Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/QPYgeWm4mI0D84DomPDxpru3J4g.roa
File: QPYgeWm4mI0D84DomPDxpru3J4g.roa (raw, json)
Hash identifier: hoEUO/DvoHSCcaMZhRUyKLCAPJpdXPEXRjmEjQPiHuo=
Subject key identifier: 40:F6:20:79:69:B8:98:8D:03:F3:80:E8:98:F0:F1:A6:BB:B7:27:88
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 0373B352
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/QPYgeWm4mI0D84DomPDxpru3J4g.roa
Signing time: Sat 01 Jan 2022 07:55:48 +0000
ROA not before: Sat 01 Jan 2022 07:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39048
IP address blocks: 193.176.93.0/24 maxlen: 24
193.176.92.0/24 maxlen: 24
193.176.95.0/24 maxlen: 24
193.176.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57914194 (0x373b352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Jan 1 07:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40f6207969b8988d03f380e898f0f1a6bbb72788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:8c:a7:85:b6:60:25:6a:63:19:28:e9:e5:
b3:c4:9a:bb:ac:28:2c:2e:b1:a4:5e:30:94:e8:40:
3a:1a:ab:b2:59:5e:24:4b:28:f5:71:9f:b8:26:db:
18:a7:b5:1e:01:a1:e1:97:19:08:65:ff:c0:20:fa:
5b:e7:f6:f7:dd:1c:e1:3d:f2:f6:31:0b:1c:84:c7:
4d:d3:66:27:e7:07:f3:0b:ca:65:8e:57:82:64:c3:
36:80:cc:8b:a2:ce:bc:eb:de:f7:66:00:fe:a4:c2:
ce:c2:13:60:3f:25:04:f2:5d:87:4d:5b:2a:71:7c:
63:77:c8:9f:e0:3b:98:aa:dc:2f:3e:8e:25:2b:62:
c9:b2:cd:ad:c6:ec:51:c5:6e:db:89:0a:01:43:dd:
53:5b:0d:d3:79:46:dd:a2:32:ea:fa:ec:81:fc:f7:
5d:59:1a:2a:8c:b2:af:98:70:1c:ed:50:61:0e:e6:
cb:b9:09:b2:7f:a5:43:ca:47:f6:65:18:9a:3b:98:
c5:a1:51:e5:2d:34:57:2a:c8:15:7b:98:98:5e:21:
a9:dc:91:07:3c:85:77:e0:38:fc:d7:97:d6:23:16:
69:aa:a9:e2:62:4f:e8:d6:44:e2:4f:6c:27:30:9d:
9e:cf:36:ec:c8:16:a6:cc:fb:8e:5d:5d:87:c2:73:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F6:20:79:69:B8:98:8D:03:F3:80:E8:98:F0:F1:A6:BB:B7:27:88
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/QPYgeWm4mI0D84DomPDxpru3J4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
63:59:cf:ff:8b:72:bd:b3:9a:b9:1e:be:4a:ea:50:4a:b2:4c:
a7:6b:67:54:73:15:93:b3:b6:89:f0:1b:0d:7e:2b:01:7c:e1:
90:85:1a:b0:f7:25:c6:0b:87:d5:3e:08:93:e4:eb:e8:f8:5e:
be:17:59:a0:d6:e9:67:d9:9b:c5:eb:08:16:2e:d9:45:38:a0:
d3:5d:20:66:50:fb:51:39:75:de:d9:0d:d1:aa:72:33:6f:ed:
57:51:77:27:d7:06:1e:52:03:70:24:39:ec:0c:5d:23:5e:80:
43:a9:67:c8:35:eb:5f:57:ac:c8:83:f7:cc:20:92:58:d2:ca:
93:77:48:2f:6c:4b:f3:b3:3a:03:f6:60:aa:8b:56:d8:54:9d:
fb:02:98:54:a2:b9:12:5f:17:32:37:24:73:0c:90:be:52:30:
6c:6e:d4:21:d7:3e:fa:c1:cc:bb:bf:af:2d:2f:c5:7c:7d:cc:
21:06:a0:3b:f9:53:e4:78:af:1b:3f:0e:c2:42:13:54:c3:3a:
6c:ee:06:3f:03:b8:00:3a:96:96:a9:4f:c4:13:3d:c1:e7:88:
fe:b4:8f:a0:38:a9:20:45:16:77:f9:c6:c4:50:2a:bb:90:07:
23:8c:ef:01:e1:7f:8c:ce:44:25:a2:d1:5a:cc:92:57:40:44:
5f:e1:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net