Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/7eba41DLBdrd16QQ_sqlfp-bjeg.roa
File: 7eba41DLBdrd16QQ_sqlfp-bjeg.roa (raw, json)
Hash identifier: unTIsfX4Z6xditkDfKOR7JuinW7JjDlDyIwimiZkkAk=
Subject key identifier: ED:E6:DA:E3:50:CB:05:DA:DD:D7:A4:10:FE:CA:A5:7E:9F:9B:8D:E8
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 01824A2D0EFE54B51FF3E8C74DAC682D473A
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/7eba41DLBdrd16QQ_sqlfp-bjeg.roa
Signing time: Fri 29 Jul 2022 13:37:23 +0000
ROA not before: Fri 29 Jul 2022 13:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6663
IP address blocks: 185.190.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:2d:0e:fe:54:b5:1f:f3:e8:c7:4d:ac:68:2d:47:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jul 29 13:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ede6dae350cb05daddd7a410fecaa57e9f9b8de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:79:d7:32:95:05:f8:d6:23:1e:48:01:4c:
8e:e1:7a:06:ad:74:cd:35:69:4b:2c:51:0a:e1:0a:
79:35:02:8e:a5:69:a7:86:d1:1c:04:6b:d7:f1:a1:
ee:53:45:43:60:e7:d8:4b:8c:d9:9a:c0:c9:7b:9c:
fb:97:94:b3:f7:36:5a:46:4e:65:90:62:bd:22:c2:
d3:27:24:db:54:c8:3d:6a:41:f8:1c:1a:be:fe:d9:
95:08:2b:30:af:84:49:1b:e5:1c:fd:51:3c:43:80:
84:41:9a:a6:fa:14:45:e6:57:96:1a:2c:92:b7:2e:
e5:f0:db:33:0b:a4:df:7b:b0:9e:49:02:e9:57:8e:
a5:82:cc:7b:b2:f4:62:47:62:e6:d2:a9:6d:6b:c3:
9b:db:d7:ca:9b:10:20:26:b9:d5:df:fd:bf:ca:9d:
88:05:22:8f:03:da:4d:b8:a2:5b:52:d0:f9:21:6a:
d9:ff:9e:e0:f0:31:6b:fa:cd:04:85:20:52:b9:29:
9a:23:f9:f1:0d:cd:15:a0:a0:19:54:9f:bc:fc:72:
a7:2b:3f:e8:27:65:05:53:37:c4:51:bc:8f:47:d2:
72:f8:95:8a:38:df:1f:d9:8d:d1:c1:4d:42:fe:a8:
d1:d0:fb:69:f8:ab:dc:f0:c8:e1:a4:34:eb:86:41:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E6:DA:E3:50:CB:05:DA:DD:D7:A4:10:FE:CA:A5:7E:9F:9B:8D:E8
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/7eba41DLBdrd16QQ_sqlfp-bjeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.213.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1d:e1:57:aa:26:f9:8e:24:60:13:9c:fb:e3:d4:f9:46:0d:
3e:16:09:3b:52:70:73:3b:51:a0:6e:74:bf:44:59:1a:e0:84:
d6:49:2a:54:80:2d:ce:c1:d8:2a:5e:62:f5:b3:99:fd:03:97:
d4:11:b4:15:1f:5a:c2:07:1d:0c:76:c5:fa:54:cd:8b:10:c6:
f5:b6:86:51:8e:3c:0f:ed:95:b3:88:76:ff:a6:ed:49:26:b8:
07:94:fb:77:cf:61:b5:09:20:6b:dc:c2:94:a6:27:25:9f:eb:
b3:99:4b:00:e0:8c:d0:8f:3f:a3:df:60:1a:85:4a:b3:eb:02:
e9:b3:2d:a0:e7:98:31:92:b4:9c:80:6d:58:cd:ea:b8:a8:83:
0a:2c:85:cb:c9:44:c6:09:37:42:20:2c:d8:49:3d:17:39:dc:
01:e0:f7:03:38:66:8c:33:95:d5:82:35:35:42:ae:6c:17:39:
37:e1:f0:4d:31:de:fb:74:80:20:1b:09:dd:c8:25:2e:a8:ea:
f0:59:42:6e:1f:8f:89:20:05:43:c6:bf:f0:c6:77:80:80:20:
3d:38:b2:ce:01:64:9f:1d:10:fc:00:5a:f4:01:6d:53:2a:b9:
47:18:9f:9b:b8:5b:f7:2f:b6:2c:db:94:62:45:ce:a2:a1:c8:
a3:38:e1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:35:46 2025 by rpki-client