Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/sqkHKB02xqCwGtMzzJ07JXCoREM.roa
File: sqkHKB02xqCwGtMzzJ07JXCoREM.roa (raw, json)
Hash identifier: 3tui1RZBkBiKjwInMrknv+OO8+I0E+q4hTL7trjcwQg=
Subject key identifier: B2:A9:07:28:1D:36:C6:A0:B0:1A:D3:33:CC:9D:3B:25:70:A8:44:43
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 1355FC48
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/sqkHKB02xqCwGtMzzJ07JXCoREM.roa
Signing time: Sat 01 Jan 2022 01:53:36 +0000
ROA not before: Sat 01 Jan 2022 01:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12731
IP address blocks: 185.106.86.0/23 maxlen: 23
2a02:8001::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324402248 (0x1355fc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Jan 1 01:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2a907281d36c6a0b01ad333cc9d3b2570a84443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:46:5b:1b:4c:32:56:fa:83:2c:d5:f3:da:
8c:07:72:16:be:f8:52:49:4a:7f:c0:3d:00:8e:35:
3e:84:1a:31:58:1c:ff:cd:73:12:64:62:64:0b:fb:
9c:5f:4b:0f:b4:66:20:f0:e9:be:b8:68:2f:db:0b:
ea:ea:7c:cc:9b:f9:28:78:b4:89:48:4a:36:a0:fe:
5a:9f:18:29:ee:5f:3d:5e:4a:fa:de:de:bd:55:95:
e0:06:b1:f1:fb:61:b8:3f:90:f7:0e:72:5d:3e:b9:
bb:d3:00:42:26:83:02:fe:ed:9d:c7:7a:d1:80:59:
00:e3:53:30:50:c0:76:68:9b:fa:8f:03:d9:b2:ec:
db:67:62:ea:c7:e4:4d:9b:cf:f0:3b:c8:12:32:b2:
f4:77:4c:c9:83:1c:e4:01:46:15:0d:86:c1:fe:bc:
94:58:a7:e9:4d:00:9f:44:bf:89:b7:af:c6:35:08:
bb:e2:8c:d7:e0:e7:84:73:88:f4:f7:6e:d3:35:39:
04:8b:fc:c0:70:4f:ed:78:23:7a:e4:7f:4a:fe:6e:
77:ab:c6:62:fb:8a:89:4a:d4:e8:f5:d1:7c:4a:6d:
ea:7e:49:8e:40:a4:de:84:cb:70:5f:b5:cc:d9:11:
c2:a9:e8:d7:f1:43:b7:9d:20:dc:d9:4c:14:cd:6e:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:07:28:1D:36:C6:A0:B0:1A:D3:33:CC:9D:3B:25:70:A8:44:43
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/sqkHKB02xqCwGtMzzJ07JXCoREM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.86.0/23
IPv6:
2a02:8001::/32
Signature Algorithm: sha256WithRSAEncryption
83:65:fb:89:91:03:3b:a5:ec:8a:dc:77:40:ec:09:6a:f4:ab:
65:0d:6d:71:68:16:a8:e4:58:35:64:ed:f8:1b:f5:c4:a4:37:
d5:fb:ac:d1:b2:e0:c3:f4:d6:09:60:01:c0:80:a0:0f:d9:13:
cf:6f:40:a0:e6:79:48:b7:b5:3f:1f:38:bc:cd:28:37:dc:f9:
37:9b:d4:9f:ba:81:28:24:f6:d4:ae:51:58:c9:2f:af:7a:af:
05:7e:5b:53:91:cb:b2:49:d0:f7:3b:80:49:d4:24:84:fa:36:
6d:ee:89:9e:fd:ad:cf:d6:81:61:4f:dc:c9:1d:12:d1:4c:ba:
f2:f5:fb:0e:ee:7a:b1:52:d5:3d:41:b9:7a:db:a3:25:09:8b:
3d:1a:b7:a9:5d:a8:c0:d8:7d:c8:be:9d:a4:3b:f5:9a:d5:ba:
a2:47:b4:97:6c:ba:c5:d7:bf:e3:bd:f1:e6:6f:45:05:d9:26:
56:52:8f:96:54:87:43:55:4c:a6:fb:ee:80:85:14:14:00:3c:
82:da:ad:f8:91:06:7d:89:d7:45:a2:db:b5:0d:0d:c9:05:be:
83:50:87:c8:30:48:44:03:b1:da:e1:ce:ea:02:ec:a8:50:cd:
a9:fb:4a:82:49:f2:2d:9a:99:4a:b4:e1:df:e6:91:dd:3e:27:
61:70:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:28:49 2025 by rpki-client