Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/qmCS8rZirg2QH4ARp_2rYtGhzik.roa
File: qmCS8rZirg2QH4ARp_2rYtGhzik.roa (raw, json)
Hash identifier: Qqxk1+H07cjQ3oczrci4LooSdXaX/B+icoS+V/6ezZI=
Subject key identifier: AA:60:92:F2:B6:62:AE:0D:90:1F:80:11:A7:FD:AB:62:D1:A1:CE:29
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 03BBA0E2
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/qmCS8rZirg2QH4ARp_2rYtGhzik.roa
Signing time: Sat 01 Jan 2022 03:01:26 +0000
ROA not before: Sat 01 Jan 2022 03:01:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44294
IP address blocks: 185.239.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62628066 (0x3bba0e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 1 03:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa6092f2b662ae0d901f8011a7fdab62d1a1ce29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:3e:26:15:f6:4f:8a:78:97:23:8a:f0:99:
df:41:b2:9f:31:68:a7:7a:34:59:77:a0:32:a8:61:
cd:8b:8b:51:9f:28:fa:2f:bd:cb:98:a4:9c:dc:01:
66:c0:de:ec:1c:48:d8:97:f6:4f:28:bd:79:4e:fa:
95:bb:0c:e8:14:d1:de:62:1a:0e:e2:f1:f2:3d:15:
ed:9e:cc:35:7c:93:21:d5:dd:db:c7:f1:90:34:76:
a3:12:45:5d:71:d6:6d:da:bd:5d:30:7d:31:79:3d:
a2:9f:d4:49:10:17:2b:b8:47:26:91:4c:99:ad:91:
ea:ed:47:8f:6a:78:43:6b:9a:56:de:c6:be:49:19:
67:44:09:e9:ad:be:37:b8:5a:e3:18:ac:b2:ae:58:
5a:89:fb:4e:6f:ef:19:77:a1:48:c7:40:23:c9:5f:
34:60:b8:63:83:7f:04:5d:76:c9:6b:10:24:f0:51:
b9:ad:87:55:bc:eb:eb:bd:26:fc:cb:04:d6:ac:b5:
d4:14:39:1e:d9:4d:8a:6a:51:65:57:9b:27:62:fa:
8b:78:cd:79:9d:d5:59:4d:14:71:b6:70:04:6f:15:
86:61:4f:ad:9f:f5:f5:9b:4a:df:ca:df:91:cc:1a:
59:81:df:1b:37:25:ce:76:dd:b6:8a:40:2f:24:24:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:60:92:F2:B6:62:AE:0D:90:1F:80:11:A7:FD:AB:62:D1:A1:CE:29
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/qmCS8rZirg2QH4ARp_2rYtGhzik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.25.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a5:2c:ca:aa:bb:aa:4a:83:08:87:04:40:91:b7:7f:40:91:
0b:1a:49:fc:e0:b0:a4:b0:67:4c:b9:95:a0:e7:ea:74:de:d6:
82:1b:47:f7:ac:09:ea:46:e3:7f:63:4d:e4:0a:ab:24:40:6a:
a6:66:3b:3d:40:cc:2e:85:0f:a4:89:4b:69:14:4d:b3:81:e4:
d4:3a:2e:a7:9d:b5:75:be:7a:ec:8d:3b:29:00:56:8f:a4:c1:
88:b5:ff:be:29:2a:ea:ab:27:be:b8:73:03:52:63:62:97:74:
74:8b:ee:8c:2f:fe:89:1d:7c:0f:d3:9b:30:72:26:d2:e6:85:
ec:3a:27:16:ea:2f:b5:3d:ee:6d:4a:95:a5:a7:d2:a6:52:5b:
68:0c:23:8f:27:66:f9:74:d5:5e:dd:7e:33:08:62:60:56:3e:
ca:7b:c9:64:a3:22:73:88:4c:ea:25:de:c3:db:65:94:40:d3:
c9:a8:38:b6:b8:e4:43:c6:f6:de:da:79:4c:71:49:5e:c0:37:
bf:16:3c:6c:40:8d:2e:fe:a5:45:c3:f2:31:20:93:8c:91:11:
0d:a5:3f:20:7e:cd:cc:65:09:97:a5:74:c5:00:66:a4:85:2c:
13:83:39:c6:2a:35:5f:ab:ff:e8:bb:47:5b:59:62:0b:58:82:
8a:d3:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net