Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/QFHmbyKlLOJqw7eusR23yS36Vk8.roa
File: QFHmbyKlLOJqw7eusR23yS36Vk8.roa (raw, json)
Hash identifier: yv7I5z0d6eXVqJyYXTtu5K/ZnLn6IoZK+o2od2JJBQM=
Subject key identifier: 40:51:E6:6F:22:A5:2C:E2:6A:C3:B7:AE:B1:1D:B7:C9:2D:FA:56:4F
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 018441FA8EAB8F3D1AAE50AA92ACC0639DC7
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/QFHmbyKlLOJqw7eusR23yS36Vk8.roa
Signing time: Fri 04 Nov 2022 09:30:50 +0000
ROA not before: Fri 04 Nov 2022 09:30:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22439
IP address blocks: 81.199.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:fa:8e:ab:8f:3d:1a:ae:50:aa:92:ac:c0:63:9d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Nov 4 09:30:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4051e66f22a52ce26ac3b7aeb11db7c92dfa564f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:29:2b:82:03:a1:a3:6b:78:4d:91:23:dd:
a7:55:d7:82:d4:63:b2:f7:b0:4e:a6:fe:60:71:2f:
4e:81:87:e8:39:9e:5e:b9:9f:23:a9:49:bb:51:59:
4b:4b:77:69:c5:e9:2d:c0:37:e6:0b:75:ad:f7:05:
3e:28:c3:6a:82:29:63:78:a4:97:9c:80:25:e0:2f:
15:5b:44:2f:7b:e3:cb:ed:27:19:d5:48:54:01:3f:
eb:08:9d:01:06:23:7c:96:ac:9b:f5:94:0e:be:ad:
23:42:43:e4:f6:d6:aa:34:e8:cb:dd:d6:64:db:22:
64:f4:6e:dc:9e:49:93:f1:86:0f:08:f6:f5:d3:b1:
50:51:73:c9:f8:ac:9c:85:1f:e3:6a:2f:1f:4a:10:
25:6a:b8:c0:9f:bc:22:e5:05:92:c7:56:e6:fe:c6:
a3:6e:37:67:15:98:3f:9a:0a:71:24:49:90:64:a5:
d0:13:76:32:5c:95:3d:f3:55:0e:78:2d:5c:e4:7d:
01:a1:80:ff:0d:1b:43:d5:af:40:b8:b4:39:9e:d2:
6e:55:6c:a7:cc:e7:e4:cf:68:cd:76:ad:31:fe:0d:
73:d4:96:6f:a9:58:50:13:74:95:1d:88:92:2b:1b:
05:1c:6f:11:e4:15:74:5a:08:b1:60:0e:3e:c1:b9:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:51:E6:6F:22:A5:2C:E2:6A:C3:B7:AE:B1:1D:B7:C9:2D:FA:56:4F
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/QFHmbyKlLOJqw7eusR23yS36Vk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.31.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b6:6d:bd:2b:32:85:52:8d:13:0b:52:cb:af:f1:19:d9:0a:
39:5e:62:38:31:a4:11:cd:d6:71:2b:43:0f:bf:53:36:cb:14:
69:92:c8:8f:57:b1:a1:41:53:eb:2c:c1:82:44:b9:ae:b8:cf:
50:c2:59:e3:e1:86:d4:75:c7:12:fa:bb:fe:2d:a2:e4:b8:53:
dc:5e:20:fa:62:74:32:b0:c6:52:7c:35:bf:1a:b9:9f:5c:e1:
c5:15:5d:cf:f7:b2:e8:73:95:09:5e:07:ca:1b:ef:39:00:47:
6b:e8:ca:5b:d8:bb:50:bb:e2:e0:e5:d3:e3:8e:0c:25:6e:76:
92:c3:08:72:1a:ec:2d:50:d2:cc:9d:b6:0a:c2:2e:27:98:8e:
4b:a8:52:6c:c9:44:b3:3a:25:e6:58:47:77:e7:a6:e3:6e:69:
58:16:43:16:7f:8f:71:4b:44:d4:8f:f1:2e:f4:93:78:f8:71:
d6:1a:1c:d1:0e:fd:80:9d:ff:9c:21:5b:01:3b:b7:69:f2:79:
31:44:a6:83:fe:78:75:be:ed:2d:f3:e7:65:c3:49:13:a5:3a:
4b:71:8e:e0:bb:66:76:0c:9d:87:55:52:b4:73:1f:32:83:0e:
e6:e6:09:a3:90:4e:38:58:69:1c:a5:ee:ff:47:49:39:7d:a1:
82:1f:36:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:57 2024 by rpki-client on console-ams.rpki-client.org