject key identifier: A9:0B:8F:1A:37:79:94:B2:77:73:E1:20:E0:02:83:99:3E:93:16:B6
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 0183E06F5701BAD1BFC1D7C597BA2668FF52
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/qQuPGjd5lLJ3c-Eg4AKDmT6TFrY.roa
Signing time: Sun 16 Oct 2022 10:55:36 +0000
ROA not before: Sun 16 Oct 2022 10:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 79.132.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e0:6f:57:01:ba:d1:bf:c1:d7:c5:97:ba:26:68:ff:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Oct 16 10:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a90b8f1a377994b27773e120e00283993e9316b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:2c:d5:91:73:1c:cc:ff:cc:54:11:f6:65:
9a:7b:6e:f5:30:e5:54:f4:72:95:ea:09:f1:97:64:
e9:84:f2:b2:92:b5:e4:16:17:79:8b:ab:e7:a8:4d:
0b:1f:1f:0b:ee:e4:b5:7a:5b:ee:7a:58:7a:c5:9d:
d5:b9:b9:f5:43:32:1b:00:c4:ce:55:07:ce:84:cd:
c8:d7:d1:f9:69:4f:24:74:d9:49:bd:e5:d1:e0:85:
b9:00:84:6b:0e:42:9d:62:f2:04:c5:fa:82:c1:22:
c0:eb:5d:3f:e1:80:0c:0e:ea:99:52:0c:f0:ac:7d:
4d:82:cb:ee:c5:33:b1:b5:9a:cc:19:1a:cc:43:9c:
5f:79:b3:14:a4:7c:73:08:b7:da:dd:41:d6:ab:31:
86:eb:01:e3:bb:ff:9a:22:3e:0a:1b:ef:96:d7:ff:
ea:f1:e7:9f:bd:bb:d5:2d:b6:99:d1:5b:db:ec:3a:
51:bd:50:7b:6e:c9:3e:bd:45:de:22:10:5e:30:ce:
12:14:84:d0:5a:43:32:6c:82:0c:50:38:ca:bc:61:
ab:c2:3e:99:fe:c1:8c:00:d9:b9:70:d8:3f:7e:d0:
ab:a2:6e:6e:f4:29:f8:df:92:31:cb:23:8e:e4:6a:
a4:ab:c0:28:1f:3e:4a:95:09:27:23:f9:87:6b:4d:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0B:8F:1A:37:79:94:B2:77:73:E1:20:E0:02:83:99:3E:93:16:B6
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/qQuPGjd5lLJ3c-Eg4AKDmT6TFrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.194.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:2c:a3:e8:a9:2a:45:32:a3:c9:3f:7c:05:97:2e:91:82:6f:
03:1f:a6:83:75:3a:48:eb:79:7c:98:e5:28:fc:c8:3a:e4:8a:
d5:10:fd:71:0b:d3:fd:6a:56:46:87:63:c4:93:e2:a5:e6:27:
04:f9:6a:f1:e5:47:34:5c:97:8d:73:2c:8d:1d:dc:99:a4:43:
66:17:e5:3f:5d:cd:13:8a:8b:98:3f:a2:0e:ff:18:02:79:83:
1d:21:97:9b:06:ff:fd:e7:a5:04:ca:de:8e:9d:16:08:ec:7f:
79:fd:0b:df:57:78:30:1e:b9:7a:3f:fd:06:00:5d:3d:3e:c6:
61:73:12:1f:2e:1a:17:52:f6:17:f4:86:06:fe:5e:9f:53:3e:
d2:ba:97:91:91:b2:57:6b:d6:47:20:8c:2f:29:18:29:53:67:
15:3c:73:72:cb:ba:9b:b3:1c:d6:b5:11:02:ec:91:e7:13:82:
bf:ec:08:fd:a9:64:a3:37:d3:14:35:39:fa:cc:eb:e0:39:52:
7b:0d:14:31:06:7a:ba:c5:50:49:0e:5b:c8:92:f1:ec:5f:ee:
86:8b:e7:1a:31:9e:d4:2e:2c:6f:b4:35:b9:b2:f1:ad:1b:fe:
51:cd:ea:42:fe:be:76:56:2e:d8:fd:5f:0f:4f:52:37:ef:80:
19:82:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:08 2024 by rpki-client on console-fra.rpki-client.org