Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4b17a6-43c1-4e79-a81b-f5688468c048/1/QioPtoQ_NnKRw6etOw2C31tR0ao.roa
File: QioPtoQ_NnKRw6etOw2C31tR0ao.roa (raw, json)
Hash identifier: qyAWUTZdsVYGeA25Lla0WYRnm1NgOsEcM6hJOxKuoCo=
Subject key identifier: 42:2A:0F:B6:84:3F:36:72:91:C3:A7:AD:3B:0D:82:DF:5B:51:D1:AA
Certificate issuer: /CN=0c6816514565b93be255e087b9ba0b04832211c1
Certificate serial: 0453E4D3
Authority key identifier: 0C:68:16:51:45:65:B9:3B:E2:55:E0:87:B9:BA:0B:04:83:22:11:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgWUUVluTviVeCHuboLBIMiEcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4b17a6-43c1-4e79-a81b-f5688468c048/1/QioPtoQ_NnKRw6etOw2C31tR0ao.roa
Signing time: Sat 01 Jan 2022 11:03:10 +0000
ROA not before: Sat 01 Jan 2022 11:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203684
IP address blocks: 91.199.9.0/24 maxlen: 24
91.199.18.0/24 maxlen: 24
91.199.30.0/24 maxlen: 24
91.199.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72606931 (0x453e4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6816514565b93be255e087b9ba0b04832211c1
Validity
Not Before: Jan 1 11:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=422a0fb6843f367291c3a7ad3b0d82df5b51d1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:d4:63:ce:4f:e1:0e:22:77:9a:8f:f4:e0:
34:1c:42:99:95:02:c0:15:21:c8:8b:22:13:e9:fb:
58:e3:78:29:bb:11:ea:f9:c0:63:b4:22:99:43:7a:
c0:be:e1:f1:1c:7c:e1:9a:08:71:85:f0:62:35:54:
d8:47:c9:dd:99:83:0c:2b:ab:ce:7c:ed:41:0d:02:
f1:1e:4b:9c:5b:89:fc:a7:7a:d6:7b:97:9c:25:0c:
e7:34:14:5d:fd:0c:a9:06:f6:b8:29:94:9f:a3:28:
ee:6e:af:50:d3:78:f2:9d:3e:26:15:68:3e:26:f3:
9c:69:d8:63:94:0e:26:e4:a2:f2:11:00:c8:b0:10:
bd:40:b9:1a:23:59:72:af:e2:03:ff:5a:8a:43:b6:
9b:f9:54:1c:e5:44:cb:5c:c5:96:19:ba:13:92:25:
ac:04:eb:2f:b4:6a:56:48:53:e8:43:cf:da:1a:17:
9a:7f:6b:5c:cd:3e:8c:8f:f2:3a:ce:c6:93:b6:8a:
07:a1:e2:df:e8:52:78:b5:7d:76:e9:60:74:fb:40:
c7:05:39:a8:29:18:02:49:95:d8:4f:94:7a:da:98:
2b:5f:48:ca:57:b6:9d:73:4e:23:63:62:9e:90:d4:
7a:fe:e2:3c:89:d8:23:b6:53:52:49:26:0e:c5:df:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:0F:B6:84:3F:36:72:91:C3:A7:AD:3B:0D:82:DF:5B:51:D1:AA
X509v3 Authority Key Identifier:
keyid:0C:68:16:51:45:65:B9:3B:E2:55:E0:87:B9:BA:0B:04:83:22:11:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgWUUVluTviVeCHuboLBIMiEcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4b17a6-43c1-4e79-a81b-f5688468c048/1/QioPtoQ_NnKRw6etOw2C31tR0ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4b17a6-43c1-4e79-a81b-f5688468c048/1/DGgWUUVluTviVeCHuboLBIMiEcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.9.0/24
91.199.18.0/24
91.199.27.0/24
91.199.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:5e:c0:d9:16:07:c1:d1:65:43:b0:72:94:a3:b5:83:46:4c:
fa:ec:6c:88:91:7d:17:62:0d:fc:37:e9:c1:01:3d:c7:2a:d3:
5a:2f:bf:64:39:f1:af:ad:10:f6:ea:01:3f:a5:69:d3:f7:e3:
c0:5a:48:62:10:7a:83:04:e6:e7:e7:a5:71:2a:1f:9f:6b:6d:
d1:f2:c3:a6:bd:7e:2a:87:06:5b:f7:fa:b6:26:60:95:4d:3f:
b8:79:77:bb:f6:36:a9:0f:42:bd:88:c8:bb:90:77:a5:8e:61:
3b:8f:0b:f0:96:e6:a7:af:17:55:f4:17:86:af:5f:41:a4:bc:
e1:33:a0:fe:ce:1c:dc:9f:41:65:2a:db:f4:3b:89:68:8a:ad:
a2:71:b8:60:a6:fd:e2:ab:39:0d:85:5c:39:82:81:8a:23:0c:
aa:4d:75:37:63:5a:20:ac:1c:1a:e2:4b:01:4e:c0:f6:8c:27:
71:74:a6:2f:c6:45:80:55:9c:1e:9c:92:84:3d:ee:da:c8:d1:
3f:ee:a3:3f:ee:b8:24:cc:46:b4:98:f8:b5:e2:33:2e:9c:6e:
c1:ec:87:e4:08:a5:69:6c:2a:38:37:9a:86:37:7f:eb:0c:e7:
61:f8:e8:9d:d5:81:a6:f1:9e:23:c0:4a:17:fe:18:a4:7c:7e:
56:6a:89:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:00 2023 by rpki-client on console-ams.rpki-client.org