Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/qnYdH491BdNwTzc1qqDE5a-vY64.roa
File: qnYdH491BdNwTzc1qqDE5a-vY64.roa (raw, json)
Hash identifier: +fY63Yx+PEo8AKYOBlnqudMd0L8Yl6Cor2Yw6y7c5p0=
Subject key identifier: AA:76:1D:1F:8F:75:05:D3:70:4F:37:35:AA:A0:C4:E5:AF:AF:63:AE
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0183369494DA501341A661D688969C6E2638
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/qnYdH491BdNwTzc1qqDE5a-vY64.roa
Signing time: Tue 13 Sep 2022 11:20:50 +0000
ROA not before: Tue 13 Sep 2022 11:20:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56876
IP address blocks: 81.31.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:94:94:da:50:13:41:a6:61:d6:88:96:9c:6e:26:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Sep 13 11:20:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa761d1f8f7505d3704f3735aaa0c4e5afaf63ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:a2:69:42:ad:d6:84:b7:09:d7:7b:bf:2a:
33:65:d3:55:26:11:d1:8d:21:0c:46:0c:7b:45:65:
17:40:77:92:8d:6c:95:68:b8:06:5f:49:d8:db:4e:
97:c8:da:14:c6:54:bf:5c:9a:7d:e0:73:74:3a:a5:
db:60:58:86:16:ba:1e:0a:45:8d:5a:04:c1:fb:0f:
ea:40:a7:26:a3:6c:c2:27:36:20:a2:da:78:a7:d4:
6d:d7:b9:17:6b:47:12:2c:6b:9d:ff:7c:92:4f:45:
90:50:b2:12:48:ac:ae:c8:d2:6a:95:59:d6:55:4c:
45:d2:fa:10:12:e1:f3:13:5a:83:f6:4d:35:be:3f:
c6:93:f2:77:6a:64:63:e4:f5:88:3b:b2:47:12:ba:
40:3e:ce:a2:31:b2:87:9b:6e:9c:05:b0:8f:9f:cb:
9d:a1:15:f2:2b:f8:30:3d:2e:8b:15:73:8e:af:94:
6d:9a:e6:97:17:40:19:0c:41:9e:b2:33:6a:45:1c:
76:7a:7a:65:71:53:98:b7:14:e4:c6:10:41:71:4b:
f3:2e:36:c5:63:ac:41:f5:c4:41:f4:d2:c0:fc:a7:
a1:db:8a:9c:04:d2:b8:5e:46:12:d8:17:ab:e1:aa:
54:91:36:87:da:43:88:79:34:96:e1:18:d2:a3:1d:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:1D:1F:8F:75:05:D3:70:4F:37:35:AA:A0:C4:E5:AF:AF:63:AE
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/qnYdH491BdNwTzc1qqDE5a-vY64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:d8:67:57:a4:bf:97:ec:1e:c7:1c:10:57:d9:f7:30:42:fc:
ab:4e:44:fa:9e:ce:2e:34:71:2c:0e:e0:93:dc:58:2f:1b:45:
dd:77:e7:b6:c4:80:be:f8:e8:33:fa:75:fd:05:e9:89:7c:61:
9a:37:2e:b4:b5:06:4b:81:df:ac:e6:d4:c0:c3:75:59:66:bf:
a9:b6:c0:d7:9e:bd:82:a3:2e:e8:98:60:1b:34:74:c0:f1:b8:
cb:a4:32:f4:fc:af:98:e4:c2:4f:65:de:3e:66:f6:0a:75:68:
6b:ef:d4:76:9a:ec:27:f1:26:10:d4:e5:dd:65:e7:61:67:ec:
53:23:b8:1c:b3:59:6b:6c:ca:48:d9:91:de:73:71:f5:73:fd:
6c:2b:f0:80:ff:e9:78:3e:3a:c6:7c:45:8e:a4:3d:9a:52:ce:
57:96:71:63:37:81:87:78:67:72:cc:e5:d0:e8:b8:b6:e6:41:
59:6c:43:80:fa:75:7c:d0:70:90:96:6f:1e:e0:50:f3:17:c0:
e4:f9:45:cd:52:9d:2e:8c:ec:d6:29:ca:a5:dc:6b:ef:92:88:
40:57:b6:fe:10:81:26:f2:e8:08:48:33:92:7e:20:71:04:0b:
2c:23:e7:6b:1a:9d:ea:a9:96:0b:42:b7:fb:4f:7c:67:86:1a:
e6:c0:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-ams.rpki-client.org