Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/QJcvaTqRQIbhzG6_NENicJlBcqw.roa
File: QJcvaTqRQIbhzG6_NENicJlBcqw.roa (raw, json)
Hash identifier: Td15+XxNIuZlJPKeEbaK6c2IVCNv7osuWrtT7xAxJBc=
Subject key identifier: 40:97:2F:69:3A:91:40:86:E1:CC:6E:BF:34:43:62:70:99:41:72:AC
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01827E4EFEEEEC98BDCE6F49C13B3F714BB4
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/QJcvaTqRQIbhzG6_NENicJlBcqw.roa
Signing time: Mon 08 Aug 2022 16:34:42 +0000
ROA not before: Mon 08 Aug 2022 16:34:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199429
IP address blocks: 91.237.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:4e:fe:ee:ec:98:bd:ce:6f:49:c1:3b:3f:71:4b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Aug 8 16:34:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40972f693a914086e1cc6ebf34436270994172ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f9:26:a6:79:fc:70:3c:2f:37:a5:06:7e:9a:
3d:20:71:f3:7f:f9:ab:cb:b3:57:00:a2:7d:2d:d3:
07:6e:81:55:20:d8:67:2e:f0:22:d3:d8:c6:13:08:
08:d9:a5:f4:e6:71:f1:40:b4:b4:96:48:d4:60:ff:
23:e6:8e:d4:5f:e5:a9:33:b0:33:a1:da:ae:7e:b0:
6a:c2:5e:2b:e2:e8:a2:59:68:13:39:33:bf:76:6e:
f9:78:f9:47:f6:bd:61:8a:d1:4e:d9:a8:b9:4d:37:
07:b1:45:ac:bb:35:26:85:41:e7:81:c5:de:f8:91:
74:c3:94:de:9e:62:4f:1f:47:55:36:1b:6e:c0:72:
0c:34:16:11:9f:36:b2:62:4b:39:80:2f:ad:3f:7e:
a9:0b:c8:fc:f2:e7:8a:ac:14:ae:ce:51:65:bd:2f:
83:2b:bd:ef:1f:ee:0f:4a:a1:dc:41:87:cb:0b:a4:
91:e9:65:3e:9f:8d:f8:d9:1d:30:41:6c:ea:21:38:
5b:ff:37:06:50:f4:2b:de:e4:da:9c:6b:c7:63:ea:
8c:fc:70:b0:b1:e6:c6:45:e5:b0:bd:0f:50:c1:38:
01:b3:af:a2:13:05:44:b7:d0:d6:2c:2a:df:7f:9e:
c6:cf:4d:07:5d:0f:52:e8:22:3a:21:98:9c:7b:2d:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:97:2F:69:3A:91:40:86:E1:CC:6E:BF:34:43:62:70:99:41:72:AC
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/QJcvaTqRQIbhzG6_NENicJlBcqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:dc:86:a6:6a:24:e4:b7:43:d4:42:2c:75:5d:e1:a9:11:cf:
22:38:e7:ea:fe:01:95:80:37:90:fc:5a:21:32:ab:6c:c0:0b:
fe:e7:d5:ce:2b:55:d8:5e:3d:fe:83:9d:97:67:3e:8c:21:49:
4c:f0:f8:85:62:0d:73:d4:0f:d3:98:34:1a:43:93:8c:d5:c7:
72:ad:20:b0:ea:3e:e8:ac:81:34:85:13:a3:e9:7a:76:f7:c0:
f6:1a:f3:4b:a9:19:93:7e:be:33:39:31:52:22:8a:8e:53:b7:
6b:8c:3b:50:31:05:54:04:7c:a0:40:40:63:67:b7:b8:0f:0d:
59:b5:c2:99:db:6c:98:9b:d2:bb:4f:fd:78:54:ce:1d:5c:34:
d1:1c:6b:47:2b:5d:fd:5f:71:50:60:1b:0d:d7:75:01:1d:f8:
86:94:5f:44:8c:36:ad:eb:06:78:db:29:4c:eb:24:37:f8:dd:
38:fa:f6:4b:3a:91:8a:dc:37:06:fb:00:c5:d7:e3:9a:e8:01:
2b:2c:f9:f6:d1:e2:3e:84:e6:bb:8b:6c:1b:c3:7b:05:ee:4b:
84:59:4e:13:f5:4e:34:be:0f:83:f1:1c:d4:58:7d:6c:6a:15:
92:c6:5e:f1:a4:e5:e1:95:ee:cc:bc:f2:62:8c:0e:d0:58:e1:
1e:0a:c4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org