Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/1Q0EMA33MhDHuXyP3FlSyEYXN8g.roa
File: 1Q0EMA33MhDHuXyP3FlSyEYXN8g.roa (raw, json)
Hash identifier: MVRgRqK1TzdlaFqbxgw3kmvBcbO+mtb0ZzMubIRZ0vc=
Subject key identifier: D5:0D:04:30:0D:F7:32:10:C7:B9:7C:8F:DC:59:52:C8:46:17:37:C8
Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Certificate serial: 09756899
Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/1Q0EMA33MhDHuXyP3FlSyEYXN8g.roa
Signing time: Sat 01 Jan 2022 07:01:22 +0000
ROA not before: Sat 01 Jan 2022 07:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47372
IP address blocks: 185.192.168.0/22 maxlen: 32
93.191.164.0/24 maxlen: 24
93.191.162.0/24 maxlen: 24
93.191.160.0/21 maxlen: 32
93.191.163.0/24 maxlen: 24
2a06:5d00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158689433 (0x9756899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Validity
Not Before: Jan 1 07:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d50d04300df73210c7b97c8fdc5952c8461737c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:6a:75:d0:6d:03:47:ab:3d:04:e5:57:5e:
94:67:5a:ca:27:33:af:64:6b:df:a9:bd:a0:d8:f5:
24:82:66:37:32:8d:4c:1c:99:0c:a5:ac:82:62:f6:
0b:55:55:e8:91:1d:cf:2c:df:9e:8e:b2:ee:75:0d:
67:f6:8b:87:e0:43:87:85:36:3f:19:0f:48:ff:9b:
18:63:6f:af:7b:d7:d2:d4:2b:0c:9b:ae:22:a9:9d:
3d:58:f0:7a:92:69:fe:83:6b:6f:38:66:04:3f:35:
c8:3f:e3:9b:2f:1f:e6:00:6f:ca:fc:fd:aa:b5:4e:
9f:75:81:91:43:da:37:17:3c:3b:f8:1b:2e:18:56:
4b:a6:8b:6e:41:2b:f1:36:86:66:78:03:9c:b1:0f:
b2:b1:5a:7a:c0:2f:29:67:14:9a:0d:4b:10:52:16:
8f:12:c6:38:09:8d:e8:9f:a4:15:64:7b:67:9f:41:
7d:cc:92:42:9c:55:b6:26:5f:3e:3f:6d:6e:14:74:
0e:b0:4e:a9:48:e3:9e:5a:88:f2:b2:d8:83:a3:7b:
2b:ef:7d:4c:d1:33:34:9e:6f:5a:7c:e3:fe:bb:5b:
9a:a2:0a:65:ce:f0:54:ff:48:f6:1a:13:d9:44:10:
4f:36:58:f6:cd:74:69:32:56:2c:cd:1b:6b:00:08:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0D:04:30:0D:F7:32:10:C7:B9:7C:8F:DC:59:52:C8:46:17:37:C8
X509v3 Authority Key Identifier:
keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/1Q0EMA33MhDHuXyP3FlSyEYXN8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.160.0/21
185.192.168.0/22
IPv6:
2a06:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
37:0d:fb:38:36:8d:51:85:39:2b:99:30:16:60:3f:03:b5:c0:
99:b9:19:c8:fd:f3:e3:0e:b6:f1:4a:c8:bb:f1:23:e4:49:6e:
6b:e0:f1:eb:27:e1:63:2c:6d:d6:2d:23:f9:90:fd:59:08:9d:
35:5f:a8:4b:7d:13:52:e9:c2:2e:8f:69:ba:4e:73:fc:22:f6:
85:0c:4a:7e:3f:f1:ad:2a:bf:04:ec:6c:03:51:88:af:07:7a:
a6:36:45:68:b7:e8:16:16:7c:25:c6:0a:99:30:47:50:79:09:
73:bd:9f:2e:ba:eb:df:a8:05:15:15:20:cd:d8:92:b6:7a:a7:
53:04:ce:e9:6a:0d:c6:82:52:1d:f4:02:ea:30:25:c4:ba:b3:
bc:2b:4d:81:01:94:e2:37:2a:90:f2:2f:0b:f5:e5:32:ed:3a:
fe:cc:2c:c4:32:56:6c:eb:ff:8c:71:7f:ec:a5:36:ac:ef:9c:
96:af:75:6a:a9:c8:46:6a:6d:81:3b:84:24:d5:7c:65:ee:40:
94:f4:6b:be:3e:ef:94:6d:fd:3b:af:86:83:5d:5d:fa:18:40:
04:42:65:91:79:8d:54:89:61:c1:5c:00:bc:07:0b:1d:5a:bf:
8e:7b:a9:63:ce:44:50:85:ae:8f:97:e0:49:81:e8:13:2c:5a:
4d:e1:d4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:08:23 2025 by rpki-client