Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/QQF_YFwJPAeApZyCgiZ_mdVMDVI.roa
File: QQF_YFwJPAeApZyCgiZ_mdVMDVI.roa (raw, json)
Hash identifier: 0UZHeD6esdyRTB9HsET1k3PM4d9l6FACLgoCDMYhFUI=
Subject key identifier: 41:01:7F:60:5C:09:3C:07:80:A5:9C:82:82:26:7F:99:D5:4C:0D:52
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 0185718317C9AB10E94D4A1DE3E83B2694C1
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/QQF_YFwJPAeApZyCgiZ_mdVMDVI.roa
Signing time: Mon 02 Jan 2023 08:04:54 +0000
ROA not before: Mon 02 Jan 2023 08:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202365
IP address blocks: 45.153.248.0/22 maxlen: 24
185.170.9.0/24 maxlen: 24
2a10:f9c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:17:c9:ab:10:e9:4d:4a:1d:e3:e8:3b:26:94:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Jan 2 08:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41017f605c093c0780a59c8282267f99d54c0d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:01:5a:3d:de:1f:fd:4c:8c:41:dd:9e:59:
19:b3:fe:7a:0a:a9:52:66:6f:49:24:4b:b3:0b:33:
a2:20:c7:9e:b1:c7:09:79:be:9a:84:8f:0e:dd:ad:
e0:11:e4:85:ee:97:ed:fc:57:cf:2b:c9:8c:81:a4:
b8:6b:10:25:b9:ed:86:07:ae:d4:81:2f:14:64:4b:
75:f7:34:b0:8c:e1:09:aa:82:7b:81:8c:88:83:a7:
c1:ee:27:47:cf:e8:b7:ec:92:11:ad:9f:e0:3d:29:
a0:1f:1f:fb:72:ad:b5:7d:a5:ff:f4:2b:b9:47:a2:
4c:cc:d4:da:ba:0d:2c:6e:9a:47:12:f2:10:d1:a4:
08:e8:01:c5:54:f9:6e:81:bf:3d:e5:92:f6:e0:16:
54:08:65:dd:68:4f:fd:c6:b4:d7:9e:6e:15:a2:cd:
d0:58:19:a6:cc:1b:d3:cb:a1:82:dc:a6:6f:c7:1c:
fb:14:48:5b:16:4a:1e:a2:74:f3:54:2f:17:4a:c2:
72:5a:9b:f8:30:04:15:00:65:e2:23:ce:db:92:e0:
46:ee:e5:ff:3e:cb:2c:28:a3:43:4f:55:c0:db:0b:
27:28:ce:df:a6:f2:0b:2b:f2:dd:77:c5:55:e0:5c:
c3:47:9d:83:d9:5e:c1:c1:05:09:7f:a6:14:e3:a1:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:7F:60:5C:09:3C:07:80:A5:9C:82:82:26:7F:99:D5:4C:0D:52
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/QQF_YFwJPAeApZyCgiZ_mdVMDVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.248.0/22
185.170.9.0/24
IPv6:
2a10:f9c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:8c:87:3d:7f:19:7c:d8:2e:ea:b6:fe:16:1f:b3:f6:be:23:
79:2e:d9:2c:40:0d:0f:a4:ef:45:96:37:f1:d8:58:f5:5a:05:
9a:60:34:ee:f5:76:29:26:dd:05:ba:5f:89:20:f1:36:4a:cc:
98:83:89:92:da:35:8a:4f:76:b9:e4:bc:f6:61:ff:9f:74:d1:
22:08:69:3c:42:d4:29:a8:a7:a8:5f:3e:e0:09:c9:34:13:c6:
4e:77:cb:b4:15:27:8b:3a:ef:6a:ca:ed:f2:b5:b3:a7:f9:7e:
c1:f8:de:c2:15:60:6f:0c:e8:87:74:39:f1:95:cc:fb:e2:2e:
c9:dc:26:e4:4c:41:d9:31:da:da:64:0d:f8:f9:5a:d1:ea:ff:
82:37:b3:68:d1:93:fa:01:c6:9a:7a:bf:33:ea:12:c4:4f:81:
9e:39:29:6c:51:cc:b3:7e:c1:e0:fe:f5:70:92:de:45:36:16:
82:f2:2e:d9:00:9c:63:e4:45:1c:f2:1c:bb:23:09:5f:af:7c:
d6:8e:fe:bf:36:86:4f:21:eb:35:af:e6:1b:ea:85:a9:50:b5:
72:36:4b:81:56:b9:0c:fa:88:c4:91:98:cb:ac:a9:54:92:03:
2b:c6:38:a9:1a:12:cb:f4:5a:18:5f:d8:88:62:26:94:78:40:
36:2a:58:89
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVxgxfJqxDpTUod4+g7JpTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm
YTQ0YTAwHhcNMjMwMTAyMDgwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTAxN2Y2MDVjMDkzYzA3ODBhNTljODI4MjI2N2Y5OWQ1NGMwZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhQBWj3eH/1MjEHdnlkZs/56CqlS
Zm9JJEuzCzOiIMeesccJeb6ahI8O3a3gEeSF7pft/FfPK8mMgaS4axAlue2GB67U
gS8UZEt19zSwjOEJqoJ7gYyIg6fB7idHz+i37JIRrZ/gPSmgHx/7cq21faX/9Cu5
R6JMzNTaug0sbppHEvIQ0aQI6AHFVPlugb895ZL24BZUCGXdaE/9xrTXnm4Vos3Q
WBmmzBvTy6GC3KZvxxz7FEhbFkoeonTzVC8XSsJyWpv4MAQVAGXiI87bkuBG7uX/
PsssKKNDT1XA2wsnKM7fpvILK/Ldd8VV4FzDR52D2V7BwQUJf6YU46G8oQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEEBf2BcCTwHgKWcgoImf5nVTA1SMB8GA1UdIwQY
MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt
YjhiMWU0YjRlY2I5LzEvUVFGX1lGd0pQQWVBcFp5Q2dpWl9tZFZNRFZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5
LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZn4AwQA
uaoJMA0EAgACMAcDBQMqEPnAMA0GCSqGSIb3DQEBCwUAA4IBAQANjIc9fxl82C7q
tv4WH7P2viN5LtksQA0PpO9Fljfx2Fj1WgWaYDTu9XYpJt0Ful+JIPE2SsyYg4mS
2jWKT3a55Lz2Yf+fdNEiCGk8QtQpqKeoXz7gCck0E8ZOd8u0FSeLOu9qyu3ytbOn
+X7B+N7CFWBvDOiHdDnxlcz74i7J3CbkTEHZMdraZA34+VrR6v+CN7No0ZP6Acaa
er8z6hLET4GeOSlsUcyzfsHg/vVwkt5FNhaC8i7ZAJxj5EUc8hy7Iwlfr3zWjv6/
NoZPIes1r+Yb6oWpULVyNkuBVrkM+ojEkZjLrKlUkgMrxjipGhLL9FoYX9iIYiaU
eEA2KliJ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:27 2025 by rpki-client