Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/QHWVInQXmROTak7mMKwmD1yqxVs.roa
File: QHWVInQXmROTak7mMKwmD1yqxVs.roa (raw, json)
Hash identifier: 9CZMGjcX6PxIB4oUCMsUfZzk1JBQfiR9zqRLV6YvO6U=
Subject key identifier: 40:75:95:22:74:17:99:13:93:6A:4E:E6:30:AC:26:0F:5C:AA:C5:5B
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: DE6F37
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/QHWVInQXmROTak7mMKwmD1yqxVs.roa
Signing time: Sat 01 Jan 2022 07:00:32 +0000
ROA not before: Sat 01 Jan 2022 07:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204457
IP address blocks: 45.156.31.0/24 maxlen: 24
45.156.29.0/24 maxlen: 24
45.94.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14577463 (0xde6f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jan 1 07:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4075952274179913936a4ee630ac260f5caac55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:2f:3a:fa:dd:9d:89:9a:9f:fd:f6:ba:1a:
20:5d:c7:9e:00:98:62:bb:c3:9b:d7:54:3a:f3:3b:
00:d9:ce:3c:6b:a8:b5:97:2b:ef:17:c2:87:15:df:
c2:cd:5e:a3:86:f1:90:11:ff:bf:86:d6:6e:54:e2:
d6:fc:0e:d1:2d:1e:f1:f0:0e:ef:a0:5d:be:62:14:
cf:91:65:f9:0a:cb:62:37:d3:1d:f0:2c:1f:f2:00:
ee:eb:fc:ab:16:ba:07:d0:a9:da:d5:68:50:f3:73:
e0:3a:b8:76:6b:e0:60:ae:41:91:af:46:1e:fb:db:
be:4a:02:3b:59:b3:6f:19:11:6d:50:ed:ef:23:f2:
4d:74:01:d3:55:92:35:b4:3f:d7:ca:53:0e:56:61:
69:80:b7:9e:08:86:8e:d6:f2:f7:f2:34:fb:62:2b:
96:1d:28:ff:1c:64:05:bb:77:0a:3a:7a:66:3a:8c:
ca:55:93:15:b5:46:17:75:30:73:99:94:db:05:2c:
9a:b0:17:a1:ab:f8:0b:c6:70:a4:81:98:11:f0:ff:
3c:dc:3b:96:1b:a7:50:ba:90:ac:43:3c:ce:b9:24:
72:9f:5f:1a:02:02:e1:b8:c0:f3:9c:56:80:54:fe:
60:0c:a9:71:d2:8e:a3:b9:ba:02:5e:35:4f:36:10:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:75:95:22:74:17:99:13:93:6A:4E:E6:30:AC:26:0F:5C:AA:C5:5B
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/QHWVInQXmROTak7mMKwmD1yqxVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.5.0/24
45.156.29.0/24
45.156.31.0/24
Signature Algorithm: sha256WithRSAEncryption
37:69:cd:87:a8:bb:0f:15:ae:63:33:2f:7c:9b:4e:4e:f9:eb:
14:98:c8:1e:77:bb:d0:47:5d:c4:18:eb:0b:0a:32:f4:87:8f:
67:d3:a9:21:d0:75:53:31:b0:f7:1c:ca:fc:bb:3c:2f:44:b7:
5c:38:d1:10:cb:37:fb:fb:70:29:ac:a1:83:d3:c5:c7:04:7b:
83:a9:be:f8:f0:36:bc:71:21:a7:a0:51:d5:cd:89:f7:1b:f4:
91:4e:dc:22:ae:76:96:18:3c:c9:4c:52:a3:e4:97:8b:a4:18:
f4:e0:74:08:7b:e2:14:3c:37:b5:75:d6:2c:35:83:2d:0e:b1:
19:2e:54:fa:cc:41:4e:4d:32:e1:fa:fb:ae:16:44:2d:fb:4b:
5f:54:77:fa:4c:b4:74:bb:84:54:7d:a1:e0:d9:e0:9b:dc:ce:
af:79:4d:07:07:3a:30:8a:fb:e3:e9:c1:eb:20:3a:a6:ab:fd:
a9:87:08:69:a8:77:e2:22:1c:18:58:80:eb:bc:b5:a0:bc:89:
50:c1:15:d5:f0:74:33:35:72:f8:87:a0:59:52:4f:6b:94:7d:
4e:29:24:d5:a0:16:96:af:02:4d:e5:79:a7:ed:b2:35:9e:0d:
6a:3f:52:57:9e:84:5d:5c:5c:cd:69:8d:04:0a:6d:5d:7c:2f:
ab:f8:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:22:23 2025 by rpki-client