Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q72K4w_WN77qP8t-NP3nXPwP6NM.roa
File: Q72K4w_WN77qP8t-NP3nXPwP6NM.roa (raw, json)
Hash identifier: mwBY+bZNBfy6ii+Wer6zszLCamGRkast+TIBmU0EykM=
Subject key identifier: 43:BD:8A:E3:0F:D6:37:BE:EA:3F:CB:7E:34:FD:E7:5C:FC:0F:E8:D3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187524A02071EE19EF77A7A095CA089BB30
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q72K4w_WN77qP8t-NP3nXPwP6NM.roa
Signing time: Wed 05 Apr 2023 16:39:54 +0000
ROA not before: Wed 05 Apr 2023 16:39:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51659
IP address blocks: 195.133.9.0/24 maxlen: 24
194.87.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:4a:02:07:1e:e1:9e:f7:7a:7a:09:5c:a0:89:bb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 16:39:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43bd8ae30fd637beea3fcb7e34fde75cfc0fe8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:01:c8:ee:e7:f9:d0:41:c6:46:8b:54:6a:
d3:e1:d6:df:39:e4:36:dd:19:da:e5:cb:20:97:f0:
b0:b5:6d:ba:b5:3c:d6:43:bf:13:97:cd:29:90:87:
d8:b9:c2:3d:b7:83:ad:70:bd:fe:a7:95:a6:f6:83:
2f:61:fd:31:d3:09:0e:d9:a0:b2:10:2a:bb:09:eb:
3e:26:06:d9:e5:b6:05:08:e4:6b:05:e0:70:0b:e5:
33:ab:31:83:71:f1:4e:d7:47:46:b0:9b:be:d4:a5:
78:51:f4:e6:fd:2a:a7:55:5d:24:08:68:96:e9:0d:
9d:b2:07:0d:d8:1c:3b:c3:d9:9e:80:a7:ac:25:95:
ac:d2:f9:e4:6e:22:23:52:2c:61:a7:02:56:93:20:
cf:02:d4:be:78:31:bc:b2:19:c7:98:30:b2:cf:55:
bb:a1:ef:22:bd:58:20:99:16:53:0b:91:e0:6b:36:
fd:f2:3b:d7:7a:8e:18:fe:64:41:94:9d:c3:ab:6b:
fb:a1:c0:57:a1:dd:61:27:dd:0b:81:f5:65:e7:82:
f9:72:27:20:05:07:d0:d9:4b:ae:48:76:38:2d:ba:
0a:24:4d:3c:0d:9e:15:d7:93:5c:c1:e7:3d:ca:1c:
29:36:84:cb:9d:58:29:f6:67:4a:6c:3a:7f:2b:27:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BD:8A:E3:0F:D6:37:BE:EA:3F:CB:7E:34:FD:E7:5C:FC:0F:E8:D3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q72K4w_WN77qP8t-NP3nXPwP6NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.196.0/23
195.133.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:95:58:66:94:3e:13:ea:2e:53:f3:ac:55:27:7d:82:5e:59:
a6:bc:85:34:26:82:28:88:64:85:58:5c:0b:fd:d2:b8:3c:f3:
3a:f5:34:61:80:2d:87:fb:44:d4:aa:01:cb:e2:a5:ae:a0:0e:
96:91:73:26:51:86:d2:52:e0:78:0c:3f:04:f9:b0:4c:54:fd:
c4:a3:8a:92:48:94:ae:88:b4:48:16:35:78:b5:fd:3f:da:45:
ed:42:30:cc:8b:7a:0f:89:85:ae:c0:28:80:d8:39:6f:24:59:
55:a3:3b:f3:56:38:fd:a4:b0:b7:da:2f:99:50:96:d3:96:d8:
27:b9:01:c7:f4:d2:8d:59:d0:86:40:56:e6:2f:b2:6d:61:b9:
e2:0c:84:e9:03:dc:e9:5e:ff:c5:31:99:76:6e:3a:8c:bb:88:
a8:0e:a5:59:ae:5b:d7:5e:26:01:d6:3c:8e:7a:8f:0f:92:12:
7c:ef:61:8e:3b:82:eb:d0:1d:f3:9f:00:f0:a5:8c:07:1c:48:
f7:88:82:82:d8:df:cc:48:1d:f9:36:ae:b8:47:4e:04:27:00:
6e:d6:e7:8a:0d:7a:4f:52:cb:7f:0c:f4:4c:d9:3a:05:40:24:
49:92:e8:f8:29:5c:98:4e:a7:3c:4c:bd:6e:ce:8b:54:0e:bd:
96:68:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:55 2025 by rpki-client