Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/cqGHBGJAKwOKRVNZ0rWA0bqkQnk.roa
File: cqGHBGJAKwOKRVNZ0rWA0bqkQnk.roa (raw, json)
Hash identifier: NP1tArsBiHdH05iVAdkBdZtZyEGLCVsft00aRjMgotg=
Subject key identifier: 72:A1:87:04:62:40:2B:03:8A:45:53:59:D2:B5:80:D1:BA:A4:42:79
Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial: 101D4EF7
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/cqGHBGJAKwOKRVNZ0rWA0bqkQnk.roa
Signing time: Thu 26 May 2022 04:55:15 +0000
ROA not before: Thu 26 May 2022 04:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43666
IP address blocks: 91.197.182.0/24 maxlen: 24
91.197.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270356215 (0x101d4ef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Validity
Not Before: May 26 04:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72a1870462402b038a455359d2b580d1baa44279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:e5:8a:34:60:77:d6:27:be:0e:75:21:8f:
9b:bf:77:e6:ee:bb:1c:10:a6:eb:0e:76:80:e5:4d:
67:51:6e:99:55:09:f3:c7:f5:9e:8e:6c:4d:05:ea:
1d:92:99:6e:29:57:17:54:16:00:bf:bd:5a:ec:be:
e0:2c:c2:6e:6b:fd:db:fe:72:5d:88:30:ff:18:19:
63:8e:0a:70:43:de:e7:95:7f:7f:77:bf:b3:b7:7c:
b7:51:6a:3f:c9:6c:65:7c:3c:06:dc:a9:b2:80:5f:
d8:e4:c2:3d:29:ba:c9:d0:0b:00:6b:b9:f4:9c:1e:
02:27:1d:4d:4f:fd:25:22:2d:d0:b1:f9:0f:f4:e7:
d3:aa:a8:c8:ad:ff:eb:3b:78:4e:4e:fd:a1:7b:c4:
23:60:89:04:62:9f:f2:9e:f9:ad:0b:f8:70:5f:ec:
55:f7:1f:46:25:76:57:a8:52:b2:31:bb:48:b8:07:
d5:53:c2:7b:5d:5a:ac:ff:2e:1c:cb:5f:17:c3:df:
90:2a:95:a1:7f:91:60:91:b2:be:67:0f:34:09:ca:
fc:72:af:f4:bb:ce:09:9a:b3:d2:ed:9e:5b:42:9a:
85:84:29:83:b3:d6:e6:88:91:a5:99:84:c6:90:ee:
47:f2:d8:26:34:92:32:13:3f:79:3a:48:71:f3:4b:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:87:04:62:40:2B:03:8A:45:53:59:D2:B5:80:D1:BA:A4:42:79
X509v3 Authority Key Identifier:
keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/cqGHBGJAKwOKRVNZ0rWA0bqkQnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.180.0/24
91.197.182.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c2:e6:7a:38:cf:7a:52:4c:bd:07:ae:32:8d:c6:70:69:f7:
63:ea:62:1f:1d:07:66:4a:b7:c5:5d:55:22:ae:37:bd:e6:31:
14:d1:9c:66:7b:76:c2:1a:53:76:a1:41:12:65:8d:64:b5:ba:
42:58:2d:63:0b:74:84:a1:58:5e:a6:7d:19:b8:65:d1:d2:4c:
cf:2b:7f:c8:fa:5c:26:8e:02:cb:7b:34:f4:bd:9e:46:ba:bf:
40:2a:56:b9:8e:6e:22:ed:17:78:7d:9a:f0:b2:50:b8:7b:0f:
12:38:88:1a:09:fa:20:7a:0c:d9:9c:74:01:1f:44:2f:c3:22:
0c:be:75:3c:6a:17:f9:57:55:65:03:ad:37:4f:37:64:d2:46:
49:06:76:b7:3c:d5:bb:ad:7b:01:c4:85:43:bc:ad:25:07:81:
99:b7:84:ea:07:1e:09:70:94:3a:2d:c5:28:06:af:fe:24:2c:
52:af:21:1f:9c:eb:51:93:a0:66:5f:35:f0:f9:48:65:bc:af:
98:76:8e:4e:59:d2:c9:3b:47:dd:6d:04:07:96:9b:42:c4:c3:
33:9e:f8:a0:1f:c3:da:33:3d:99:fc:8c:ce:3f:23:3d:27:10:
7e:1c:87:29:ea:b1:2f:09:87:83:56:14:7f:17:51:c7:82:54:
f0:b1:2b:41
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEEB1O9zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MmE3NzQyN2MwMzcwOWIzMzlhOTViMGFkOWE0YWM5ZDJjOTJjOTAzMB4XDTIyMDUy
NjA0NTUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzJhMTg3MDQ2MjQw
MmIwMzhhNDU1MzU5ZDJiNTgwZDFiYWE0NDI3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvf5Yo0YHfWJ74OdSGPm7935u67HBCm6w52gOVNZ1FumVUJ
88f1no5sTQXqHZKZbilXF1QWAL+9Wuy+4CzCbmv92/5yXYgw/xgZY44KcEPe55V/
f3e/s7d8t1FqP8lsZXw8BtypsoBf2OTCPSm6ydALAGu59JweAicdTU/9JSIt0LH5
D/Tn06qoyK3/6zt4Tk79oXvEI2CJBGKf8p75rQv4cF/sVfcfRiV2V6hSsjG7SLgH
1VPCe11arP8uHMtfF8PfkCqVoX+RYJGyvmcPNAnK/HKv9LvOCZqz0u2eW0KahYQp
g7PW5oiRpZmExpDuR/LYJjSSMhM/eTpIcfNL8F0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRyoYcEYkArA4pFU1nStYDRuqRCeTAfBgNVHSMEGDAWgBQyp3QnwDcJszmp
WwrZpKydLJLJAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01xZDBKOEEzQ2JNNXFWc0syYVNzblN5U3lRTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvZjI1MWVkLTU5NjctNGRkZC05MzJiLTdkNDBiN2M4ZmIwMS8x
L2NxR0hCR0pBS3dPS1JWTlowcldBMGJxa1Fuay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
ZjI1MWVkLTU5NjctNGRkZC05MzJiLTdkNDBiN2M4ZmIwMS8xL01xZDBKOEEzQ2JN
NXFWc0syYVNzblN5U3lRTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvFtAMEAFvFtjANBgkqhkiG9w0B
AQsFAAOCAQEAa8LmejjPelJMvQeuMo3GcGn3Y+piHx0HZkq3xV1VIq43veYxFNGc
Znt2whpTdqFBEmWNZLW6QlgtYwt0hKFYXqZ9Gbhl0dJMzyt/yPpcJo4Cy3s09L2e
Rrq/QCpWuY5uIu0XeH2a8LJQuHsPEjiIGgn6IHoM2Zx0AR9EL8MiDL51PGoX+VdV
ZQOtN083ZNJGSQZ2tzzVu617AcSFQ7ytJQeBmbeE6gceCXCUOi3FKAav/iQsUq8h
H5zrUZOgZl818PlIZbyvmHaOTlnSyTtH3W0EB5abQsTDM574oB/D2jM9mfyMzj8j
PScQfhyHKeqxLwmHg1YUfxdRx4JU8LErQQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:53 2024 by rpki-client on console-fra.rpki-client.org