Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/Q_k5Wt_QKxsXR_yYt6AqqBLE8BA.roa
File: Q_k5Wt_QKxsXR_yYt6AqqBLE8BA.roa (raw, json)
Hash identifier: GDuV9AH1Qr+XWVJp6bMYvehvGaVDtMgwq01NrqXMfWM=
Subject key identifier: 43:F9:39:5A:DF:D0:2B:1B:17:47:FC:98:B7:A0:2A:A8:12:C4:F0:10
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 08161C9C
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/Q_k5Wt_QKxsXR_yYt6AqqBLE8BA.roa
Signing time: Sat 01 Jan 2022 14:08:33 +0000
ROA not before: Sat 01 Jan 2022 14:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208468
IP address blocks: 91.135.177.0/24 maxlen: 24
91.135.176.0/23 maxlen: 23
91.135.176.0/24 maxlen: 24
91.135.188.0/24 maxlen: 24
91.135.188.0/23 maxlen: 23
91.135.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135666844 (0x8161c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Jan 1 14:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43f9395adfd02b1b1747fc98b7a02aa812c4f010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:cd:eb:2e:b0:6e:77:63:2e:6a:9a:4d:d5:
85:30:e4:ec:4d:2b:ec:a6:cf:d3:d4:05:5e:89:ad:
76:98:02:fd:a6:b5:55:07:9b:2f:b7:5f:ce:b7:f1:
86:98:06:8e:8e:cc:cb:19:5d:7c:3f:9e:ec:ee:c4:
e2:6b:7f:8d:a5:a2:b0:db:46:9a:92:d9:5f:ff:ec:
03:61:9b:26:1c:8b:50:c6:33:c9:d4:17:8f:30:c3:
b1:32:8d:9b:86:aa:5f:34:60:96:50:cc:64:10:2f:
89:76:f1:a0:00:52:87:6f:0a:e0:76:63:1c:f5:e3:
0b:0f:d0:8e:9b:40:28:78:53:3c:0c:c2:9c:b9:6d:
00:70:99:2d:0d:06:89:13:9c:e5:9d:cc:35:d7:c0:
a0:eb:6e:b0:73:b8:57:0c:0e:d3:1d:30:57:87:48:
62:b1:1b:b8:59:e4:99:da:a9:00:06:16:ba:10:b2:
c1:52:77:c0:3a:15:38:33:4d:1f:14:18:42:a4:7e:
fb:80:ff:73:22:ad:19:82:5c:74:a6:5a:6c:e8:bb:
b3:5f:ae:e5:45:13:0d:ac:1b:96:9f:28:9a:ae:d8:
e5:80:d3:78:d3:2e:ab:0b:7c:20:ab:a0:bd:e5:dd:
45:d8:44:48:92:d9:2e:6d:49:c7:94:64:f4:e7:54:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:39:5A:DF:D0:2B:1B:17:47:FC:98:B7:A0:2A:A8:12:C4:F0:10
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/Q_k5Wt_QKxsXR_yYt6AqqBLE8BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.176.0/23
91.135.188.0/23
Signature Algorithm: sha256WithRSAEncryption
91:ad:bb:45:86:e3:02:41:32:3b:c6:ac:65:65:8c:af:b4:18:
2f:20:00:9e:3e:f6:3f:0a:1f:ff:3a:ad:f1:cf:e6:cb:dd:57:
e8:3e:1a:c4:3e:63:46:9f:8a:6e:e9:7f:3d:c8:cb:ab:01:e1:
f0:f9:d2:77:d3:8f:e5:22:92:90:42:8d:d5:07:62:09:a8:5b:
32:33:de:ef:de:99:20:09:f9:89:2a:c6:4e:2d:3f:ab:34:a5:
f0:d4:dc:e3:84:ea:b6:42:b6:80:65:c2:b8:c3:ae:5c:8f:c3:
cb:07:a8:aa:cb:f2:a9:dd:c2:91:ed:be:98:59:d1:64:37:f5:
ec:d3:db:f4:9f:5d:77:91:87:20:bb:13:d3:c7:c6:a4:31:5c:
9a:a6:2a:94:db:f0:52:d7:b1:e6:fc:fb:32:eb:0b:71:4f:ad:
fa:6c:d1:76:9e:05:23:2a:f8:40:1d:28:20:76:c9:78:22:fd:
f4:f1:58:dc:46:96:b7:56:85:f8:2f:69:3a:a4:75:cf:d4:b6:
e0:82:c0:d8:5e:a3:c3:2e:6f:af:61:e5:54:b0:ce:2d:5a:fb:
82:0f:9f:82:0f:59:47:fd:33:52:f0:02:f0:04:f1:95:50:f3:
3b:70:59:c3:df:c3:7c:d2:b7:cc:4a:55:f6:61:74:ad:01:ca:
31:f5:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org