Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/qefnpw-6L6febA6tZdkluKJj-z0.roa
File: qefnpw-6L6febA6tZdkluKJj-z0.roa (raw, json)
Hash identifier: SjgpnmWS53pbHTogAbfyH/7ENRwMN6msD8krjUeOuYQ=
Subject key identifier: A9:E7:E7:A7:0F:BA:2F:A7:DE:6C:0E:AD:65:D9:25:B8:A2:63:FB:3D
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 05E72388
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/qefnpw-6L6febA6tZdkluKJj-z0.roa
Signing time: Sat 12 Feb 2022 22:16:31 +0000
ROA not before: Sat 12 Feb 2022 22:16:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 91.228.14.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99033992 (0x5e72388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Feb 12 22:16:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9e7e7a70fba2fa7de6c0ead65d925b8a263fb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:df:4a:63:21:ec:ad:be:fd:58:b3:0f:7f:
d1:1c:ce:a6:24:0e:7d:69:38:20:ed:38:c0:24:53:
f5:76:f3:e4:25:5c:1e:69:61:97:ba:57:fc:db:4e:
b3:fa:95:2e:5a:52:39:3e:8b:43:06:59:49:8f:0a:
b1:a1:7b:a5:af:2f:3a:50:c9:59:a1:b4:19:15:d6:
aa:c2:72:74:a0:8c:31:2d:fc:99:c3:ad:bc:28:b6:
fa:d8:e4:80:f9:32:ca:5f:ec:0a:bc:a8:12:e0:d9:
6a:d2:64:92:f4:df:b6:f2:91:5c:c5:60:75:b0:f9:
ad:ae:a9:03:12:6a:57:db:8b:30:17:87:1c:3c:06:
db:40:f5:9a:3c:85:7e:d3:78:c9:25:90:74:71:20:
97:3f:b4:d6:6c:2f:0f:fd:92:ba:46:72:fb:be:48:
17:13:73:18:e6:b7:b1:81:34:8b:7c:96:59:cf:e9:
ce:25:fa:28:78:c9:0c:b9:e7:0a:b0:f2:65:ea:3c:
9a:c7:93:01:fe:21:93:0a:02:32:fc:4b:c1:0b:d9:
1c:46:22:9d:80:bf:a3:70:40:c9:45:f1:81:8a:a6:
64:74:1d:3e:88:82:89:e9:85:58:51:b5:c0:4a:90:
cb:c5:d9:ef:5d:f9:9b:2b:2b:ab:ff:31:eb:99:0a:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E7:E7:A7:0F:BA:2F:A7:DE:6C:0E:AD:65:D9:25:B8:A2:63:FB:3D
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/qefnpw-6L6febA6tZdkluKJj-z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/24
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0c:48:6f:55:7e:fc:db:35:1e:07:d6:30:68:2d:33:4a:76:
29:a7:99:ee:8d:4a:48:ec:4b:0c:ea:30:a6:1f:7c:4e:ae:1f:
76:7b:49:0c:f6:23:70:94:fb:f6:95:1e:f2:00:68:67:45:ec:
d6:a0:7d:cd:da:5f:3f:5b:e1:8a:3d:fd:aa:51:5d:d2:18:da:
88:61:85:27:e5:71:8d:18:3e:ec:97:e1:72:ed:f5:cb:ef:3d:
92:ca:02:b2:37:a6:2b:5e:ab:49:dd:39:1e:ae:78:0f:78:fc:
75:9a:1c:da:d3:cc:cf:e2:64:5e:f9:b3:2e:5d:9a:b3:60:8c:
cd:44:d7:e8:51:4a:f7:97:ad:57:ce:cf:0c:ae:e5:9f:0e:a4:
bc:db:bb:31:5d:40:40:d3:08:c8:6a:33:9b:73:98:fc:a8:87:
69:f9:8b:87:cd:30:13:06:fe:1b:28:30:62:87:f6:6b:6e:f7:
ef:a2:d8:74:61:9b:f8:c4:0c:bc:96:fd:c4:53:73:02:0e:b1:
1f:ae:fc:c1:9c:db:50:ba:d2:2d:a1:8f:8f:3c:be:fd:31:b2:
d1:6c:df:67:90:05:11:33:30:d2:73:23:69:e6:d1:d2:08:92:
15:3c:cb:51:a9:5b:e8:b8:13:ee:fb:4d:c4:61:d7:a4:2a:45:
68:fb:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:25 2024 by rpki-client on console-fra.rpki-client.org