Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/nQKQFfRlYPvcJSslO3JLjIbOrBs.roa
File: nQKQFfRlYPvcJSslO3JLjIbOrBs.roa (raw, json)
Hash identifier: p/s+Hfir5P9N8nua7hENM+EO/pI9q9AI0LWM741GQVw=
Subject key identifier: 9D:02:90:15:F4:65:60:FB:DC:25:2B:25:3B:72:4B:8C:86:CE:AC:1B
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0187066B98DE595D2E7A8B162569B30FE0A2
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/nQKQFfRlYPvcJSslO3JLjIbOrBs.roa
Signing time: Tue 21 Mar 2023 23:05:27 +0000
ROA not before: Tue 21 Mar 2023 23:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 91.147.117.0/24 maxlen: 24
91.147.118.0/24 maxlen: 24
91.147.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:6b:98:de:59:5d:2e:7a:8b:16:25:69:b3:0f:e0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 21 23:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d029015f46560fbdc252b253b724b8c86ceac1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:bf:63:38:67:59:2c:dd:c0:83:97:19:c2:
6a:74:9b:25:a9:4e:4e:7a:fd:ae:a5:ee:6e:de:d4:
ae:d1:d2:e4:61:b2:84:62:e1:48:fd:69:8e:f2:48:
c5:73:7b:b3:ea:d4:94:92:49:db:01:cd:0a:6e:d4:
ec:5b:a9:f3:d0:04:7f:9d:7c:db:87:5b:cb:bf:1c:
67:b2:53:c9:55:7f:eb:8d:46:c6:0e:ec:0e:3e:15:
d5:a9:d9:d6:a5:1a:23:00:d7:b8:5b:5f:60:b9:d8:
c1:d3:a9:36:4e:eb:8c:7c:f3:f1:bc:54:6c:01:d6:
47:3e:ff:2b:b3:17:e5:e2:2d:01:e0:f2:1e:7f:e2:
7e:29:61:bd:33:75:b7:08:34:f1:5e:72:fa:9d:28:
60:1d:18:83:24:b7:a1:24:f9:7e:be:b9:4c:10:67:
8c:23:3d:7f:61:e9:ba:5d:a8:46:35:52:fc:02:1d:
42:89:7a:91:22:93:e2:41:4b:69:cc:b2:31:d2:5a:
ce:7c:4e:75:6f:3c:64:fb:77:b2:4b:24:dc:c7:4b:
4d:5b:96:fc:49:b9:a4:8a:0e:a6:25:fc:b3:18:13:
98:94:9d:d9:a3:74:23:db:b6:9d:03:af:ff:d6:8b:
8e:be:d5:bd:70:5e:f8:ed:21:4a:b4:87:c8:34:c0:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:02:90:15:F4:65:60:FB:DC:25:2B:25:3B:72:4B:8C:86:CE:AC:1B
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/nQKQFfRlYPvcJSslO3JLjIbOrBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0-91.147.118.255
Signature Algorithm: sha256WithRSAEncryption
2e:36:37:93:67:fc:c5:92:a3:1e:ff:29:f6:ba:a0:ab:98:a1:
68:26:94:3f:7d:d6:e1:d8:e0:b1:47:16:55:2e:c0:f6:36:bc:
81:ee:75:c6:02:fc:92:84:4a:53:d0:d7:95:3c:94:d0:a5:f4:
ce:68:c7:39:61:68:47:3b:f9:ee:0c:18:3a:af:1a:dd:50:c4:
17:5a:84:e4:69:44:9b:da:cf:fc:4a:8f:8c:33:39:ce:bf:98:
1f:33:22:32:6d:fb:c5:fc:8e:3e:dd:92:85:4d:64:84:3b:f3:
7d:60:0c:2f:fe:a2:ac:ca:a5:07:0d:d6:bf:ff:9f:3e:2f:36:
db:73:7c:75:b7:d4:1e:7f:7e:30:c7:03:b0:21:2d:79:7f:89:
99:90:38:2d:12:6e:08:65:4e:a2:14:5c:7a:88:d2:11:8e:a4:
98:2c:59:93:66:d2:6f:e8:ee:59:7e:5f:69:65:ca:4e:82:66:
37:3d:3d:8b:0c:21:f8:4e:62:80:a6:41:03:d0:47:dc:ac:12:
9b:b3:75:a6:e2:8c:35:82:98:1f:c2:25:be:9f:86:cf:ef:fd:
3a:20:ca:48:b4:a4:6b:36:6b:71:b5:4f:6f:b7:d2:30:ff:48:
9f:88:c3:24:42:a9:80:52:b7:49:bb:7e:26:55:fa:20:1d:ad:
7e:7d:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:03 2025 by rpki-client