Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QPSnflS5SwI4pkNDfPhUq2rqU6w.roa
File: QPSnflS5SwI4pkNDfPhUq2rqU6w.roa (raw, json)
Hash identifier: r1sVBLpwy76BEZkc0cM9lpj+VeISxu38ivjHMLXFMsI=
Subject key identifier: 40:F4:A7:7E:54:B9:4B:02:38:A6:43:43:7C:F8:54:AB:6A:EA:53:AC
Certificate issuer: /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Certificate serial: 01863883D1A9E9E9AF2AADAD9584957128E6
Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QPSnflS5SwI4pkNDfPhUq2rqU6w.roa
Signing time: Thu 09 Feb 2023 23:30:08 +0000
ROA not before: Thu 09 Feb 2023 23:30:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56833
IP address blocks: 185.93.200.0/22 maxlen: 22
185.18.36.0/22 maxlen: 22
91.235.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:38:83:d1:a9:e9:e9:af:2a:ad:ad:95:84:95:71:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Validity
Not Before: Feb 9 23:30:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40f4a77e54b94b0238a643437cf854ab6aea53ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:94:a4:c2:5b:28:fc:87:63:e2:e7:03:76:
7f:e0:2a:b6:d3:17:ce:ff:2d:38:d1:ec:fa:d4:f3:
20:b2:fe:0b:5e:96:bd:e7:96:d3:ce:fa:de:11:1b:
28:b7:e0:33:e6:f1:d4:63:85:55:0b:42:1e:7b:70:
bc:90:37:24:dd:ea:87:13:0d:3e:a5:db:2d:df:69:
4e:0f:4b:6f:4f:70:0b:f9:46:d1:3e:bf:a4:45:82:
e1:ca:3a:c7:da:52:99:2d:79:ef:71:0d:13:78:fc:
a3:f4:52:2e:9c:bd:ef:0d:b0:9e:b4:a4:45:80:84:
f6:28:a9:e7:55:f3:cf:bc:6a:02:84:81:56:ca:59:
94:05:89:cf:cd:c5:9c:aa:7f:a2:e5:d2:01:cc:94:
bd:c9:fa:dd:b4:3e:f0:81:eb:da:06:61:36:b2:81:
0e:12:88:d6:67:2a:97:d1:00:2c:27:24:38:c6:da:
dc:4d:b3:6c:c1:24:29:6c:13:1b:4a:af:f8:f1:5f:
c0:1d:f0:85:38:08:d2:ce:5b:20:2c:9c:63:ac:3b:
a8:89:20:5b:66:8b:df:f6:f0:0c:4a:09:e1:52:54:
97:2c:36:61:d0:f4:72:78:81:9b:31:cf:7d:3e:98:
85:ec:30:d9:6a:63:85:01:a9:16:7d:dd:80:fc:f4:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F4:A7:7E:54:B9:4B:02:38:A6:43:43:7C:F8:54:AB:6A:EA:53:AC
X509v3 Authority Key Identifier:
keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QPSnflS5SwI4pkNDfPhUq2rqU6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.8.0/22
185.18.36.0/22
185.93.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:d2:b9:02:bf:26:2a:89:4c:c8:51:22:50:51:21:cc:bd:ea:
d6:f8:12:91:0e:bb:88:c6:9f:6f:16:72:67:49:31:7b:db:4f:
a0:b0:d5:24:4d:16:16:0d:3a:4f:12:df:49:85:6d:a0:54:84:
2a:65:56:bf:44:48:00:bd:5c:bc:17:e0:1a:b5:c0:91:59:22:
d9:6e:e2:5d:dd:ea:66:4b:43:f5:31:a9:18:5a:fb:a4:7a:36:
02:a7:16:ee:9a:6d:88:df:e5:59:44:0b:eb:f8:f3:e6:15:00:
85:9b:35:09:11:ec:7d:1d:cb:70:a5:54:df:0b:72:ec:45:02:
b6:6e:67:91:bc:d3:d3:41:48:f8:de:1d:50:29:29:09:cb:53:
9b:7c:7d:63:09:e2:39:50:dd:55:7f:f7:e0:ba:f4:3a:fa:e0:
2c:ec:84:96:ce:d9:c4:5e:9e:91:66:87:ed:8d:b3:19:d3:2e:
61:eb:cb:72:5b:cb:3d:26:ca:83:fb:94:7a:db:b8:7e:a6:2e:
49:a8:d2:c6:a0:43:54:ab:c4:e4:64:f0:27:39:a8:c9:00:1d:
46:95:e3:74:db:72:6a:6b:a5:33:67:26:bb:b5:25:25:c6:3b:
7a:20:41:b3:b4:9c:69:b9:aa:35:81:4f:f6:62:c2:28:4b:24:
d8:4c:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:25:58 2025 by rpki-client