Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/Qep_Dbz1CKR_zVLlN2rswKH1nHM.roa
File: Qep_Dbz1CKR_zVLlN2rswKH1nHM.roa (raw, json)
Hash identifier: 45/rmvh2KyI5+we5MCXHzPp1Tr6I+aM6PSnRYuS/IRQ=
Subject key identifier: 41:EA:7F:0D:BC:F5:08:A4:7F:CD:52:E5:37:6A:EC:C0:A1:F5:9C:73
Certificate issuer: /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial: 04B0D472
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/Qep_Dbz1CKR_zVLlN2rswKH1nHM.roa
Signing time: Sat 01 Jan 2022 02:52:07 +0000
ROA not before: Sat 01 Jan 2022 02:52:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212903
IP address blocks: 91.211.3.0/24 maxlen: 24
2a0c:8740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78697586 (0x4b0d472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Validity
Not Before: Jan 1 02:52:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41ea7f0dbcf508a47fcd52e5376aecc0a1f59c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d4:e0:fc:d8:4d:0a:42:29:f9:b6:b9:39:0f:
e7:7d:11:00:dd:2f:eb:f4:19:1d:9c:9e:94:7a:6c:
c3:45:5c:36:83:88:0a:f6:b5:5a:f7:aa:59:ac:48:
f0:eb:39:c8:dc:c4:9b:35:67:3d:ce:98:46:8d:9b:
e9:6d:ea:bc:70:57:67:fe:cb:e3:20:c1:1d:c1:86:
c2:07:a3:1f:c3:e8:5e:72:33:87:97:e1:fa:66:e2:
28:b8:1b:ac:16:a2:84:03:95:17:92:2f:8e:51:b9:
61:76:4e:94:14:a9:89:2b:42:c0:9a:48:1a:fb:30:
85:42:9d:d7:d4:ba:59:ce:60:a4:65:4e:81:5a:8b:
5e:da:1a:7f:20:67:97:11:9d:60:a4:2b:7b:f4:f1:
6f:d9:70:7c:fe:f3:64:94:aa:50:ae:b6:e3:14:0f:
ac:5d:1d:3a:93:c9:8b:58:3c:18:16:b8:13:f5:97:
91:4e:62:23:70:cf:c7:24:dc:ba:c5:e5:ab:00:7b:
ae:39:94:20:49:72:85:76:06:08:15:dc:68:6d:6b:
b1:2d:8a:f8:91:e6:01:6f:c8:d4:36:47:4b:4b:43:
de:b8:62:84:99:3c:48:63:10:a3:8c:f6:f7:d1:3c:
49:66:dc:f5:ec:90:f6:3b:a3:0f:db:79:c3:d9:90:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:7F:0D:BC:F5:08:A4:7F:CD:52:E5:37:6A:EC:C0:A1:F5:9C:73
X509v3 Authority Key Identifier:
keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/Qep_Dbz1CKR_zVLlN2rswKH1nHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.3.0/24
IPv6:
2a0c:8740::/29
Signature Algorithm: sha256WithRSAEncryption
1d:ec:b2:7c:55:9f:95:05:d0:f3:59:96:b4:52:d5:4a:b1:cb:
b2:04:31:0b:40:73:1c:5d:93:cd:17:47:a4:16:72:bc:c6:e3:
7e:27:27:56:f0:8b:57:38:96:20:72:76:db:07:ab:a1:cb:5a:
8f:41:7a:de:cb:3e:ba:c0:d2:c6:1e:5f:49:d5:e1:66:89:24:
61:46:61:09:da:53:08:82:ce:02:f2:3f:01:89:fc:0e:53:15:
a7:25:f7:cf:39:f8:7c:8b:0a:9c:ba:34:d1:45:4f:a9:cc:08:
4e:c4:0d:a1:ef:94:49:ac:25:97:d0:30:84:d2:d5:58:d1:a4:
61:9a:03:d4:86:4f:42:09:02:70:35:e9:27:3c:9b:a3:64:07:
cb:73:13:16:27:43:24:f5:5d:6e:a7:8c:93:e6:9f:3d:e7:8a:
24:bc:46:51:0f:15:f2:be:7d:de:71:62:1b:af:b1:ed:4d:ca:
31:e3:a1:1e:3e:91:de:d0:e1:77:75:3b:27:65:54:7f:2e:b1:
0b:70:2a:f4:78:2f:1f:90:53:43:b9:d3:00:0c:46:88:11:a5:
93:bd:dc:d0:21:ca:18:3c:b9:c0:cf:b7:4a:8d:8a:97:42:eb:
83:c3:ea:50:3d:6a:63:7a:c2:cf:87:8d:b8:dd:49:43:8c:96:
6f:9e:fc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:49 2024 by rpki-client on console-fra.rpki-client.org