Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/Qb0_Mqp4VA1SNny2Y1VZ2m5FyyY.roa
File: Qb0_Mqp4VA1SNny2Y1VZ2m5FyyY.roa (raw, json)
Hash identifier: 2/o/0KvQNZXcBGxpObuLK3K6eUYJ3Oa9Of1Tu1OfJzw=
Subject key identifier: 41:BD:3F:32:AA:78:54:0D:52:36:7C:B6:63:55:59:DA:6E:45:CB:26
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 01856F8B6D2987DF648F0CDDE53152C074B7
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/Qb0_Mqp4VA1SNny2Y1VZ2m5FyyY.roa
Signing time: Sun 01 Jan 2023 22:54:46 +0000
ROA not before: Sun 01 Jan 2023 22:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47612
IP address blocks: 195.190.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:6d:29:87:df:64:8f:0c:dd:e5:31:52:c0:74:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Jan 1 22:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41bd3f32aa78540d52367cb6635559da6e45cb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:9b:9c:c5:1f:da:16:4a:f0:a9:a5:78:01:
1a:61:b7:dd:d7:1a:7d:8a:c9:7f:92:84:29:dc:30:
68:ca:87:51:69:45:a3:27:e4:6a:89:9e:eb:69:0a:
01:d6:c9:f3:37:cb:35:e9:58:36:19:4d:b4:36:a8:
04:b6:bb:c5:6d:34:30:39:7d:d0:9f:8b:13:68:bb:
9c:ff:42:09:26:20:05:8c:c7:4f:d2:e8:6c:11:c3:
5e:e4:9c:b6:30:a7:68:25:c1:e2:e0:49:f4:c6:eb:
98:f2:01:3c:9b:1a:ea:25:ba:3a:5c:3a:76:c3:28:
15:74:eb:00:1a:a4:9f:36:b6:5e:bb:a1:f1:7a:9c:
3b:18:42:2f:4c:98:af:71:03:8d:03:03:25:f4:a0:
79:27:6f:cb:5f:78:4b:d7:9f:b7:5f:c0:bf:4f:9d:
9a:df:e7:e3:78:1a:db:9c:06:89:9f:e1:00:96:03:
c2:2b:6e:b1:6c:8a:b6:3a:fc:3e:ee:51:2c:c8:20:
6e:f8:07:50:e4:d1:f0:f4:77:50:bc:c1:48:36:7d:
bb:54:0e:97:67:fb:61:7e:ce:a8:44:a3:cd:6f:6e:
91:d5:3a:38:f3:3a:2b:4d:f2:0d:eb:a2:dd:3a:45:
b2:da:39:85:44:a7:84:37:91:57:9c:b4:59:55:e2:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BD:3F:32:AA:78:54:0D:52:36:7C:B6:63:55:59:DA:6E:45:CB:26
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/Qb0_Mqp4VA1SNny2Y1VZ2m5FyyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:68:3f:d7:c2:62:ae:a9:16:a1:8f:d1:d0:7d:51:10:88:fd:
2d:c2:50:fe:39:d1:63:96:04:b7:e1:a6:a2:40:5b:48:10:73:
f9:7a:70:58:1e:ec:36:d4:21:d6:19:38:f1:ac:95:6f:6c:25:
81:a4:0f:fd:c5:87:dd:70:e4:e7:63:7f:96:2a:12:2c:02:82:
ec:9b:30:7d:f2:77:3c:da:61:c7:e6:21:57:19:61:7c:56:fc:
49:67:25:e9:ad:bc:10:ed:e4:b9:67:f2:9b:9b:66:36:2f:82:
76:27:fb:29:b4:2b:0c:40:56:fd:0f:a0:a4:21:87:48:29:09:
4c:b8:1a:73:85:b4:4b:89:e4:95:6e:d2:7e:3c:bb:46:53:39:
6b:f7:3b:a1:1c:2e:8b:f5:74:b3:ba:a4:5a:ff:94:c6:8d:14:
b7:d4:b0:29:18:2f:39:1d:d4:d8:8d:7f:40:13:76:5a:87:ff:
3c:e6:dd:84:b6:ad:7f:16:c2:09:cf:72:1a:72:40:2b:a2:8e:
30:db:3f:b4:f4:11:f2:d7:e8:0c:3b:6e:dd:ff:8e:22:fe:31:
20:7e:a3:76:a8:d9:36:b0:e7:93:5d:81:0a:55:6d:cd:26:6d:
2a:3d:cf:eb:04:71:02:70:f8:e2:b4:a1:8a:1d:19:16:c3:88:
ea:94:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:57 2025 by rpki-client