Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/NQjd-ZE9xv71PboA-m6EhO7hzO8.roa
File: NQjd-ZE9xv71PboA-m6EhO7hzO8.roa (raw, json)
Hash identifier: 1+tHklYmaLkHnlUK9GfJmK98UVbligttJ1Q8U3Zh2dA=
Subject key identifier: 35:08:DD:F9:91:3D:C6:FE:F5:3D:BA:00:FA:6E:84:84:EE:E1:CC:EF
Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial: 108575
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/NQjd-ZE9xv71PboA-m6EhO7hzO8.roa
Signing time: Tue 15 Mar 2022 14:31:25 +0000
ROA not before: Tue 15 Mar 2022 14:31:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208309
IP address blocks: 91.231.34.0/24 maxlen: 24
2a12:88c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082741 (0x108575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Validity
Not Before: Mar 15 14:31:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3508ddf9913dc6fef53dba00fa6e8484eee1ccef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:b6:5a:f5:5c:c0:c0:75:9f:8f:59:c3:ee:
43:bd:92:ac:bb:7a:5b:05:7e:27:ad:bc:23:f4:d3:
ee:c9:ca:bb:c2:75:e0:d6:82:3d:85:c0:10:db:7f:
0a:f7:54:61:f6:03:30:33:2a:0f:09:9c:e2:3c:e8:
93:a4:dc:77:9f:3a:69:86:79:e3:85:2b:f0:24:98:
1c:20:53:06:60:f4:40:71:ec:e2:89:f6:72:71:78:
73:41:fb:f9:a6:e2:dc:f4:54:a1:eb:c5:ba:d4:b9:
b2:7f:45:4d:c7:db:4e:05:60:d7:84:5a:c6:6c:42:
fe:5d:46:16:f0:1b:47:bd:ab:5b:31:7e:c1:16:4f:
45:3c:b7:e2:d5:88:b1:60:ba:a7:f4:a1:14:6f:86:
c4:79:73:d8:29:a4:78:2c:cf:62:0a:64:46:a6:3f:
5c:05:6d:ea:32:5b:94:81:40:23:cb:77:a8:bd:70:
25:f0:95:2a:4b:3b:7f:f7:2b:d8:b3:23:b7:21:db:
96:5d:7c:9d:a7:4a:b6:78:d0:27:2d:96:0a:c5:4b:
7c:02:d9:18:e1:65:91:b9:ec:1d:72:1b:77:c6:13:
3a:68:4b:4c:11:e4:93:a4:0b:f7:5d:7b:30:b0:4a:
57:b3:29:96:0b:de:f1:da:c1:87:2f:db:59:49:17:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:08:DD:F9:91:3D:C6:FE:F5:3D:BA:00:FA:6E:84:84:EE:E1:CC:EF
X509v3 Authority Key Identifier:
keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/NQjd-ZE9xv71PboA-m6EhO7hzO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.34.0/24
IPv6:
2a12:88c0::/29
Signature Algorithm: sha256WithRSAEncryption
04:08:b8:9e:10:25:bc:f6:13:fe:41:68:19:8e:f5:e2:f7:1c:
1c:da:f1:2e:d4:e6:2b:af:c4:1f:e7:9d:0e:67:a8:81:4c:d9:
ad:36:c0:23:41:ef:53:75:dc:f4:f8:82:e9:dd:d8:ea:8b:fa:
64:ce:46:98:c6:91:8b:33:73:07:76:5f:a5:7c:08:f8:c3:c2:
ac:41:5f:f5:b3:86:2a:0b:6d:bf:59:24:16:a3:3a:fe:87:22:
25:c0:35:06:bd:f6:d1:40:b0:0c:41:77:8b:14:27:ac:54:be:
2e:09:ad:f3:da:53:1d:6a:79:c7:da:7d:73:3a:c2:bf:b7:f9:
6c:33:17:79:1e:87:27:bc:72:a4:37:15:83:b5:0b:03:05:a9:
3a:e0:83:f3:c0:95:38:a7:3c:83:dd:07:1d:5f:54:61:24:25:
80:19:05:e7:9f:7f:5f:f3:4f:21:ad:a1:5d:ab:43:3f:63:1f:
f6:6c:1c:7a:8f:ee:45:a5:68:26:95:6e:85:ba:35:42:e0:1e:
41:f9:ae:b0:f4:af:c6:2d:01:c8:77:1e:10:d3:93:26:5e:39:
7b:d2:a7:60:95:f4:94:86:b1:49:5f:7f:4d:10:16:3a:dc:17:
90:f9:19:5e:83:f9:99:a7:84:ef:0a:cc:1f:33:68:5b:59:ca:
7d:23:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:51 2025 by rpki-client