Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/qibJGUz_yJKE3L1v7VHwGH1IRyM.roa
File: qibJGUz_yJKE3L1v7VHwGH1IRyM.roa (raw, json)
Hash identifier: pV9pI81WqcrM/djgKWMDoCTIcBlzI6LwyWmIxzGwFV0=
Subject key identifier: AA:26:C9:19:4C:FF:C8:92:84:DC:BD:6F:ED:51:F0:18:7D:48:47:23
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018AD3A1D6E1042F3E0150C00B8142DA8EEE
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/qibJGUz_yJKE3L1v7VHwGH1IRyM.roa
Signing time: Tue 26 Sep 2023 22:35:13 +0000
ROA not before: Tue 26 Sep 2023 22:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15755
IP address blocks: 185.96.171.0/24 maxlen: 24
94.103.40.0/24 maxlen: 24
185.35.21.0/24 maxlen: 24
185.203.34.0/24 maxlen: 24
185.203.32.0/24 maxlen: 24
2a0a:e0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d3:a1:d6:e1:04:2f:3e:01:50:c0:0b:81:42:da:8e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Sep 26 22:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa26c9194cffc89284dcbd6fed51f0187d484723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:38:8b:7b:16:86:52:d2:f8:1f:8a:b1:73:
46:3c:a4:2c:da:aa:47:71:3c:9b:c0:26:00:c6:88:
3c:bf:01:d1:63:41:a6:d7:10:aa:58:93:77:76:6a:
f7:74:4d:a9:6b:0d:da:84:89:b4:c7:00:6e:50:ca:
5b:11:cc:0c:d0:af:39:2d:f7:40:60:7e:af:30:ab:
cb:5c:53:55:07:c5:18:65:ee:a0:1e:ee:6b:08:4a:
f9:48:9e:bb:7d:10:20:63:ea:3c:5f:ab:66:5d:ef:
ba:8b:d6:3f:3a:7c:7b:58:31:a6:48:ea:b4:22:c4:
1f:9a:7f:60:2c:4a:d9:4c:15:71:42:a6:e3:31:d2:
7e:5b:2b:c1:8b:f6:70:90:0c:88:e3:8d:8f:a5:08:
78:ce:2a:cc:cc:ba:44:58:14:a4:1b:cf:d6:bc:12:
54:1c:ff:e5:a0:43:b6:51:a6:e6:28:6c:8f:2b:e3:
0f:d1:0b:ad:43:73:be:6d:9f:6a:f0:dd:79:3b:97:
b7:80:94:ba:47:aa:d6:3f:20:ea:03:11:af:32:36:
c5:d0:48:33:c6:e3:71:10:8b:c6:0e:75:9a:2f:68:
13:59:b9:df:bf:86:ba:1c:ef:c2:16:3f:ca:a5:21:
29:46:89:e0:9c:62:d6:56:b9:c9:a8:5c:f2:5c:d7:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:C9:19:4C:FF:C8:92:84:DC:BD:6F:ED:51:F0:18:7D:48:47:23
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/qibJGUz_yJKE3L1v7VHwGH1IRyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.40.0/24
185.35.21.0/24
185.96.171.0/24
185.203.32.0/24
185.203.34.0/24
IPv6:
2a0a:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:b5:ee:62:40:71:66:1c:68:e1:c5:e7:34:fe:d3:2e:83:35:
f9:95:56:fb:63:64:f5:0e:5b:28:88:9e:b0:de:22:bd:2d:bd:
d0:bc:c1:8c:a1:a7:7d:23:52:24:8d:6f:3c:6b:6d:d4:00:ea:
0a:fa:d3:6e:a4:87:cf:a2:c4:88:b3:b5:77:73:bb:98:11:1f:
1b:ec:18:7a:4d:51:d0:c2:14:35:68:c8:85:4f:d3:c1:0c:22:
05:85:74:38:87:f5:5b:23:98:46:f6:01:09:7a:52:a5:7e:82:
ad:ea:76:48:2d:c6:1a:8d:af:d7:d0:88:46:ed:d4:91:b5:21:
d0:c2:69:4c:5d:2c:81:1c:80:26:b8:26:a4:3f:30:a8:74:96:
15:60:b1:51:f8:67:49:30:68:42:fa:fd:a2:8a:2c:de:34:5d:
52:54:5c:70:d0:86:4d:68:4c:7c:b7:f3:63:d3:64:93:79:fa:
7f:41:a5:87:0a:9b:64:91:64:98:55:5a:f3:59:cb:91:1e:8c:
10:f1:75:49:e4:89:b6:c3:fc:5c:38:e0:f1:0e:74:55:cb:6c:
44:07:11:d8:05:fd:a1:fb:93:70:55:4a:9b:74:c1:62:b7:7f:
f7:2e:8f:86:86:b6:19:a8:bb:9f:c1:09:16:0c:7e:a5:38:cd:
8b:1f:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:03:29 2025 by rpki-client