Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/KQ44VFNEzJVMBjQBhKiK2t_Qt8Q.roa
File: KQ44VFNEzJVMBjQBhKiK2t_Qt8Q.roa (raw, json)
Hash identifier: BcvOnM7CpMcpMJV+JVt0gkCdBCsmgqaHgcIkA9+bAQ0=
Subject key identifier: 29:0E:38:54:53:44:CC:95:4C:06:34:01:84:A8:8A:DA:DF:D0:B7:C4
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 06F2B800
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/KQ44VFNEzJVMBjQBhKiK2t_Qt8Q.roa
Signing time: Mon 13 Jun 2022 12:31:45 +0000
ROA not before: Mon 13 Jun 2022 12:31:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 91.204.180.0/24 maxlen: 24
91.204.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116570112 (0x6f2b800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jun 13 12:31:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=290e38545344cc954c06340184a88adadfd0b7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:e8:c5:bc:8a:ac:e6:07:31:c1:c2:a9:bd:
fc:43:08:5a:dc:f0:87:60:ab:2d:1e:b0:ce:46:37:
f6:5c:59:4b:08:99:9b:6f:d2:df:3b:32:9a:54:ef:
19:89:28:9a:05:73:90:38:bf:97:2f:c8:90:3f:ee:
5d:e8:f3:a9:c9:c5:3b:ea:f0:ac:7a:f3:e3:64:cf:
4f:71:d0:5c:e1:bc:40:e8:fd:4c:9a:2a:5e:c8:ad:
fc:55:24:9b:14:93:a8:8e:0e:7a:87:a7:a1:84:9d:
e3:eb:c8:ff:f3:b7:e6:9c:ff:80:1b:be:3a:d0:62:
95:19:e9:89:7a:39:df:3b:02:c9:8f:82:0d:85:09:
76:19:8f:bb:9b:d8:5a:ba:a4:0c:b6:d1:d4:ec:66:
b2:0d:7b:d3:18:bc:08:64:20:dd:4a:77:26:4c:67:
2d:dc:21:ac:2c:e0:96:b8:6f:af:bb:d5:0c:fa:2a:
d6:64:c1:0e:ed:51:19:22:ab:23:57:e0:0f:d9:d6:
a9:51:4d:f8:30:73:f1:36:ee:11:d7:68:50:73:4a:
46:fc:03:9d:8e:85:21:d2:3b:5e:2a:7d:1d:44:96:
cb:fd:1a:29:4a:ab:64:44:ef:32:52:c6:93:6d:41:
56:9c:ce:76:5b:e5:ed:75:f2:fa:2c:16:4a:64:b8:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0E:38:54:53:44:CC:95:4C:06:34:01:84:A8:8A:DA:DF:D0:B7:C4
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/KQ44VFNEzJVMBjQBhKiK2t_Qt8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.180.0/24
91.204.182.0/24
Signature Algorithm: sha256WithRSAEncryption
44:17:94:ba:87:b3:60:3b:a0:ea:55:21:3b:10:df:15:59:3e:
8d:65:7c:2c:1c:7a:78:29:df:38:8d:d2:e0:49:8f:e1:fe:bf:
20:26:44:d7:9a:ea:17:fb:3b:d1:c1:8d:b6:81:bb:3e:a3:de:
94:1c:08:f0:14:d1:65:75:d3:72:e3:ef:50:85:03:19:03:14:
50:c5:ea:1e:b0:0b:e6:03:ff:30:b4:17:99:be:ab:ff:15:6d:
bd:44:4f:f7:72:cc:b0:9e:4e:6a:50:0f:c3:fe:c7:15:44:0b:
a4:42:7a:16:bf:72:f0:46:5a:f0:b3:d7:dc:4a:6a:dd:9c:15:
92:69:f0:82:38:39:02:d3:e5:1f:88:8b:89:e2:2b:0f:9a:ec:
88:38:e6:59:79:6b:06:42:64:7b:b8:9b:5c:68:5c:5c:5c:37:
97:7c:e1:48:09:0e:66:37:3a:f4:8b:e0:52:2f:c7:4d:59:e7:
fb:85:4f:07:f3:f1:75:a4:c8:6e:d6:d5:3a:b9:e0:7d:d9:14:
55:a5:58:b8:17:5f:97:3f:38:7e:9e:72:f1:2e:29:ba:93:b5:
eb:83:b2:a4:6f:b5:eb:fe:a6:eb:47:4b:3e:82:6b:42:c2:f2:
3d:74:43:36:c3:f3:e2:92:13:92:ed:49:7a:45:f4:40:e3:a1:
9c:7d:a7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-ams.rpki-client.org