Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/pqcun41gvRlRwh-_dK-0uugfMzY.roa
File: pqcun41gvRlRwh-_dK-0uugfMzY.roa (raw, json)
Hash identifier: 3/YpTfLWYSbQ1wovJkEOVHUwteodYAQuB24RvTL8fjw=
Subject key identifier: A6:A7:2E:9F:8D:60:BD:19:51:C2:1F:BF:74:AF:B4:BA:E8:1F:33:36
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 02AB2AF6
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/pqcun41gvRlRwh-_dK-0uugfMzY.roa
Signing time: Sat 01 Jan 2022 15:57:09 +0000
ROA not before: Sat 01 Jan 2022 15:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202856
IP address blocks: 62.218.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44772086 (0x2ab2af6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jan 1 15:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6a72e9f8d60bd1951c21fbf74afb4bae81f3336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:71:5d:ff:51:2b:72:ce:28:68:53:5f:eb:
53:92:58:66:f5:78:6f:26:1d:ca:f3:3d:60:3c:e1:
49:d7:fb:f4:bf:db:86:7b:64:e2:11:3f:f8:5c:d4:
f0:c7:c0:b8:04:9c:fc:59:b8:10:9f:8f:12:4b:3f:
ba:3f:4a:f9:15:3f:81:9f:3e:6a:ab:21:7c:14:9c:
00:26:d4:77:e7:af:d8:ed:ad:0f:88:46:62:2a:0a:
7c:48:4f:94:a0:1b:ab:93:38:ec:e0:42:6c:6b:5c:
65:cf:56:16:5c:5e:9c:6d:df:13:43:29:23:bc:34:
a0:44:17:6b:47:24:52:e6:20:e0:98:eb:c2:dc:ae:
10:76:fb:90:b5:7b:6e:8d:e4:26:1d:7a:d7:aa:76:
22:c9:eb:c1:83:69:2d:fb:30:44:a8:6c:df:35:6a:
45:ae:bb:4d:ef:38:2c:92:8a:70:22:3e:a4:d5:bc:
58:b8:9b:f8:d1:53:1c:3f:53:f4:68:f0:e5:57:42:
54:b9:d8:7b:8e:33:bf:6d:10:19:cf:80:08:8f:bc:
3e:46:14:2d:fd:9f:14:28:6a:2c:c3:de:54:0e:53:
69:34:2a:b1:22:fc:d7:01:a8:e7:57:27:47:70:ba:
59:ce:41:bb:03:89:82:5d:ed:c1:bc:46:ef:36:f1:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A7:2E:9F:8D:60:BD:19:51:C2:1F:BF:74:AF:B4:BA:E8:1F:33:36
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/pqcun41gvRlRwh-_dK-0uugfMzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.218.173.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e3:88:81:67:94:11:4e:e1:c6:67:bc:8d:47:11:21:22:48:
be:97:c9:24:07:50:0c:61:59:d9:92:2a:5a:c7:45:48:28:11:
2e:cb:0b:69:b1:8a:e1:53:a5:20:f8:79:cd:ca:bd:33:20:70:
93:b1:1c:60:01:65:5a:b0:b6:61:f7:49:1e:ac:13:ff:b5:7a:
d7:d6:84:6f:60:90:6c:9c:78:09:be:b9:d1:34:8f:d1:08:7d:
c3:6f:93:f6:ca:2a:d9:7b:36:27:26:53:87:ca:80:c3:49:77:
22:8f:01:ed:52:12:7b:75:33:e4:5b:dd:36:09:8d:7f:64:6a:
e8:e6:cf:06:9b:cf:96:42:8d:90:04:5e:64:50:d2:be:06:76:
6a:c4:50:b1:ff:90:08:f5:ae:56:e3:57:27:06:0c:61:04:c0:
c4:4b:15:df:c7:c1:12:35:b2:5b:9b:a9:f4:c6:f7:dd:8d:e6:
b7:97:b5:a6:ec:e4:fb:1d:7d:20:38:86:21:5f:b6:91:21:b9:
0c:d7:66:c9:55:73:a9:5a:c4:ca:c4:d5:e9:e2:4e:e8:e4:d5:
b5:52:8a:9b:6e:4e:94:a1:70:86:25:09:05:a2:fe:85:26:96:
c5:d8:28:7a:07:cd:70:50:c1:cc:ab:d6:be:d0:bb:7f:2a:c1:
80:8a:d5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net