Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/qsSMsiXRBehuZzPAdl2-rM5IUF4.roa
File: qsSMsiXRBehuZzPAdl2-rM5IUF4.roa (raw, json)
Hash identifier: K3moUYrL4pgadSW17zDjtMIVICHLbGBJaaLz/fs/OsQ=
Subject key identifier: AA:C4:8C:B2:25:D1:05:E8:6E:67:33:C0:76:5D:BE:AC:CE:48:50:5E
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 02DCE276
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/qsSMsiXRBehuZzPAdl2-rM5IUF4.roa
Signing time: Sat 01 Jan 2022 07:01:22 +0000
ROA not before: Sat 01 Jan 2022 07:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60341
IP address blocks: 185.251.236.0/22 maxlen: 24
2a0c:1ec0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48030326 (0x2dce276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Jan 1 07:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aac48cb225d105e86e6733c0765dbeacce48505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:99:ae:16:d4:8b:4d:0e:9c:b3:88:c2:eb:
3c:41:b1:4d:85:ff:41:5e:49:be:81:e3:60:22:91:
23:4d:1a:df:81:1a:51:8c:82:49:09:a8:a4:16:36:
53:a0:af:9d:e9:2e:ff:d5:f6:ec:14:74:17:3a:37:
45:75:5e:74:4e:f0:4c:92:61:34:ff:cc:83:77:78:
01:9a:b8:89:85:e8:b7:8d:9d:32:0e:e9:15:26:bd:
32:11:88:25:48:06:af:af:51:0f:1e:3d:2e:a6:0f:
47:d0:b8:3c:b2:e9:ef:0f:72:97:4c:b9:62:ed:22:
d2:d8:b2:ae:a0:62:5b:75:98:ef:e6:61:e4:ad:f9:
17:26:31:4f:94:5b:57:62:a0:0e:1a:ed:57:05:2f:
85:47:11:03:16:4c:22:de:33:de:6c:d2:f2:60:3a:
02:c0:5f:99:39:a9:5d:e7:9b:8b:fe:fa:68:96:5c:
8f:03:07:48:91:ae:cd:fd:a0:ce:98:ab:b9:23:68:
a6:20:3c:4d:cb:ed:f5:1b:2b:82:16:71:3d:14:5c:
1f:cc:75:ba:d9:8a:a9:db:ec:1a:33:62:cb:52:ff:
11:29:a4:9f:e7:93:3f:c9:fb:92:df:ce:90:d2:7b:
a9:3b:c4:3b:27:d4:eb:fa:c9:2d:d3:0d:52:2b:a4:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:8C:B2:25:D1:05:E8:6E:67:33:C0:76:5D:BE:AC:CE:48:50:5E
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/qsSMsiXRBehuZzPAdl2-rM5IUF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.236.0/22
IPv6:
2a0c:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
49:d8:c0:9f:6a:43:76:78:28:9b:2f:ec:aa:5f:4d:3e:6a:9f:
b2:5a:11:47:98:df:49:53:21:94:cb:35:d1:fa:8d:0c:ad:c2:
58:c1:5f:15:0c:13:f9:dc:9b:30:bd:d3:26:a0:d8:46:d0:89:
d2:85:b1:b4:80:ca:d4:5a:c8:c6:7c:82:19:3b:07:5c:af:ce:
b4:e3:af:2e:fb:b2:08:6f:8a:e4:43:e1:fa:0e:cf:e9:3d:5d:
1b:c2:62:1a:2e:72:a2:e4:80:dd:63:48:59:ca:66:b6:58:0b:
af:22:1b:41:a9:57:50:69:93:50:9a:2d:53:e3:9d:ad:2d:ea:
57:3e:a8:a4:38:9c:ed:a7:fa:1f:6b:e5:98:0f:ea:f4:79:3a:
c1:65:fb:40:9c:58:9b:73:5d:4b:8e:7c:ae:9e:87:ff:46:32:
b5:48:d8:fe:6a:81:27:1f:60:02:27:44:8b:c0:74:0a:f1:f5:
04:dc:27:f4:c2:bb:99:f3:9e:30:35:ee:2f:9b:c4:52:54:f1:
e2:b4:5f:3d:24:b1:4e:fe:96:32:04:13:c4:de:1e:c7:ca:55:
91:60:0e:d1:36:57:1c:8f:50:7e:2e:2c:56:2b:e7:f2:19:01:
ad:5e:f7:93:54:54:80:04:e9:8f:3a:03:3f:09:07:6a:41:ca:
14:b7:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:07:42 2025 by rpki-client