Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/qjN2A-MopAtujymBN6KHc4_6MFw.roa
File: qjN2A-MopAtujymBN6KHc4_6MFw.roa (raw, json)
Hash identifier: Sfy+s431eMmdQa4b9kJx2UBSmJiZ0/akkoQZIuFvwUU=
Subject key identifier: AA:33:76:03:E3:28:A4:0B:6E:8F:29:81:37:A2:87:73:8F:FA:30:5C
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA7690CE3269165642493F8987CB4B
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/qjN2A-MopAtujymBN6KHc4_6MFw.roa
Signing time: Mon 02 Jan 2023 13:45:00 +0000
ROA not before: Mon 02 Jan 2023 13:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25154
IP address blocks: 212.91.19.0/24 maxlen: 24
212.91.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:76:90:ce:32:69:16:56:42:49:3f:89:87:cb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa337603e328a40b6e8f298137a287738ffa305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:7e:59:18:0e:c8:c8:99:d3:15:68:48:6e:
8c:1e:a5:95:88:0c:48:12:3f:74:5a:24:93:c7:05:
1f:2e:bd:62:ca:e4:97:fa:26:fb:73:8a:1a:e3:fe:
01:03:c5:33:f9:65:03:a9:50:17:bb:6f:9e:61:d3:
18:02:c3:cc:2e:5d:59:d4:fd:59:8f:b7:aa:1d:c0:
11:63:50:0b:fa:d2:37:26:71:72:fc:b7:aa:eb:e2:
3a:75:d4:ad:3d:e1:53:17:34:72:4a:0b:ba:23:7a:
29:73:24:5a:05:7b:a1:9d:f6:e7:ac:7a:4e:64:34:
f9:3a:10:58:ca:f5:e6:e3:11:7f:eb:13:1a:fd:d1:
a0:ba:4f:34:b1:62:95:93:3d:00:4e:df:ec:fa:36:
91:58:27:9f:a0:af:03:2d:36:f1:99:dc:90:2b:ed:
8b:43:3a:03:3e:07:22:19:7c:53:c1:4d:3b:c9:11:
88:ed:15:03:a4:24:5a:8c:e3:f1:bb:c9:0e:d3:35:
52:bd:91:60:c9:40:a1:06:4c:0e:83:a6:39:66:cb:
c7:24:a2:ae:48:30:ff:76:5a:52:d2:63:82:83:96:
26:45:26:6d:ca:c8:d2:79:54:99:ae:c5:b9:53:c3:
20:ad:97:36:09:39:f0:91:82:7c:82:fd:c5:e1:49:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:33:76:03:E3:28:A4:0B:6E:8F:29:81:37:A2:87:73:8F:FA:30:5C
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/qjN2A-MopAtujymBN6KHc4_6MFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.18.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ed:83:1e:bd:97:fd:c6:8b:66:22:91:1a:36:43:3a:4d:6c:
58:41:f8:cb:43:59:eb:28:5a:d7:b0:21:3f:25:f3:bb:46:38:
64:c8:89:47:f4:ca:14:03:bc:22:f0:c2:e6:50:bf:bc:87:2b:
47:6d:38:a1:9f:3e:9c:18:ef:bb:6f:81:31:4f:21:28:65:23:
97:8c:cc:63:c4:87:ce:e7:4a:b3:69:e8:cb:2c:40:01:80:dc:
29:d2:d8:01:7a:1c:62:29:52:b6:9d:9e:2a:80:cc:a3:94:53:
ab:6f:e7:7c:0c:d0:86:18:d8:da:89:c8:3a:7f:82:bf:c4:86:
b8:d6:c6:2f:2f:7a:06:e7:f9:2a:d1:2d:8f:59:10:27:89:39:
a6:c5:01:22:19:c0:d9:2d:0f:f4:cc:13:56:fb:08:b5:4c:d2:
05:bd:45:21:bc:a0:ad:86:28:f7:ac:e0:e3:89:ef:2c:8b:c4:
22:8d:68:1c:be:30:d6:9b:43:d1:d6:07:1b:8c:b2:69:16:23:
ca:d0:68:dd:0b:43:75:89:2f:a9:8c:02:bd:83:0a:76:c8:b7:
b7:ae:e7:f9:b4:4a:05:00:20:58:7f:bd:41:db:15:46:98:c9:
50:e1:8d:a4:d6:1f:aa:a0:6d:df:e7:26:4c:2a:98:7a:8e:2f:
da:a1:7f:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyunaQzjJpFlZCST+Jh8tLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjMwMTAyMTM0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTMzNzYwM2UzMjhhNDBiNmU4ZjI5ODEzN2EyODc3MzhmZmEzMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP5+WRgOyMiZ0xVoSG6MHqWViAxI
Ej90WiSTxwUfLr1iyuSX+ib7c4oa4/4BA8Uz+WUDqVAXu2+eYdMYAsPMLl1Z1P1Z
j7eqHcARY1AL+tI3JnFy/Leq6+I6ddStPeFTFzRySgu6I3opcyRaBXuhnfbnrHpO
ZDT5OhBYyvXm4xF/6xMa/dGguk80sWKVkz0ATt/s+jaRWCefoK8DLTbxmdyQK+2L
QzoDPgciGXxTwU07yRGI7RUDpCRajOPxu8kO0zVSvZFgyUChBkwOg6Y5ZsvHJKKu
SDD/dlpS0mOCg5YmRSZtysjSeVSZrsW5U8MgrZc2CTnwkYJ8gv3F4UmbzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKozdgPjKKQLbo8pgTeih3OP+jBcMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvcWpOMkEtTW9wQXR1anltQk42S0hjNF82TUZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1FsSMA0G
CSqGSIb3DQEBCwUAA4IBAQAg7YMevZf9xotmIpEaNkM6TWxYQfjLQ1nrKFrXsCE/
JfO7RjhkyIlH9MoUA7wi8MLmUL+8hytHbTihnz6cGO+7b4ExTyEoZSOXjMxjxIfO
50qzaejLLEABgNwp0tgBehxiKVK2nZ4qgMyjlFOrb+d8DNCGGNjaicg6f4K/xIa4
1sYvL3oG5/kq0S2PWRAniTmmxQEiGcDZLQ/0zBNW+wi1TNIFvUUhvKCthij3rODj
ie8si8QijWgcvjDWm0PR1gcbjLJpFiPK0GjdC0N1iS+pjAK9gwp2yLe3ruf5tEoF
ACBYf71B2xVGmMlQ4Y2k1h+qoG3f5yZMKph6ji/aoX9n
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:31 2025 by rpki-client