Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/qUZooLjG6npaUMgnwnTCaMV-Q18.roa
File: qUZooLjG6npaUMgnwnTCaMV-Q18.roa (raw, json)
Hash identifier: xvk0o5rPJxKzHNRjHry+j4JOkFO9hjm/uXgeBVXopeI=
Subject key identifier: A9:46:68:A0:B8:C6:EA:7A:5A:50:C8:27:C2:74:C2:68:C5:7E:43:5F
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 0184BE8C10093056FB7A16D6EB0923A8817C
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/qUZooLjG6npaUMgnwnTCaMV-Q18.roa
Signing time: Mon 28 Nov 2022 14:02:40 +0000
ROA not before: Mon 28 Nov 2022 14:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198101
IP address blocks: 185.52.216.0/22 maxlen: 24
185.74.204.0/22 maxlen: 24
2a04:bf80::/29 maxlen: 48
2a03:4760::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:8c:10:09:30:56:fb:7a:16:d6:eb:09:23:a8:81:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Nov 28 14:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a94668a0b8c6ea7a5a50c827c274c268c57e435f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:30:85:11:6d:ea:54:5c:47:a6:f9:95:ee:
bb:d8:57:96:9f:11:2d:f8:e5:d0:bd:a7:9e:5e:0f:
fb:b7:8f:da:4b:14:3f:ca:68:ec:e1:4e:ef:b6:05:
30:38:1e:4b:0b:79:dd:3f:b0:be:86:9d:02:99:ef:
30:86:f5:48:fc:07:35:59:68:93:dd:8e:f3:63:17:
27:c2:7c:3b:41:15:f9:10:74:24:b9:20:34:00:1b:
c5:1c:36:34:1e:29:be:00:c4:b2:c4:47:5b:e2:63:
6e:c5:05:3f:a8:1d:70:94:80:1f:d4:58:40:ea:f6:
60:f1:fe:31:1b:05:26:f4:0a:08:4b:34:2f:79:fc:
40:68:a7:ed:c5:20:4e:40:08:bd:20:d4:3d:7c:3a:
33:d1:a3:b5:9f:92:0b:53:b4:55:2c:2f:30:29:84:
52:f7:d4:11:3d:01:9d:ed:ec:12:87:eb:1c:2c:85:
db:39:53:c5:d9:0e:0d:db:11:a8:ef:41:cd:79:38:
cc:eb:03:6e:fd:4f:2a:c3:5e:74:20:41:e5:b8:6e:
e4:8a:ce:cc:a8:dc:05:41:a5:ac:c5:8a:3d:f1:88:
5f:58:a2:4d:f6:ab:7b:8b:44:f1:e5:62:2d:4b:a9:
36:5d:5e:2b:1c:03:70:ad:bb:12:b6:7c:b0:11:9f:
a9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:46:68:A0:B8:C6:EA:7A:5A:50:C8:27:C2:74:C2:68:C5:7E:43:5F
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/qUZooLjG6npaUMgnwnTCaMV-Q18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.216.0/22
185.74.204.0/22
IPv6:
2a03:4760::/29
2a04:bf80::/29
Signature Algorithm: sha256WithRSAEncryption
48:42:ed:28:d2:3f:b0:77:c9:62:83:af:3b:2e:10:5e:8a:35:
a1:29:24:8f:52:95:c2:b8:78:de:17:0c:0b:8d:73:1c:62:ee:
85:43:20:58:74:76:dd:1c:a7:fa:11:5b:bb:a3:ea:c9:d6:19:
8d:4c:d3:59:f2:20:cf:a3:08:13:dd:79:7e:b8:9e:c0:0b:a6:
8f:1f:b8:6f:8e:a3:f0:b0:a0:9f:dc:3f:a3:c8:fb:25:c5:14:
29:c5:9b:18:48:93:63:9e:89:ab:a2:1c:17:74:9a:04:23:b6:
7a:b9:f4:4c:72:3f:09:06:3a:0a:81:29:eb:92:ad:67:b1:a8:
4a:d5:be:05:f1:c7:c7:9b:16:23:39:e5:9b:df:aa:1c:1f:22:
6d:7b:df:88:f4:c2:9a:59:49:8b:8e:49:36:03:c6:36:83:24:
c4:9d:9d:ce:35:90:42:06:23:ed:8c:3f:eb:49:65:26:e4:0a:
6b:a5:36:54:0c:da:4c:0e:d7:ee:31:87:28:00:21:10:d5:54:
4c:19:80:7a:ba:35:ff:44:30:90:f0:0e:8e:9f:ba:34:dd:8c:
af:20:ac:ba:e4:bd:64:6d:91:2e:7b:04:53:a0:ff:6b:70:ec:
fc:b9:f3:e3:09:73:e0:3c:5b:49:3b:89:17:66:05:51:f2:01:
ed:38:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:47 2024 by rpki-client on console-ams.rpki-client.org