Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/qJpuuIuzj4j07nt6xn2bSssQqzI.roa
File: qJpuuIuzj4j07nt6xn2bSssQqzI.roa (raw, json)
Hash identifier: ZWjPllZ2h87nIrlgg/T/+GipYVw3deqhNsbs1kmjR2U=
Subject key identifier: A8:9A:6E:B8:8B:B3:8F:88:F4:EE:7B:7A:C6:7D:9B:4A:CB:10:AB:32
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 05AF9197
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/qJpuuIuzj4j07nt6xn2bSssQqzI.roa
Signing time: Sat 01 Jan 2022 10:04:42 +0000
ROA not before: Sat 01 Jan 2022 10:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42349
IP address blocks: 91.233.122.0/24 maxlen: 24
185.203.28.0/22 maxlen: 24
2a0a:e040::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95392151 (0x5af9197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Jan 1 10:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a89a6eb88bb38f88f4ee7b7ac67d9b4acb10ab32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:61:7c:16:aa:dc:d7:52:d1:94:37:47:55:
39:37:ce:db:22:ae:bd:c7:81:03:d3:16:b8:98:14:
ea:86:f0:9d:1b:ea:be:42:2c:ae:30:9d:98:26:a1:
68:d5:5b:28:30:f2:dc:d1:fd:e6:2f:b5:eb:cf:a1:
17:41:1c:a5:8b:3f:bf:6d:01:f2:bb:c9:60:bf:e2:
cd:72:f1:26:ac:07:bf:40:e2:c8:c4:22:0d:37:63:
53:73:1a:e6:97:4c:9e:7d:6b:4e:59:38:cb:5f:d5:
50:d0:52:08:99:6f:a9:ee:cb:87:c4:5a:74:54:1b:
0a:79:52:c8:a5:09:d8:97:01:f5:1c:04:9e:4d:de:
fd:6f:04:f9:bc:ca:bb:05:be:1e:3d:db:c2:dc:8a:
8b:cf:45:d7:1e:7b:43:fa:23:99:4d:a7:b4:5d:31:
94:cb:09:53:e6:aa:ad:3c:b5:77:b7:86:c0:8d:f4:
4d:2b:86:c7:d7:c1:1d:d4:cf:2a:08:dc:1d:45:6f:
65:e4:e7:1f:49:c0:4a:be:fc:f5:f3:0a:4d:c9:f2:
56:a4:ea:2b:74:7d:59:c6:05:63:d2:85:0f:14:26:
53:9d:15:c8:34:79:2c:88:a7:60:40:de:96:fe:a6:
d1:a5:2f:df:81:e9:8e:56:f9:1d:ae:55:fd:ff:9c:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:6E:B8:8B:B3:8F:88:F4:EE:7B:7A:C6:7D:9B:4A:CB:10:AB:32
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/qJpuuIuzj4j07nt6xn2bSssQqzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.122.0/24
185.203.28.0/22
IPv6:
2a0a:e040::/29
Signature Algorithm: sha256WithRSAEncryption
4d:12:2a:cf:f9:91:81:e0:38:a8:03:f5:0d:5e:8f:10:b1:5c:
8f:a4:ea:be:e1:22:22:69:e4:31:53:ad:88:4a:30:84:b3:42:
d0:d3:75:ab:b5:ce:23:7a:73:06:13:a3:d5:3e:ab:07:a3:09:
3d:cd:94:ea:01:a9:36:dd:af:e6:ef:29:83:3c:81:96:60:2c:
37:a9:0a:ba:80:50:16:ae:10:20:ed:d2:56:bf:03:61:85:75:
9c:94:cc:ac:d6:88:39:13:c7:d1:a2:93:37:32:be:fd:0a:cf:
7a:f2:c0:b0:f0:94:0c:67:8f:5e:51:c8:0c:4a:76:e5:5f:ed:
48:d7:91:4f:19:be:6d:e4:00:f9:cd:21:9b:bf:de:c3:bc:fb:
3f:f8:2c:cf:28:13:28:15:d6:10:d4:c2:d6:cb:dc:79:91:c4:
6e:e2:16:e2:c8:ba:a6:08:4f:fb:82:6c:6a:15:21:f8:ce:93:
da:fe:c9:dd:cf:62:d4:77:e4:c6:eb:8a:8b:61:3f:96:68:80:
ac:2b:b4:00:f4:a8:38:e1:de:65:63:9c:cb:79:1b:22:da:23:
35:46:22:50:e5:7d:a0:c9:ad:7d:d7:f6:c2:ab:74:a3:9e:60:
b6:46:11:77:36:2b:be:88:e5:30:67:d1:fb:63:ca:97:93:0b:
f8:4b:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:39 2024 by rpki-client on console-ams.rpki-client.org