Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/QUE5xyYbB8BLF8w2tNs4iKSnb3Y.roa
File: QUE5xyYbB8BLF8w2tNs4iKSnb3Y.roa (raw, json)
Hash identifier: wK9hlO9HMoq7wHk10Y9J/y/TutOruT9qXBTAVD5vMl0=
Subject key identifier: 41:41:39:C7:26:1B:07:C0:4B:17:CC:36:B4:DB:38:88:A4:A7:6F:76
Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial: 139A0A86
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/QUE5xyYbB8BLF8w2tNs4iKSnb3Y.roa
Signing time: Fri 29 Apr 2022 10:30:28 +0000
ROA not before: Fri 29 Apr 2022 10:30:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60527
IP address blocks: 185.30.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328862342 (0x139a0a86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Validity
Not Before: Apr 29 10:30:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=414139c7261b07c04b17cc36b4db3888a4a76f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:37:9d:20:87:57:25:48:80:8a:4b:59:25:
09:21:2d:ba:07:26:18:6f:01:6f:2d:f0:96:52:63:
11:cb:f3:7f:59:d6:1b:3d:05:51:ab:f5:82:49:cb:
04:6a:d3:f0:06:bb:f0:b7:5b:b8:da:91:7a:99:2d:
16:ca:e9:02:85:8c:1d:db:48:9d:85:58:21:84:82:
4b:2e:a8:05:69:57:aa:cc:ba:fc:5d:45:6e:7a:16:
88:5a:e3:f3:5c:2a:5d:a1:09:7a:82:ba:c7:f7:da:
43:db:33:b1:64:1b:81:92:7a:15:9e:c7:1d:a2:f2:
35:3f:9c:5d:6c:f6:74:34:9b:25:04:84:fa:31:13:
58:3a:7f:e6:89:fe:22:56:22:c4:45:15:92:60:18:
41:ed:0d:65:d2:23:3d:e8:96:7e:1a:00:5c:29:3b:
0c:81:2f:92:d1:f1:ba:26:a6:88:37:2b:d9:b7:e5:
07:f6:86:f5:79:df:68:43:45:11:93:de:ce:67:f4:
d3:12:08:22:a5:43:97:09:48:e5:23:4c:88:42:5d:
8c:d2:45:1b:01:71:1e:34:26:ee:30:91:b1:3f:6d:
c4:89:30:f3:36:44:c9:31:a7:1a:45:00:6c:93:e1:
ce:bc:82:fc:74:a6:56:aa:a5:dc:de:00:88:9b:b2:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:39:C7:26:1B:07:C0:4B:17:CC:36:B4:DB:38:88:A4:A7:6F:76
X509v3 Authority Key Identifier:
keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/QUE5xyYbB8BLF8w2tNs4iKSnb3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.22.0/24
Signature Algorithm: sha256WithRSAEncryption
41:98:df:ba:03:e1:2f:60:f8:21:a7:db:94:6e:0a:14:5a:a9:
ef:a3:dc:44:43:ad:88:bb:77:f0:39:27:d7:ab:80:16:9c:57:
90:c7:c6:66:d8:4e:8b:c2:e1:4a:21:8e:96:19:14:06:de:5b:
b1:a4:a7:10:33:18:c6:11:89:b1:57:c3:7e:27:49:ae:91:78:
1d:ab:04:18:b9:bd:ce:12:99:14:00:12:20:39:8f:36:ef:fe:
00:ee:a2:6e:f0:90:b9:c2:03:ff:18:13:bb:73:ae:8e:77:0a:
85:68:dc:9d:2c:60:08:dd:06:9c:cb:f0:c7:33:cd:45:d6:a0:
0e:f1:cc:86:52:43:47:63:e0:e7:e1:4b:8b:19:fe:b7:e2:5f:
66:72:85:4f:1c:6d:4d:b7:8c:69:15:9b:12:c9:39:56:20:13:
cc:9a:ee:f1:9a:6a:4c:ea:67:dc:32:92:93:78:0b:8d:a7:8f:
b5:d4:56:7b:76:31:b9:df:8b:34:30:c6:67:19:d1:ef:1f:e3:
db:29:af:fd:d5:d6:e5:38:d2:3f:99:4f:2d:37:d0:aa:52:8d:
8a:59:d7:79:d1:45:81:79:f0:a4:7b:5e:d0:70:29:85:28:38:
34:88:2b:ac:53:f3:3a:91:4e:91:77:2d:a4:8d:cf:4d:9c:3a:
18:b7:c3:02
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEE5oKhjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YjgzZmJmYzE3NmNkNDhlYmUyZjJjZGU5ZjRjMDFlZDI1M2JiYjJkMB4XDTIyMDQy
OTEwMzAyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDE0MTM5YzcyNjFi
MDdjMDRiMTdjYzM2YjRkYjM4ODhhNGE3NmY3NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQQN50gh1clSICKS1klCSEtugcmGG8Bby3wllJjEcvzf1nW
Gz0FUav1gknLBGrT8Aa78LdbuNqRepktFsrpAoWMHdtInYVYIYSCSy6oBWlXqsy6
/F1FbnoWiFrj81wqXaEJeoK6x/faQ9szsWQbgZJ6FZ7HHaLyNT+cXWz2dDSbJQSE
+jETWDp/5on+IlYixEUVkmAYQe0NZdIjPeiWfhoAXCk7DIEvktHxuiamiDcr2bfl
B/aG9XnfaENFEZPezmf00xIIIqVDlwlI5SNMiEJdjNJFGwFxHjQm7jCRsT9txIkw
8zZEyTGnGkUAbJPhzryC/HSmVqql3N4AiJuy+YUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRBQTnHJhsHwEsXzDa02ziIpKdvdjAfBgNVHSMEGDAWgBTLg/v8F2zUjr4v
LN6fTAHtJTu7LTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3k0UDdfQmRzMUk2LUx5emVuMHdCN1NVN3V5MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvZWEzN2YxLWNlMWEtNDgxNi1iY2I2LTQ0MTJkZWZlZGU3My8x
L1FVRTV4eVliQjhCTEY4dzJ0TnM0aUtTbmIzWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
ZWEzN2YxLWNlMWEtNDgxNi1iY2I2LTQ0MTJkZWZlZGU3My8xL3k0UDdfQmRzMUk2
LUx5emVuMHdCN1NVN3V5MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkeFjANBgkqhkiG9w0BAQsFAAOC
AQEAQZjfugPhL2D4IafblG4KFFqp76PcREOtiLt38Dkn16uAFpxXkMfGZthOi8Lh
SiGOlhkUBt5bsaSnEDMYxhGJsVfDfidJrpF4HasEGLm9zhKZFAASIDmPNu/+AO6i
bvCQucID/xgTu3OujncKhWjcnSxgCN0GnMvwxzPNRdagDvHMhlJDR2Pg5+FLixn+
t+JfZnKFTxxtTbeMaRWbEsk5ViATzJru8ZpqTOpn3DKSk3gLjaePtdRWe3Yxud+L
NDDGZxnR7x/j2ymv/dXW5TjSP5lPLTfQqlKNilnXedFFgXnwpHte0HAphSg4NIgr
rFPzOpFOkXctpI3PTZw6GLfDAg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:26 2025 by rpki-client