Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QQuD6mzR8jYgEJ7ghNSV-W6Ei98.roa
File: QQuD6mzR8jYgEJ7ghNSV-W6Ei98.roa (raw, json)
Hash identifier: M/dAj586CseWn9OUc7DuQS17yI7soUXmsSjKA743QRQ=
Subject key identifier: 41:0B:83:EA:6C:D1:F2:36:20:10:9E:E0:84:D4:95:F9:6E:84:8B:DF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0183359E4DADBD3F469F00C6814EA735AF8F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QQuD6mzR8jYgEJ7ghNSV-W6Ei98.roa
Signing time: Tue 13 Sep 2022 06:51:50 +0000
ROA not before: Tue 13 Sep 2022 06:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 81.168.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:9e:4d:ad:bd:3f:46:9f:00:c6:81:4e:a7:35:af:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 13 06:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=410b83ea6cd1f23620109ee084d495f96e848bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:3e:22:1b:47:e7:44:83:d9:89:8e:2a:d6:
ee:8f:19:55:e8:62:f7:70:a4:d5:af:f0:88:ec:b4:
60:14:55:6a:c1:29:a7:04:79:e1:60:ce:be:b7:9f:
0c:ae:fc:bc:09:df:45:fd:10:ac:45:ed:c4:92:ce:
ec:61:77:52:25:54:55:b3:86:c5:cc:8c:4b:c4:a4:
e0:10:d3:db:52:ff:fe:ac:e0:6d:8e:1a:5a:19:2b:
1d:89:79:14:21:18:c3:17:e4:ec:c9:88:c1:ac:7e:
b8:77:a8:f0:8f:e9:34:51:d7:e2:5c:4f:a2:f0:3a:
38:fd:30:07:83:2a:c0:42:4a:f7:74:1c:a1:99:8d:
7f:b1:61:1d:c8:2a:1c:23:f4:5a:9c:6a:f6:86:89:
8c:16:4d:7b:df:3d:2a:af:fd:6d:08:7a:77:0c:40:
41:d1:3e:85:4b:e5:b3:9c:d3:73:7c:d4:c1:b7:80:
c0:43:4d:01:71:c9:b7:4c:11:7e:88:4b:a7:4f:9f:
54:b1:bb:93:db:65:fa:b2:33:d0:8b:72:d3:e0:da:
0c:df:4f:b9:e9:fb:9e:cc:e0:2c:3a:9c:59:10:d9:
1d:d8:d4:34:9f:4e:9d:8a:d7:90:e8:5b:10:91:55:
5a:55:6a:39:bb:ae:5c:10:d8:02:fb:e5:18:2d:29:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:83:EA:6C:D1:F2:36:20:10:9E:E0:84:D4:95:F9:6E:84:8B:DF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QQuD6mzR8jYgEJ7ghNSV-W6Ei98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2f:8d:98:67:4e:b5:05:ee:c4:aa:53:3f:23:97:f6:36:c7:
39:15:1f:1e:f2:df:7d:c2:6d:21:c4:10:41:82:85:f4:f9:e6:
6f:07:87:e7:cd:e5:da:99:9f:05:c6:5f:95:f1:6c:84:dd:ff:
38:17:6b:98:75:ad:6b:ab:ce:9b:77:54:1b:4f:5e:0a:39:e7:
8d:37:21:1e:66:2d:a2:60:b1:88:f8:6e:c1:d5:e6:d6:86:fa:
eb:2c:65:b2:bf:58:e5:5f:d0:28:d6:ca:06:c9:3d:1a:fe:06:
a3:c2:7b:48:6a:97:b7:1d:cc:df:f2:0d:1e:6a:08:ba:8c:dc:
c4:3e:07:d7:36:d4:df:92:99:1b:1c:8a:b1:86:e0:8d:c2:7d:
63:99:10:3d:04:b5:98:07:f8:f3:8d:23:de:84:99:a1:b5:17:
15:56:f7:0f:5f:0c:57:22:27:a1:60:91:00:dd:6c:57:04:4c:
19:db:be:d8:43:0f:c3:8e:7f:a0:e0:66:18:13:20:40:81:a2:
00:98:4c:5c:0e:ee:40:1e:e5:a6:6f:db:bd:33:02:e4:c4:55:
c6:40:01:14:26:3a:b9:ed:89:b6:eb:0f:06:ca:d1:89:28:98:
c2:e3:87:cb:2c:f8:40:be:10:e0:f8:ed:48:19:4f:c6:4f:e7:
a9:eb:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:07 2023 by rpki-client on console-fra.rpki-client.org