Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/qcUfJrwUk_mX1TzQa3tYJZhf8zE.roa
File: qcUfJrwUk_mX1TzQa3tYJZhf8zE.roa (raw, json)
Hash identifier: 2BkTNrMKUwCp0MTkR9d9Swu2vYoeEt1SeziCc9XOov4=
Subject key identifier: A9:C5:1F:26:BC:14:93:F9:97:D5:3C:D0:6B:7B:58:25:98:5F:F3:31
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0188F3D2C8C4F13983AAE76E8829FC6D1B20
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/qcUfJrwUk_mX1TzQa3tYJZhf8zE.roa
Signing time: Sun 25 Jun 2023 18:30:57 +0000
ROA not before: Sun 25 Jun 2023 18:30:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 45.94.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f3:d2:c8:c4:f1:39:83:aa:e7:6e:88:29:fc:6d:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jun 25 18:30:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c51f26bc1493f997d53cd06b7b5825985ff331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:15:03:d1:41:6b:fd:28:06:91:8e:ae:b2:
e6:31:b0:95:53:5f:28:75:a8:b2:84:a6:6d:21:a0:
d2:97:01:6e:60:3b:47:89:b8:87:a0:7d:fd:27:58:
92:bc:05:dc:c4:52:de:72:34:32:c9:42:2c:2e:71:
f9:ea:12:ce:29:a0:4b:ae:d3:54:69:2e:24:72:4e:
86:a3:f5:47:42:1b:39:ac:c4:40:c5:7b:fe:85:74:
ef:8e:fc:9f:97:47:68:9e:6e:3f:a1:77:eb:43:30:
da:ad:df:93:3d:a0:a6:56:5c:73:69:3b:f9:92:99:
87:d6:51:0c:44:e6:8a:29:30:a6:47:93:a4:17:5f:
d5:8a:ec:9f:40:5a:94:e9:98:cc:6d:73:4d:6c:b1:
0f:c7:55:cc:ee:26:2f:8b:67:7c:fc:c9:4e:fa:0f:
d7:3c:8c:f5:8e:3c:cd:26:6c:65:c9:92:bf:7d:72:
bc:76:0c:0c:09:5b:92:ee:18:97:05:7a:d2:60:d8:
84:ce:2c:3d:7a:6a:6e:b1:bc:87:92:b3:fe:ed:6d:
3a:47:53:78:cd:65:58:49:0c:4a:3b:d1:a8:6b:3e:
41:90:42:f2:e0:6d:60:7c:3c:89:91:c3:ef:62:be:
55:31:95:76:9c:1e:2b:9f:44:d1:0a:a7:fd:dd:2f:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C5:1F:26:BC:14:93:F9:97:D5:3C:D0:6B:7B:58:25:98:5F:F3:31
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/qcUfJrwUk_mX1TzQa3tYJZhf8zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.4.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d4:9c:7f:e6:8e:d8:2a:c8:63:bf:d8:1d:30:26:bd:6b:d3:
39:bd:58:56:b0:75:cf:c1:e2:f6:ce:48:ab:c2:92:83:cb:70:
d8:a4:2a:df:d4:02:89:22:34:59:1a:5c:23:58:d6:9c:db:9d:
fa:02:2b:31:11:9b:c2:77:f5:4d:75:ec:38:78:eb:71:7c:a4:
6f:11:ef:a3:f5:ac:c7:46:99:07:4f:f0:fd:36:93:63:68:c8:
fb:14:9f:5c:59:00:d2:44:0b:47:93:a6:c9:8c:0d:6a:e8:ba:
fb:9d:ab:86:8e:cf:ae:cc:dc:74:fc:e9:b7:41:20:8e:80:41:
4f:a5:7e:64:d1:8d:e5:bd:54:c1:e3:9d:e8:9c:5f:cf:14:22:
a8:ed:0a:29:0f:ac:90:67:c8:17:a2:ee:9d:a3:a1:d9:83:68:
a9:df:f6:0d:fc:ab:7c:92:08:42:69:8f:81:9f:a3:42:31:49:
26:76:15:8c:a5:d6:f7:20:50:b7:db:30:0e:a0:0b:00:8a:a1:
9d:37:be:2d:df:18:41:a8:e2:c6:12:88:7f:5b:8d:72:e4:83:
cd:f7:41:10:5c:e5:32:c1:f8:85:d2:2e:35:dd:ff:ee:88:02:
2d:ea:78:1c:f2:34:6b:25:7b:0f:84:37:1f:9b:d9:5e:f2:89:
45:15:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:27:25 2025 by rpki-client