Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/KQVewKkeYG8Os_wecZyT0QMudUI.roa
File: KQVewKkeYG8Os_wecZyT0QMudUI.roa (raw, json)
Hash identifier: nUd0+Vg1UE0Q/Y5uW6IbPIVKU3Wpj+NzF0xO/sbc1jw=
Subject key identifier: 29:05:5E:C0:A9:1E:60:6F:0E:B3:FC:1E:71:9C:93:D1:03:2E:75:42
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 0606E3A9
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/KQVewKkeYG8Os_wecZyT0QMudUI.roa
Signing time: Sat 01 Jan 2022 06:01:27 +0000
ROA not before: Sat 01 Jan 2022 06:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20922
IP address blocks: 193.188.192.0/23 maxlen: 23
193.188.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101114793 (0x606e3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 1 06:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29055ec0a91e606f0eb3fc1e719c93d1032e7542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:36:d5:2e:5d:3d:24:46:04:00:c7:5e:27:
4b:7d:63:97:24:6a:fa:06:63:eb:23:4a:b4:08:24:
ba:8a:70:85:fc:7d:f0:f3:d8:f2:01:7f:1b:3b:3f:
33:88:5c:4c:19:23:9a:bb:20:60:4a:ec:6e:42:2b:
cc:f3:c1:a1:5b:ec:5d:57:ac:81:db:3a:4a:33:ea:
91:7e:f6:03:a4:45:20:52:b7:63:8a:63:30:bd:26:
8d:d5:ee:15:47:05:52:a9:74:25:bc:a4:36:d6:a2:
39:6d:ed:a3:ac:57:89:3f:ae:a1:5d:9f:46:85:87:
bd:af:3a:85:97:37:41:b5:ed:d3:aa:7a:4f:ed:06:
5c:db:54:a0:ae:b2:d8:7c:8f:1a:78:93:b3:88:15:
90:0d:8a:d0:77:21:05:f3:ae:5c:ec:c3:9f:e2:02:
cd:78:8b:2a:4d:d9:ac:a4:c6:41:ac:3b:c7:85:5a:
7d:1a:27:cb:8a:e4:3c:90:cc:d3:be:f5:cb:c0:61:
0e:b5:be:da:89:0e:50:d8:fa:d7:db:f6:2a:ba:68:
46:4d:50:5f:98:e7:35:aa:ed:5f:08:d6:69:2f:3b:
c8:72:df:f3:c4:7f:13:25:ce:fe:b7:8b:3e:d1:ac:
d4:77:e4:c4:94:71:10:6f:98:e0:71:93:9a:0a:5c:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:05:5E:C0:A9:1E:60:6F:0E:B3:FC:1E:71:9C:93:D1:03:2E:75:42
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/KQVewKkeYG8Os_wecZyT0QMudUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.192.0/23
Signature Algorithm: sha256WithRSAEncryption
37:d0:00:bd:a9:e2:50:08:48:a4:58:f7:2f:4c:46:97:4f:a8:
7d:14:18:2a:1f:40:ca:51:80:9a:56:12:86:1b:70:7e:cd:74:
c8:ba:26:85:b3:e8:e0:f5:60:c7:c0:96:39:28:d7:0c:e5:6f:
f1:02:46:64:c7:33:b4:17:d6:c5:d5:b7:6d:67:e4:3d:34:61:
41:d3:9f:ab:e1:6a:23:7d:9f:e6:12:44:4d:3d:4e:09:a5:66:
69:af:92:c2:f3:c2:34:29:9d:00:1a:82:d0:d1:25:04:ed:79:
7d:7c:e5:58:84:ad:f7:a5:a5:23:4e:46:e3:82:4f:6a:11:66:
fa:6d:6f:e8:f0:4c:97:c0:a9:be:d0:91:3f:15:25:77:59:22:
7d:e8:d7:17:90:47:0f:7b:2b:7a:b2:57:ba:ef:a7:0e:ba:d2:
7f:36:36:fa:0e:30:b3:5a:c0:ce:ed:10:de:ef:0b:67:23:a9:
2c:c7:a3:5d:f2:79:3d:42:9d:a5:97:35:91:f3:d6:53:7f:db:
df:cb:6f:30:ec:c8:97:bb:fe:cb:95:92:dd:af:d1:e6:2d:6e:
34:55:a2:a7:ed:fb:fd:e1:a0:c3:12:c8:2c:fe:b2:9a:c2:fd:
4a:78:17:f9:ea:fa:b9:e2:6c:ac:ed:51:9a:32:9a:1a:cd:a5:
95:29:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:08 2025 by rpki-client