Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qR-ItT4JJYVacMdIaHnfpMXqKjc.roa
File: qR-ItT4JJYVacMdIaHnfpMXqKjc.roa (raw, json)
Hash identifier: d9wqN3EXLw68wi2p2N1b7wIONHBOYhUtrLjSPto3Ktw=
Subject key identifier: A9:1F:88:B5:3E:09:25:85:5A:70:C7:48:68:79:DF:A4:C5:EA:2A:37
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0184C84736758DBF337D138C728B44364474
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qR-ItT4JJYVacMdIaHnfpMXqKjc.roa
Signing time: Wed 30 Nov 2022 11:23:40 +0000
ROA not before: Wed 30 Nov 2022 11:23:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 81.168.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:47:36:75:8d:bf:33:7d:13:8c:72:8b:44:36:44:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 30 11:23:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a91f88b53e0925855a70c7486879dfa4c5ea2a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:e5:7a:2c:34:88:e5:4e:0d:ce:29:6c:39:
db:11:d2:48:aa:33:c1:3a:35:50:91:e9:8c:a5:e2:
c8:40:99:35:de:3b:15:de:1c:0c:b5:0b:f8:41:95:
fc:d9:4c:62:da:ef:32:80:b6:9a:36:3b:b5:cd:fd:
70:5b:15:51:9d:8a:ee:3e:97:18:50:79:f8:82:3c:
e8:3a:e7:d1:ce:b8:90:2c:63:65:1d:6f:24:47:04:
2a:93:57:9f:d2:48:e6:83:ba:f0:87:06:fa:e5:23:
55:d6:04:04:8b:82:3c:11:49:54:46:c2:0e:66:bb:
22:8f:21:74:fc:a2:7a:f1:cf:9d:6b:6c:15:2f:96:
92:15:8a:70:c6:60:e5:01:d6:7c:56:bf:aa:dc:e2:
13:7f:b1:84:99:fe:ac:73:fc:1b:2d:88:d5:06:ae:
89:36:18:3f:d9:96:80:6f:03:3d:06:20:c0:30:33:
93:e7:f3:bc:66:93:6d:0f:94:81:26:d2:b9:82:53:
c0:97:fd:f2:bb:55:b9:36:40:72:10:f2:d9:85:f1:
c5:e2:87:b0:09:da:1c:2c:ec:34:03:b6:b4:64:5b:
f8:20:82:f5:24:78:d4:21:1b:22:4e:f0:43:07:b4:
6f:84:8c:1d:13:b2:dc:f3:e3:20:9f:24:37:0b:c0:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:88:B5:3E:09:25:85:5A:70:C7:48:68:79:DF:A4:C5:EA:2A:37
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qR-ItT4JJYVacMdIaHnfpMXqKjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:99:93:a6:ac:5b:45:35:9e:f0:6d:fe:8a:b5:af:30:87:60:
4f:e9:2b:3b:49:b6:b6:db:37:11:3e:67:04:4e:ec:75:55:b8:
a8:c9:0f:67:3b:11:1f:a7:b2:e5:de:d7:80:8e:82:79:f3:99:
88:99:23:b2:15:33:15:ec:ea:2c:ea:0e:0c:a9:a1:0d:f3:c9:
e6:11:be:9b:8b:d0:d3:b9:98:9a:ed:10:67:dc:c7:64:d1:1f:
5f:ca:df:bc:3e:ca:1b:05:83:11:69:ae:28:d2:85:04:e9:e4:
3b:6f:5f:d9:38:09:4b:40:5a:b8:d4:9b:6c:58:dc:21:96:39:
f3:b5:f0:e9:7c:06:9c:e4:c1:64:88:7b:5f:86:e7:f8:f4:14:
7d:e9:79:26:cb:3e:6e:3b:3c:d4:aa:5b:c1:1d:e4:37:5b:2b:
5f:2b:e7:29:bd:a7:fa:f6:b3:7b:86:3a:c3:25:a3:85:11:28:
82:70:ec:9c:54:cc:95:41:24:5b:03:d1:b4:7b:8b:93:d5:3e:
9a:01:7f:41:79:de:f3:40:3e:60:7b:03:24:a2:1d:0a:3e:b3:
da:ec:3f:ff:53:b1:30:68:a6:e8:6a:c4:fe:ae:50:16:00:9b:
29:f3:b3:0c:31:3b:f2:92:b3:70:bd:78:57:eb:9d:f7:51:5f:
25:b1:be:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org