Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/QNnqPmAg6QZuDud0B7TXI_ja-mk.roa
File: QNnqPmAg6QZuDud0B7TXI_ja-mk.roa (raw, json)
Hash identifier: LZ+fqgaZdwBFs2hpoT8qSg2ib5RGmQ4rYT7Voh+a+V4=
Subject key identifier: 40:D9:EA:3E:60:20:E9:06:6E:0E:E7:74:07:B4:D7:23:F8:DA:FA:69
Certificate issuer: /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial: 018499393D8CAFEC36B97AFA2F01D2A2BE53
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/QNnqPmAg6QZuDud0B7TXI_ja-mk.roa
Signing time: Mon 21 Nov 2022 08:06:16 +0000
ROA not before: Mon 21 Nov 2022 08:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204854
IP address blocks: 185.237.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:39:3d:8c:af:ec:36:b9:7a:fa:2f:01:d2:a2:be:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Validity
Not Before: Nov 21 08:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40d9ea3e6020e9066e0ee77407b4d723f8dafa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:2f:b4:09:af:75:f3:56:af:8d:85:d5:29:
a4:98:0d:d5:8e:47:c7:57:66:df:97:c9:30:13:f4:
bb:93:05:26:6a:d6:f8:e1:48:a8:cd:6f:45:27:8e:
71:dd:af:59:63:78:e8:04:9c:e1:ce:9c:3e:c2:78:
ca:16:81:dc:27:6a:da:2c:6a:af:a6:1b:60:48:d3:
79:37:03:08:e1:c7:41:58:c8:33:be:0d:55:c2:61:
a4:ce:92:d7:82:fc:6f:0b:16:b5:6b:d6:bf:30:47:
75:3e:96:fc:a7:0a:a9:3a:cd:fe:be:74:2e:b4:1e:
3a:62:0f:b0:a2:65:fe:d2:97:7e:18:6c:25:8e:18:
92:de:51:3d:b4:7f:d3:0c:06:5b:48:91:a8:46:ff:
b5:08:2b:86:31:56:25:8f:69:af:00:1c:9c:89:62:
22:0b:06:5e:19:36:1c:2f:05:db:bb:02:71:b7:b3:
c6:51:2f:27:fa:e1:46:3a:3c:5a:15:c8:58:f3:40:
30:21:66:d6:3a:db:74:63:56:25:2a:cf:be:3e:0d:
37:44:b3:ce:d1:bb:62:b5:07:4d:2c:c2:8f:06:06:
df:5e:30:eb:0f:2f:22:9a:8f:2b:01:51:d6:77:73:
f6:62:b0:5f:34:31:70:0b:b8:13:5b:b7:1f:2f:62:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D9:EA:3E:60:20:E9:06:6E:0E:E7:74:07:B4:D7:23:F8:DA:FA:69
X509v3 Authority Key Identifier:
keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/QNnqPmAg6QZuDud0B7TXI_ja-mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.76.0/22
Signature Algorithm: sha256WithRSAEncryption
52:6f:71:1f:62:90:b4:93:3d:34:ca:73:ad:22:3f:d6:42:c2:
95:53:c5:e6:e4:28:df:ec:6b:e7:6b:cc:58:81:33:a6:ad:df:
12:fe:54:14:cc:79:62:d1:e9:22:1b:18:e7:6a:26:1b:15:ed:
54:f7:58:91:e2:98:9e:7c:e9:e2:a9:d0:52:66:4a:d6:a0:8a:
b7:34:24:2b:58:4d:a6:a7:ce:1d:58:d3:33:d3:6d:5e:a8:e7:
db:f1:7f:90:c4:a6:77:fc:68:4d:ed:1a:c9:93:5b:cf:74:6b:
0b:d6:e0:11:2b:2d:3c:7f:00:10:f5:9e:26:62:9f:ba:8d:4e:
e6:70:bd:65:4a:9c:e9:57:1d:5c:29:d9:f2:55:44:96:99:1c:
c1:61:8c:75:38:e5:d8:7f:03:a8:5c:59:ae:37:58:9c:ca:bb:
04:2c:cb:80:d7:07:c4:9e:e0:db:e0:c1:64:64:22:3b:9c:56:
08:2f:8c:20:47:e7:ce:78:6d:29:58:98:36:87:b3:c3:25:04:
aa:53:6e:a2:fe:d6:f6:9a:34:5d:e6:a6:fb:99:0c:ff:0d:ca:
a2:2b:8c:df:3b:5d:a3:7b:f5:d7:eb:73:57:ac:55:78:93:4c:
5f:b2:b3:f2:54:12:9e:54:02:15:80:8f:28:5a:a6:36:2d:35:
70:60:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net