Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/QFCNCGLAvl8Odb_fvgKY1BYjOTQ.roa
File: QFCNCGLAvl8Odb_fvgKY1BYjOTQ.roa (raw, json)
Hash identifier: SE0tsatEjmu6/lvzBBDXmSlbN6vSCYQ/dcGah6EqAj8=
Subject key identifier: 40:50:8D:08:62:C0:BE:5F:0E:75:BF:DF:BE:02:98:D4:16:23:39:34
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 041B90C3
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/QFCNCGLAvl8Odb_fvgKY1BYjOTQ.roa
Signing time: Sat 01 Jan 2022 05:59:25 +0000
ROA not before: Sat 01 Jan 2022 05:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59526
IP address blocks: 91.242.44.0/24 maxlen: 24
91.242.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68915395 (0x41b90c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Jan 1 05:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40508d0862c0be5f0e75bfdfbe0298d416233934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:8f:4c:ec:29:a8:b1:98:a8:2b:af:fa:2b:
9f:4a:8a:c4:1e:10:c4:48:b0:e0:59:65:20:a1:d2:
54:4f:2e:6f:c0:91:cf:3d:08:7e:5e:31:ca:e8:59:
24:6a:70:13:76:64:22:e5:3c:a3:f8:c6:e7:6f:67:
b2:18:dd:62:9e:e6:53:65:89:97:b0:a1:54:02:28:
18:67:6a:94:28:90:b2:c2:d0:49:34:b9:f4:bb:63:
fa:48:54:d3:5f:4c:e4:25:09:fb:8f:04:22:a5:fe:
b1:04:7a:ca:f7:aa:f3:a5:6e:97:1d:0e:90:53:6e:
6e:83:a7:ce:46:19:0f:d5:1d:d4:27:1d:43:8b:e6:
6d:7a:8a:56:1d:f8:9b:72:14:7c:62:21:6b:3a:52:
f8:d3:d4:2a:b8:43:fb:20:5f:00:3d:46:6b:d2:d4:
85:e4:bc:2a:50:8d:bf:02:19:23:59:4f:5d:42:51:
7f:28:ba:c6:dd:29:92:59:5b:4d:66:8f:c9:00:4b:
a1:a9:84:2a:39:60:29:9d:df:4d:d6:7d:f5:da:0d:
10:98:05:cb:00:01:5e:e5:6d:97:55:30:1f:23:d7:
53:1c:e0:99:25:fb:05:84:2b:da:e2:cf:53:90:95:
3e:c8:5b:53:fc:01:0b:12:29:b8:53:2d:d3:6b:6a:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:50:8D:08:62:C0:BE:5F:0E:75:BF:DF:BE:02:98:D4:16:23:39:34
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/QFCNCGLAvl8Odb_fvgKY1BYjOTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.44.0/23
Signature Algorithm: sha256WithRSAEncryption
92:6f:4f:be:ae:36:29:24:5c:a3:c0:24:f5:a2:a4:c7:e3:1d:
b4:57:29:6b:a5:3f:e7:ab:17:ba:d0:8a:62:92:5e:f0:c8:80:
bf:3c:22:f8:78:74:cb:53:be:37:1a:5b:fe:a7:21:e6:91:60:
4b:f6:bc:b7:5a:5a:11:a6:0a:f6:2a:f3:e8:54:33:fd:f4:a4:
e7:9b:e8:2c:5f:2d:b1:c8:15:b7:e6:4f:22:0c:60:e6:44:96:
98:c7:77:10:4b:aa:23:56:56:9d:aa:be:d3:04:9d:1a:f2:62:
a5:21:1a:b4:d5:ad:87:11:9b:45:bc:7b:c3:fd:3b:05:62:42:
b6:8b:d1:25:c2:32:62:ce:bf:d9:ef:60:f9:bc:c5:38:88:9f:
be:19:88:85:35:d9:17:1c:60:be:bc:f3:c3:9e:44:bc:76:4c:
78:55:68:80:5c:1a:37:b6:4c:19:a0:55:be:b5:d7:b0:26:70:
77:24:a6:57:f3:ff:e8:4b:8b:03:8e:91:ed:45:65:03:8b:35:
32:1b:33:57:b8:18:98:07:a2:94:1b:06:4b:af:e3:e1:0b:78:
11:bf:b0:f5:ac:3a:83:e6:0f:68:c4:4c:bd:af:1a:ca:34:8b:
fb:49:e0:69:51:a0:03:e4:e3:89:9b:bc:03:ab:e4:14:22:d2:
91:e2:4e:26
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBBuQwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
M2Y1MGE4ZGU5NzFmODU0N2Y1YjU2Yzk3YzM2YzI4N2VmNTRiZGI4MB4XDTIyMDEw
MTA1NTkyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDA1MDhkMDg2MmMw
YmU1ZjBlNzViZmRmYmUwMjk4ZDQxNjIzMzkzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKY5j0zsKaixmKgrr/orn0qKxB4QxEiw4FllIKHSVE8ub8CR
zz0Ifl4xyuhZJGpwE3ZkIuU8o/jG529nshjdYp7mU2WJl7ChVAIoGGdqlCiQssLQ
STS59Ltj+khU019M5CUJ+48EIqX+sQR6yveq86Vulx0OkFNuboOnzkYZD9Ud1Ccd
Q4vmbXqKVh34m3IUfGIhazpS+NPUKrhD+yBfAD1Ga9LUheS8KlCNvwIZI1lPXUJR
fyi6xt0pkllbTWaPyQBLoamEKjlgKZ3fTdZ99doNEJgFywABXuVtl1UwHyPXUxzg
mSX7BYQr2uLPU5CVPshbU/wBCxIpuFMt02tqkf0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRAUI0IYsC+Xw51v9++ApjUFiM5NDAfBgNVHSMEGDAWgBQz9QqN6XH4VH9b
Vsl8NsKH71S9uDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01fVUtqZWx4LUZSX1cxYkpmRGJDaC05VXZiZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvYzhmZDA3LWQ1YzctNGVkMy04MDc1LTI3NGYxMGE1ZTFlMy8x
L1FGQ05DR0xBdmw4T2RiX2Z2Z0tZMUJZak9UUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
YzhmZDA3LWQ1YzctNGVkMy04MDc1LTI3NGYxMGE1ZTFlMy8xL01fVUtqZWx4LUZS
X1cxYkpmRGJDaC05VXZiZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvyLDANBgkqhkiG9w0BAQsFAAOC
AQEAkm9Pvq42KSRco8Ak9aKkx+MdtFcpa6U/56sXutCKYpJe8MiAvzwi+Hh0y1O+
Nxpb/qch5pFgS/a8t1paEaYK9irz6FQz/fSk55voLF8tscgVt+ZPIgxg5kSWmMd3
EEuqI1ZWnaq+0wSdGvJipSEatNWthxGbRbx7w/07BWJCtovRJcIyYs6/2e9g+bzF
OIifvhmIhTXZFxxgvrzzw55EvHZMeFVogFwaN7ZMGaBVvrXXsCZwdySmV/P/6EuL
A46R7UVlA4s1MhszV7gYmAeilBsGS6/j4Qt4Eb+w9aw6g+YPaMRMva8ayjSL+0ng
aVGgA+TjiZu8A6vkFCLSkeJOJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:15 2024 by rpki-client on console-fra.rpki-client.org