Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/QHIFsO8dAeHIiiFGibp61ss_9DI.roa
File: QHIFsO8dAeHIiiFGibp61ss_9DI.roa (raw, json)
Hash identifier: 1L8L3H3jiulYgJ9bDPXBi70WLtaNL5qEN6WuvVajdwY=
Subject key identifier: 40:72:05:B0:EF:1D:01:E1:C8:8A:21:46:89:BA:7A:D6:CB:3F:F4:32
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 32BBA0FA
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/QHIFsO8dAeHIiiFGibp61ss_9DI.roa
Signing time: Sat 01 Jan 2022 05:59:31 +0000
ROA not before: Sat 01 Jan 2022 05:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34235
IP address blocks: 5.179.192.0/21 maxlen: 21
91.223.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851157242 (0x32bba0fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jan 1 05:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=407205b0ef1d01e1c88a214689ba7ad6cb3ff432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:a1:9f:30:35:b0:dc:3a:6d:e9:ca:02:4d:
d2:35:99:c1:e6:6c:8d:df:51:d3:5b:43:6f:78:e6:
88:e3:24:45:a5:e6:96:db:7e:32:7a:6d:d9:ea:0a:
28:df:45:bd:d5:66:6f:35:36:12:a4:d6:a4:a7:de:
eb:f3:1e:a0:36:db:5c:b3:24:53:61:37:33:3c:4c:
b3:04:71:93:a8:40:56:00:03:30:33:ff:f7:a4:d8:
3e:8c:58:4d:6e:4c:0a:68:f5:36:a3:1b:f7:74:80:
b9:0d:19:d0:b1:e0:1c:32:21:60:f2:17:94:7b:28:
ca:38:26:79:bc:ed:80:60:42:51:16:62:c1:d6:2e:
cd:a2:4d:20:15:5f:50:ee:66:be:82:40:4c:1c:06:
48:3a:72:97:e0:e8:62:66:6d:7a:cb:96:c4:27:32:
b9:48:66:54:b2:79:b8:b8:f4:6c:53:87:69:e5:59:
04:9a:3a:0e:4c:32:79:12:dc:bc:74:c7:2e:cd:52:
2d:33:de:8d:5b:48:f5:38:08:89:c6:93:fa:a4:5d:
a1:90:53:83:49:52:70:7c:96:2d:1c:28:b0:06:e2:
77:0b:d7:07:69:e5:5c:c0:dd:05:8c:f1:4c:48:d1:
0b:5d:f7:bf:c5:54:c0:f3:de:86:b1:4f:87:f9:a6:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:72:05:B0:EF:1D:01:E1:C8:8A:21:46:89:BA:7A:D6:CB:3F:F4:32
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/QHIFsO8dAeHIiiFGibp61ss_9DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.192.0/21
91.223.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:14:65:50:58:ff:8a:af:59:5d:e4:cb:24:d1:30:48:e5:1e:
44:5e:2d:9f:0f:a9:ce:36:ce:f2:91:b1:14:bf:80:52:c6:29:
38:5d:39:ec:16:85:6e:c3:76:28:a1:df:94:47:73:4e:67:c2:
4b:e4:9f:a9:eb:9d:6d:2a:e7:ec:39:2b:35:b7:45:a2:11:57:
9f:d2:8e:07:e3:b4:fb:8a:67:80:ad:8c:13:97:b1:4d:0c:3a:
a0:5b:d7:79:58:ec:ae:85:47:8c:ef:de:2e:02:61:dc:3e:10:
e3:c8:85:c3:8f:5c:ce:f0:f2:50:39:7c:9d:4a:ef:55:98:8a:
52:a0:2f:d6:bc:9d:d1:d5:09:ea:dc:de:5d:42:9d:aa:ca:07:
86:35:26:78:71:0e:e1:cb:72:93:a0:9c:d9:8f:d2:11:e5:80:
d0:76:0a:85:7d:1b:1d:52:0e:10:f4:69:81:80:09:7c:a8:78:
5e:6f:97:a7:70:2c:8b:42:29:a5:82:68:22:d4:1e:9b:a6:09:
ec:28:2a:af:b9:96:9d:ce:18:d7:d2:93:de:93:4d:9c:90:d1:
87:98:e3:72:c3:af:93:8a:1b:eb:1f:32:6b:d5:64:ad:13:f9:
41:8e:a0:0e:dd:23:60:e7:32:44:c3:d3:86:d9:d6:3c:ca:17:
be:47:cc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org