Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/Q5s1LsIbnT_DHHoBmYawth2S3iQ.roa
File: Q5s1LsIbnT_DHHoBmYawth2S3iQ.roa (raw, json)
Hash identifier: TXER1yt5kVxc4CJ4RrvmYjuOAZX8qrXePEg6KAyviQ4=
Subject key identifier: 43:9B:35:2E:C2:1B:9D:3F:C3:1C:7A:01:99:86:B0:B6:1D:92:DE:24
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 0D8230ED
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/Q5s1LsIbnT_DHHoBmYawth2S3iQ.roa
Signing time: Sat 01 Jan 2022 01:55:58 +0000
ROA not before: Sat 01 Jan 2022 01:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28747
IP address blocks: 193.34.88.0/22 maxlen: 24
217.22.48.0/20 maxlen: 24
217.22.49.0/24 maxlen: 24
94.198.160.0/21 maxlen: 24
86.39.128.0/17 maxlen: 24
193.43.88.0/24 maxlen: 24
2001:1598::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226636013 (0xd8230ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Jan 1 01:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=439b352ec21b9d3fc31c7a019986b0b61d92de24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:0e:29:ac:9c:86:7a:01:9d:43:17:a5:d5:
2f:48:e9:a8:a8:5b:05:35:83:2a:06:e1:e7:15:01:
ed:a9:1b:5b:21:57:69:3c:29:9a:53:62:ad:9d:c5:
5a:14:0a:1b:a4:55:da:d8:e3:b5:db:8f:3c:b4:69:
44:2c:6c:e1:58:55:56:43:8f:c8:04:a5:dd:be:c4:
c8:b8:b2:b0:72:5e:fa:fe:49:ed:d7:9f:91:d0:5d:
a1:0a:e6:45:2d:3b:3b:2d:25:83:55:be:3c:a5:a7:
8a:6e:59:d6:e0:76:52:3e:18:5d:75:a6:27:8e:63:
a1:65:37:35:89:e8:0f:32:e8:91:65:b0:c9:9e:ad:
2c:6a:c1:ad:81:7d:7c:9e:44:42:36:e6:c1:e3:62:
d2:dc:1e:15:b8:27:6a:a5:f7:0f:03:7a:a9:08:1f:
fa:9f:2e:da:2f:83:22:9c:a2:a6:81:a3:44:de:9b:
0b:95:f9:e7:3a:9f:3c:1b:25:44:24:a5:9c:ef:25:
0b:1e:23:bf:60:a2:31:47:84:d1:81:24:d1:f7:14:
1d:c7:99:af:a8:c5:a1:1f:47:cf:14:88:18:84:71:
0d:bc:86:a5:2f:23:4f:d8:44:f8:47:df:5a:00:ed:
4c:ba:df:7a:9a:19:d0:9f:f8:2d:14:f5:c1:83:26:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9B:35:2E:C2:1B:9D:3F:C3:1C:7A:01:99:86:B0:B6:1D:92:DE:24
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/Q5s1LsIbnT_DHHoBmYawth2S3iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.39.128.0/17
94.198.160.0/21
193.34.88.0/22
193.43.88.0/24
217.22.48.0/20
IPv6:
2001:1598::/32
Signature Algorithm: sha256WithRSAEncryption
c6:88:73:6f:c8:87:9c:b4:45:13:5e:1b:88:f2:50:58:28:1f:
61:da:67:9b:ab:78:55:5d:12:5d:d0:0a:8e:7f:9b:6a:ef:00:
58:2e:3b:46:bb:a1:b9:33:97:5b:0d:d3:dc:dc:37:62:b9:bb:
63:58:f1:fd:e9:d1:42:27:24:45:cc:75:e5:ec:f7:3f:7c:fa:
cd:20:f9:aa:15:a3:38:78:b3:c1:93:13:e7:77:2f:79:e1:ee:
a1:3f:80:55:16:29:c7:89:41:2f:dd:fd:99:42:70:c3:3f:5a:
99:3b:8f:8e:c7:f4:e0:3c:3b:1e:ac:2a:5a:94:31:43:e9:4c:
4a:21:d1:3a:ed:b0:9c:97:0e:96:72:2d:f6:30:c6:c6:b9:27:
1e:0b:eb:e6:3c:0b:49:55:85:25:e8:db:1d:c9:22:d6:fc:a1:
80:7b:f2:20:a7:b9:e5:39:a4:f7:05:fd:a1:d3:4f:53:ae:d0:
d8:fa:ac:36:0a:a3:9a:c8:a4:2b:99:e3:7b:72:cb:ee:4c:ec:
43:0c:3b:15:3f:86:73:53:88:b3:08:09:3b:5c:07:bc:ee:11:
6c:98:f1:7a:fc:ed:77:b2:81:f3:fe:e7:35:23:1d:96:fb:ac:
c5:ce:cb:27:a3:7b:db:cb:16:2f:21:03:f1:d4:c4:03:8c:b0:
16:7b:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:52:15 2025 by rpki-client