Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/QFt4xyfXNXlu3ohQn-VQhef6-Ak.roa
File: QFt4xyfXNXlu3ohQn-VQhef6-Ak.roa (raw, json)
Hash identifier: Awq4uFvTxQ1ZVhzNtHrk5ijixiHL9UvVDdqHoHu5rRg=
Subject key identifier: 40:5B:78:C7:27:D7:35:79:6E:DE:88:50:9F:E5:50:85:E7:FA:F8:09
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 0181F2034B83EFAD85260665CDF3539F6F26
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/QFt4xyfXNXlu3ohQn-VQhef6-Ak.roa
Signing time: Tue 12 Jul 2022 10:45:11 +0000
ROA not before: Tue 12 Jul 2022 10:45:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201073
IP address blocks: 81.199.232.0/24 maxlen: 24
81.199.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:03:4b:83:ef:ad:85:26:06:65:cd:f3:53:9f:6f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jul 12 10:45:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=405b78c727d735796ede88509fe55085e7faf809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:3a:80:04:80:46:a8:80:58:86:f7:5c:c4:
5e:0c:91:d3:68:b1:1a:ad:d8:82:31:5f:f5:5d:a6:
20:35:53:7c:dd:f0:a7:65:94:35:fc:9e:91:cc:5d:
40:03:5a:08:a6:b4:a4:c3:b7:65:5a:75:24:c6:a6:
23:0d:c2:66:e0:c2:9c:99:fc:fd:1e:fa:d4:82:b7:
35:b5:4d:df:95:a3:5d:fb:5d:47:40:72:cd:61:16:
4a:87:b5:5f:07:0a:3d:87:2f:7a:1e:36:65:56:f6:
11:0d:0c:94:af:07:97:d6:5a:81:17:9f:41:a3:b8:
74:dc:7a:f2:6e:73:dc:83:e9:97:40:63:95:1d:38:
22:f6:2d:a2:20:48:97:b8:ee:0e:56:ae:84:b2:ac:
c5:81:cb:bc:07:f0:99:bb:3c:8c:a4:0d:d7:b5:03:
76:35:4d:5b:21:ff:49:51:3f:12:6e:72:83:74:5b:
fc:65:de:21:11:07:24:5e:45:82:7b:9e:c8:5e:fe:
f6:c1:45:ca:7f:42:d8:f8:92:af:be:71:4c:a6:81:
8e:6e:7d:92:b0:a3:0b:05:4e:5f:27:e9:ed:7c:34:
7f:f9:39:1e:ff:75:1a:61:fc:7b:c4:cf:4e:9e:34:
68:33:bd:a2:31:1e:c2:8b:3a:63:24:6d:69:b9:24:
32:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:78:C7:27:D7:35:79:6E:DE:88:50:9F:E5:50:85:E7:FA:F8:09
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/QFt4xyfXNXlu3ohQn-VQhef6-Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.232.0/21
Signature Algorithm: sha256WithRSAEncryption
86:63:39:fe:5d:cf:c8:75:ef:1e:b3:64:9d:96:58:c3:d3:f5:
65:22:fb:18:c7:ae:2f:e7:81:5b:f1:48:e7:4a:e2:5e:74:f4:
ee:23:a6:5b:4d:df:78:7a:9a:02:46:cd:2c:8d:c9:53:e1:e9:
b0:a1:3b:64:1f:aa:0a:67:b8:ca:45:c4:ae:3b:72:a5:db:5a:
ff:12:15:68:f8:ad:2d:0e:4d:88:d6:14:28:5c:0e:ae:40:87:
ca:9d:ec:c6:28:e4:90:8b:a6:d5:80:ba:25:3b:60:19:d1:e7:
e9:2e:2b:6f:b0:ca:3b:4b:c2:14:c0:ff:af:29:f2:76:0c:09:
d7:06:7d:0d:01:07:48:d1:e3:88:a3:cd:2b:90:b9:5a:71:18:
64:a9:62:e2:06:de:77:90:4e:d0:f3:2a:e8:4f:b6:d5:75:5d:
89:3c:59:32:24:37:12:5a:d8:08:3a:af:61:54:86:86:ec:73:
4f:bc:b0:a1:5d:29:06:ec:47:b9:e2:01:1c:78:ff:f0:b9:7c:
17:02:b0:97:f9:62:32:60:b2:61:2b:3f:a2:e4:ac:68:ee:d1:
99:cf:50:89:65:74:26:a0:41:24:9e:4c:1a:97:93:a0:da:a3:
a5:ab:4b:b3:48:e1:b9:66:79:5d:05:4c:d3:1d:f1:a8:62:61:
e2:79:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org