Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/q-WXng63bxkP7MfJQCrWthtW6Ng.roa
File: q-WXng63bxkP7MfJQCrWthtW6Ng.roa (raw, json)
Hash identifier: 84MXD4+Mzluk4w2BLw3Tp/1rJAumn9SDh6wa09edfIM=
Subject key identifier: AB:E5:97:9E:0E:B7:6F:19:0F:EC:C7:C9:40:2A:D6:B6:1B:56:E8:D8
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 097F13ED
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/q-WXng63bxkP7MfJQCrWthtW6Ng.roa
Signing time: Sat 01 Jan 2022 07:03:52 +0000
ROA not before: Sat 01 Jan 2022 07:03:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62125
IP address blocks: 185.46.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159323117 (0x97f13ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Jan 1 07:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abe5979e0eb76f190fecc7c9402ad6b61b56e8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:e4:5f:75:7f:0e:24:6f:1b:4d:ab:b8:e1:
03:b2:09:b1:1a:09:d0:90:8a:35:a0:99:42:e8:1f:
a9:a2:90:2d:c8:c7:a2:56:f1:9a:d1:73:4d:50:aa:
38:42:cc:7e:ea:6b:fc:5c:f7:d1:bc:96:27:cb:34:
5f:9c:43:ea:db:f2:92:0f:9f:54:e2:46:30:7e:65:
b2:ff:79:e2:7a:16:05:00:dc:60:63:ec:bb:7d:23:
53:2c:1d:63:0f:e1:4d:62:e7:a8:7a:9a:c2:e9:ac:
36:0d:68:d6:02:56:41:3d:df:62:f6:a1:7e:61:7a:
0d:b4:bd:75:36:ec:d4:4d:e2:b3:e6:83:3a:07:71:
f3:7f:2b:9e:c1:e2:ff:a2:69:39:ee:41:9f:ac:fb:
c1:24:55:9d:1c:6e:dd:81:88:be:85:fb:96:f3:7b:
0e:66:34:f2:43:9d:70:90:32:e0:4f:f5:f7:55:cf:
5d:77:6d:09:7a:4a:b0:fc:c0:77:28:29:28:ff:ec:
08:de:03:77:69:f2:f4:40:29:48:b5:73:95:5c:1b:
b0:f2:7b:b6:54:e2:ac:e6:a2:95:df:22:9d:ac:90:
9c:4e:cd:6a:fd:ac:2f:f0:cf:aa:81:4e:65:f5:34:
1e:6f:74:8a:f0:12:91:1e:a2:de:c8:ca:85:64:f9:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E5:97:9E:0E:B7:6F:19:0F:EC:C7:C9:40:2A:D6:B6:1B:56:E8:D8
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/q-WXng63bxkP7MfJQCrWthtW6Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.192.0/22
Signature Algorithm: sha256WithRSAEncryption
92:47:fa:e0:04:fe:ee:e2:e4:40:68:56:82:42:d6:55:26:b8:
da:30:9e:8f:d3:c1:5d:fd:cb:2b:a3:47:a9:e4:30:ce:b4:59:
13:70:40:95:34:7c:18:2c:fe:59:bc:9a:ae:3d:c8:1e:2c:8b:
75:9e:c8:00:2b:c2:d6:8a:6d:cf:44:79:4f:77:9c:7b:3e:01:
a2:b5:8d:43:5d:3a:63:5f:a6:06:24:c3:dd:29:3c:86:c9:2c:
2c:4c:63:dc:5e:6c:3d:c7:0b:d4:00:e7:ec:05:25:1c:6c:c2:
56:00:60:51:59:bf:47:17:0b:28:08:b2:27:36:11:ba:3d:de:
e4:9e:d7:ea:76:15:57:f4:fc:95:1f:1b:9d:3e:4e:5b:5e:19:
49:1b:00:25:0c:7e:16:df:5a:95:ad:c6:01:40:c3:3b:ca:22:
2c:f0:aa:2c:c8:fc:5f:c2:15:0e:17:7d:76:25:80:30:34:fe:
37:3f:e0:40:28:2b:d4:d7:ad:b9:84:ae:f5:ea:d5:ce:3d:08:
f7:be:8d:3d:db:29:b5:e8:3c:78:07:0e:61:78:4e:2b:14:48:
76:15:78:37:09:4f:78:ac:d2:ca:fd:36:8d:22:54:c4:d2:78:
de:71:09:a0:17:8b:20:5f:4c:3b:8b:20:64:cb:f7:45:d9:6e:
ca:16:20:14
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECX8T7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZWNjYjdjZDFiOWQ2ZmMzOWQ3MTU4ZjJmZTljZjUyMTdhMTJkMzc0MB4XDTIyMDEw
MTA3MDM1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWJlNTk3OWUwZWI3
NmYxOTBmZWNjN2M5NDAyYWQ2YjYxYjU2ZThkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALq/5F91fw4kbxtNq7jhA7IJsRoJ0JCKNaCZQugfqaKQLcjH
olbxmtFzTVCqOELMfupr/Fz30byWJ8s0X5xD6tvykg+fVOJGMH5lsv954noWBQDc
YGPsu30jUywdYw/hTWLnqHqawumsNg1o1gJWQT3fYvahfmF6DbS9dTbs1E3is+aD
Ogdx838rnsHi/6JpOe5Bn6z7wSRVnRxu3YGIvoX7lvN7DmY08kOdcJAy4E/191XP
XXdtCXpKsPzAdygpKP/sCN4Dd2ny9EApSLVzlVwbsPJ7tlTirOaild8inayQnE7N
av2sL/DPqoFOZfU0Hm90ivASkR6i3sjKhWT50iUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSr5ZeeDrdvGQ/sx8lAKta2G1bo2DAfBgNVHSMEGDAWgBRezLfNG51vw51x
WPL+nPUhehLTdDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hzeTN6UnVkYjhPZGNWanlfcHoxSVhvUzAzUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvZWRjOGYzLTBiYjItNDFhYi1iYTY0LWQyMjk2N2UyMmVmMC8x
L3EtV1huZzYzYnhrUDdNZkpRQ3JXdGh0VzZOZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
ZWRjOGYzLTBiYjItNDFhYi1iYTY0LWQyMjk2N2UyMmVmMC8xL1hzeTN6UnVkYjhP
ZGNWanlfcHoxSVhvUzAzUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkuwDANBgkqhkiG9w0BAQsFAAOC
AQEAkkf64AT+7uLkQGhWgkLWVSa42jCej9PBXf3LK6NHqeQwzrRZE3BAlTR8GCz+
Wbyarj3IHiyLdZ7IACvC1optz0R5T3ecez4BorWNQ106Y1+mBiTD3Sk8hsksLExj
3F5sPccL1ADn7AUlHGzCVgBgUVm/RxcLKAiyJzYRuj3e5J7X6nYVV/T8lR8bnT5O
W14ZSRsAJQx+Ft9ala3GAUDDO8oiLPCqLMj8X8IVDhd9diWAMDT+Nz/gQCgr1Net
uYSu9erVzj0I976NPdspteg8eAcOYXhOKxRIdhV4NwlPeKzSyv02jSJUxNJ43nEJ
oBeLIF9MO4sgZMv3RdluyhYgFA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:06 2025 by rpki-client