Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/qCLnpNoy6AAeF640p3bdvr0i5QU.roa
File: qCLnpNoy6AAeF640p3bdvr0i5QU.roa (raw, json)
Hash identifier: c3C/6WdMxMxXDl9UolBbX3zBJU0uD88CXBVXnfUrwq4=
Subject key identifier: A8:22:E7:A4:DA:32:E8:00:1E:17:AE:34:A7:76:DD:BE:BD:22:E5:05
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: D020C1
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/qCLnpNoy6AAeF640p3bdvr0i5QU.roa
Signing time: Sat 01 Jan 2022 12:05:31 +0000
ROA not before: Sat 01 Jan 2022 12:05:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197433
IP address blocks: 91.221.132.0/24 maxlen: 24
91.221.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13639873 (0xd020c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Jan 1 12:05:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a822e7a4da32e8001e17ae34a776ddbebd22e505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:33:db:cf:9e:44:f7:6d:5e:d0:78:a1:82:
8c:cc:fd:6a:c0:4a:fe:a8:57:ab:5a:81:73:e8:33:
f8:27:b1:c8:85:11:4e:41:b3:8e:f4:29:ef:25:b5:
90:5f:b4:7d:0b:8d:29:be:ce:bd:a7:e4:39:5c:86:
b1:e0:cb:99:2d:df:15:29:60:ff:90:f4:d6:c4:b9:
60:3c:55:c2:f5:10:cf:05:86:26:1e:49:bf:91:0b:
79:4e:37:14:af:6c:3d:2d:79:cc:0f:d3:98:b2:ca:
0d:90:d3:b6:29:ea:5e:35:03:8f:77:70:39:76:18:
c2:91:e7:d9:52:c7:6f:25:16:c8:1c:19:5e:c6:fe:
08:b6:b8:c2:b7:60:b1:02:ea:14:94:e8:0a:ec:c4:
19:cc:dd:ee:e6:f4:fa:cc:93:03:7b:ce:7d:1d:0a:
72:ff:b1:69:41:2e:55:97:3b:bd:ff:20:4b:ab:5a:
ba:30:84:ac:74:7b:34:81:ad:a8:1a:88:5a:0a:db:
97:73:a1:d9:3b:76:70:73:b6:a9:5c:d8:81:f1:79:
a5:62:f2:2f:91:16:49:22:18:39:ca:a2:99:33:2b:
be:83:b4:88:26:7a:e9:75:5a:49:ef:da:77:7a:32:
03:2e:b7:14:00:00:0b:bb:50:53:47:66:47:a0:7d:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:E7:A4:DA:32:E8:00:1E:17:AE:34:A7:76:DD:BE:BD:22:E5:05
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/qCLnpNoy6AAeF640p3bdvr0i5QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.132.0/23
Signature Algorithm: sha256WithRSAEncryption
91:23:86:d8:18:52:f7:6d:8e:16:b6:ba:dc:46:35:64:5e:ac:
b4:9f:5c:b5:ae:94:9e:0f:75:f9:f8:50:9f:29:37:51:3a:1f:
f0:4c:b5:a7:40:b2:54:6d:69:8a:b0:b5:3a:fc:bd:80:87:45:
c2:ab:0f:51:6c:4b:24:6b:45:4d:18:36:d8:10:25:dd:2c:65:
49:5e:73:77:7c:22:3b:3b:bf:45:0e:0d:27:18:19:7b:67:a4:
f2:45:11:d1:59:2b:9e:75:02:8e:53:b7:44:4c:93:9d:2b:cb:
af:dd:04:e8:d3:a4:37:67:46:aa:06:47:39:b2:f6:4b:ad:0a:
1b:fa:c5:4c:9f:06:29:1c:d6:a3:6f:df:9a:95:3c:67:30:58:
f5:b8:90:68:47:41:f2:a5:ef:25:c8:bc:f3:36:27:ef:97:04:
7d:87:34:5f:4d:16:65:65:2a:36:37:bf:89:ac:9f:0a:c9:b0:
aa:4a:a0:38:7b:6a:28:b3:a8:1a:61:85:db:af:35:f8:4e:dd:
84:ea:6b:33:ed:ff:e5:df:72:1c:d5:35:43:3a:9b:19:56:bd:
62:78:11:53:c7:35:68:63:67:af:2e:5e:10:ec:bd:c8:33:e3:
b4:6e:4f:16:9b:07:15:42:3a:d4:53:4f:b4:0a:4e:e6:10:15:
89:23:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:24 2025 by rpki-client