Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/Q9T_ntDK4DamHOnZziBsB72Zm94.roa
File: Q9T_ntDK4DamHOnZziBsB72Zm94.roa (raw, json)
Hash identifier: FXAkt6DsilD7TZPGfTDKKlzV+zX5Pys6MFQfbrvwlfQ=
Subject key identifier: 43:D4:FF:9E:D0:CA:E0:36:A6:1C:E9:D9:CE:20:6C:07:BD:99:9B:DE
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: C1E420
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/Q9T_ntDK4DamHOnZziBsB72Zm94.roa
Signing time: Mon 28 Feb 2022 07:33:09 +0000
ROA not before: Mon 28 Feb 2022 07:33:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 80.91.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12706848 (0xc1e420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Feb 28 07:33:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43d4ff9ed0cae036a61ce9d9ce206c07bd999bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:f7:70:8a:89:b4:13:ce:af:f0:1d:4e:7b:
1f:10:88:4f:6b:ae:54:70:da:87:39:fe:13:a2:83:
9d:8b:95:57:bd:eb:08:f2:b5:3e:c3:8d:30:3d:ff:
ce:b7:a4:2e:61:0d:fb:e0:17:2a:b7:95:fb:48:22:
36:e9:6b:06:40:a5:67:4a:10:a8:04:c0:20:53:fa:
cc:81:f9:b7:9b:58:62:3f:4b:ac:04:e8:6c:c7:6c:
7d:2d:19:98:61:ed:05:58:05:b8:15:d5:80:e2:ec:
de:66:0d:78:c2:b3:e9:d8:f3:7b:80:19:4b:bc:3d:
bc:ee:38:b8:ab:7f:55:5b:6c:df:1d:e1:0c:03:89:
60:a4:14:92:ee:16:9e:85:9a:e2:a0:52:0b:30:f1:
6a:80:aa:46:40:cc:1c:81:73:00:73:67:f6:b9:4b:
ff:a1:27:3e:9a:1d:1f:f8:78:48:ff:d8:92:11:d9:
3a:ac:70:33:7e:6f:fb:cd:69:6b:2c:8b:ec:53:7f:
57:38:43:e5:e6:9c:a0:56:93:ad:87:18:a5:0c:0c:
f5:75:c3:d2:9d:f0:51:3d:91:a2:fc:40:da:fc:ec:
03:22:75:68:79:bb:93:23:e2:6e:cb:61:4c:de:28:
08:9f:81:ad:89:57:0c:28:e2:f3:6d:ca:4b:75:df:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D4:FF:9E:D0:CA:E0:36:A6:1C:E9:D9:CE:20:6C:07:BD:99:9B:DE
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/Q9T_ntDK4DamHOnZziBsB72Zm94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6c:ac:de:cc:51:5a:9f:8e:b6:6f:fc:b2:9c:01:43:81:a7:
6e:e8:c5:19:77:de:28:c1:42:8c:cc:3b:55:21:a7:4d:d2:fa:
81:46:6a:f4:3d:41:55:9d:78:b8:ed:90:06:28:c7:1c:51:1b:
b6:1a:c5:7f:a1:25:dd:01:68:4a:55:b8:a9:40:e8:e2:76:7b:
23:42:a1:be:35:da:54:30:db:20:42:a5:73:98:03:27:30:58:
7d:fc:a1:76:b7:13:d5:1f:de:23:78:36:d1:64:c7:71:0d:53:
b2:e5:42:c5:9c:6b:9f:e2:36:cc:2c:c4:3b:57:09:42:93:11:
69:46:fd:a0:b3:b6:ae:40:d3:fb:a9:b4:e2:6f:d7:69:1b:af:
fe:e3:bd:89:5c:a5:b0:07:14:79:e4:5c:7d:1c:e1:af:26:ba:
21:b6:24:9a:06:1d:bd:68:f9:58:c5:88:fd:f0:be:bd:c3:8d:
23:3f:a7:7f:85:75:3d:e2:a8:55:ce:57:c3:37:e4:55:20:6a:
f7:59:0a:aa:8e:6c:54:36:d6:cf:46:d7:ae:74:12:2a:fb:d6:
00:f4:77:cb:16:1f:64:b9:6e:c6:7b:b4:ec:34:92:02:d6:36:
e4:c0:2f:da:72:60:74:4b:8e:9f:92:19:42:7d:78:8d:0f:a9:
ab:cf:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:09 2023 by rpki-client on console-fra.rpki-client.org