Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/qf5JBlFygmEiSFAiTkMU-B8hj4A.roa
File: qf5JBlFygmEiSFAiTkMU-B8hj4A.roa (raw, json)
Hash identifier: QqvrUKwjH465Ddcr1KGwxMHIcr3DOPpKdbKYet4lbm0=
Subject key identifier: A9:FE:49:06:51:72:82:61:22:48:50:22:4E:43:14:F8:1F:21:8F:80
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 06DBF0A6
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/qf5JBlFygmEiSFAiTkMU-B8hj4A.roa
Signing time: Sat 01 Jan 2022 09:54:37 +0000
ROA not before: Sat 01 Jan 2022 09:54:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42513
IP address blocks: 192.111.100.0/24 maxlen: 24
188.116.46.0/24 maxlen: 24
194.62.4.0/23 maxlen: 23
194.62.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115077286 (0x6dbf0a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Jan 1 09:54:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9fe490651728261224850224e4314f81f218f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:30:3e:72:9f:32:98:b4:e4:e7:d5:47:2e:
80:ed:b8:61:db:0f:cb:68:ab:c7:c7:ed:e7:22:ff:
41:df:b8:7e:ae:d8:80:ef:b6:b9:bb:29:87:97:7f:
5d:59:2d:77:86:4e:32:22:ef:24:5f:7f:62:03:5d:
49:23:1a:82:bf:de:ef:c1:9e:cb:c7:ce:a6:2e:71:
e7:e3:e8:ea:17:18:24:2e:b3:08:33:a8:cb:3e:58:
d5:cc:3e:6d:55:43:f1:c7:35:59:66:82:61:45:98:
05:03:c2:3d:0b:9a:b4:8a:99:39:29:b7:94:63:1b:
26:57:51:a2:40:a0:6e:cd:88:60:cd:d2:ce:d1:e0:
c9:21:05:51:31:a0:7c:db:98:10:54:0f:30:b9:2f:
94:e9:9b:f0:1a:a5:cf:3d:e0:d3:fc:5b:c4:33:0b:
8c:52:2a:ad:c2:b7:0c:32:12:fd:cc:10:66:6d:08:
c8:5d:43:33:f9:ed:34:db:75:12:3c:cb:a4:45:3c:
69:33:00:4c:da:ee:fa:4c:02:b2:7c:65:04:c0:32:
ff:36:46:f3:5a:bf:50:23:3e:61:7b:6c:6b:14:c9:
8f:54:95:36:63:94:52:6d:37:15:f1:1f:07:f8:5f:
68:f6:ba:98:89:44:8d:b5:0c:05:4a:a6:ae:0b:e0:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:49:06:51:72:82:61:22:48:50:22:4E:43:14:F8:1F:21:8F:80
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/qf5JBlFygmEiSFAiTkMU-B8hj4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.116.46.0/24
192.111.100.0/24
194.62.4.0/23
194.62.8.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:ff:5a:c9:5a:63:4a:57:80:1c:1f:7a:1a:60:fc:9c:58:39:
0f:46:2f:f6:99:fa:1d:4e:df:15:b2:fb:7e:6d:3d:90:bb:67:
08:48:59:b2:67:7d:08:3d:61:c7:46:f4:37:eb:df:c7:86:a0:
f4:da:f3:7b:31:f6:66:fd:54:f3:2f:e4:d3:f6:31:51:26:ee:
71:4d:f9:9d:df:10:33:1a:f6:a3:d5:c0:cb:59:57:22:15:04:
48:3c:59:54:c8:ac:be:18:91:f8:0e:a4:fc:bc:94:54:23:7b:
5b:44:f5:66:dd:6c:24:f7:86:fb:77:72:ff:b6:1e:8b:d6:3a:
46:c0:07:f2:2c:f3:72:17:a9:b1:b6:69:ac:6e:33:f2:81:5b:
5e:c6:32:55:d3:5b:38:48:a3:b6:9d:b9:73:bd:a0:06:8c:57:
a2:1d:4d:e9:ff:52:ad:e1:b7:df:66:70:f4:5c:c7:35:c7:c9:
50:56:3f:44:0f:05:7a:54:de:51:34:1c:e8:a2:77:dc:63:fe:
ad:72:f0:bb:3a:8c:06:e3:91:0e:b4:5c:cf:e1:75:53:5b:8e:
57:49:10:6a:a8:46:78:de:d7:64:9b:70:66:4c:25:7e:ef:3f:
9a:6c:4a:bf:38:3a:55:10:24:2a:e7:fa:c6:c0:db:3c:87:74:
c6:c9:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:25 2025 by rpki-client