Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/Pq0_l_Y1dkG9wQBPzkCZ14_fcQI.roa
File: Pq0_l_Y1dkG9wQBPzkCZ14_fcQI.roa (raw, json)
Hash identifier: j2jFvQ8tvrwJyPgIR1Re/iUeDRG9vywr2m+3HnTwfgA=
Subject key identifier: 3E:AD:3F:97:F6:35:76:41:BD:C1:00:4F:CE:40:99:D7:8F:DF:71:02
Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial: 018C5E2E5E002CBB6CA91083CFE6B3024118
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/Pq0_l_Y1dkG9wQBPzkCZ14_fcQI.roa
Signing time: Tue 12 Dec 2023 13:19:06 +0000
ROA not before: Tue 12 Dec 2023 13:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197152
IP address blocks: 195.54.42.0/23 maxlen: 23
185.120.90.0/23 maxlen: 23
185.120.88.0/23 maxlen: 23
185.120.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:2e:5e:00:2c:bb:6c:a9:10:83:cf:e6:b3:02:41:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Validity
Not Before: Dec 12 13:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ead3f97f6357641bdc1004fce4099d78fdf7102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:11:cc:ea:bc:b9:45:b3:24:e0:af:02:3e:
12:9c:5a:5e:e6:11:74:c1:57:70:79:54:3a:b7:a1:
6d:7d:43:89:d0:7b:84:13:eb:72:80:04:e7:35:74:
0c:1a:db:40:6e:7e:f6:af:ae:e4:76:46:92:3f:6b:
30:ab:10:60:74:d2:0a:b4:85:ad:5c:e2:ea:fd:b8:
9e:b6:9d:ae:b2:df:4a:a7:e0:f8:16:e3:a7:93:fb:
17:bf:82:14:b2:a7:22:7a:ed:82:b0:8f:b5:96:4d:
65:7d:8d:44:8f:03:7c:68:e5:f2:85:91:70:2b:45:
f2:e8:48:d5:aa:e1:26:c3:2e:75:9f:b6:ba:5c:42:
59:c6:68:12:57:a3:2e:9d:eb:8a:c4:fa:74:ff:37:
4e:f0:3d:23:4f:36:99:e5:6c:f2:eb:f4:30:bb:29:
3b:6b:5c:dc:ce:4b:c8:62:2c:ce:b0:c0:2e:de:85:
81:37:f5:83:a5:9c:12:ff:6e:d3:2a:a5:f3:34:c8:
be:91:b9:2a:74:a1:3f:a3:af:73:e5:c0:73:46:9d:
9d:c6:49:d9:f6:0b:d4:5e:33:50:e8:cb:55:7f:15:
00:54:06:a4:c2:84:52:4b:e1:d9:58:a3:77:30:42:
a9:ac:32:4b:d8:e2:83:bd:0d:d7:39:63:8b:75:80:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AD:3F:97:F6:35:76:41:BD:C1:00:4F:CE:40:99:D7:8F:DF:71:02
X509v3 Authority Key Identifier:
keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/Pq0_l_Y1dkG9wQBPzkCZ14_fcQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.88.0/22
195.54.42.0/23
Signature Algorithm: sha256WithRSAEncryption
76:d5:18:17:c3:a3:d0:06:48:d0:db:cf:68:b8:6c:86:d5:34:
04:b4:67:53:42:ba:f8:ec:b5:1e:d3:fd:d0:74:45:ff:de:49:
2f:04:74:2c:e4:1b:e7:82:8b:4c:7d:7a:db:6a:b7:11:93:9c:
df:cd:da:21:b8:c3:18:c0:98:c5:4a:48:a6:d6:ee:7f:a8:f9:
85:2e:cb:94:53:17:33:d5:c2:70:7e:4b:ca:b2:bb:c0:60:0b:
41:4a:c0:29:2a:33:4e:e6:d4:1b:1e:4a:ca:b3:65:96:0a:03:
a6:02:18:7a:1e:28:9a:77:6d:31:b9:df:b0:2f:5a:9f:cf:d9:
83:3a:f6:82:8e:49:dd:83:2c:38:bf:ac:42:db:6b:d3:42:d8:
c4:fb:d1:d1:a5:68:a5:02:39:00:c9:2e:11:36:c6:ea:4e:a3:
73:b8:1a:1b:b7:ea:cf:75:2c:a3:75:37:ed:cf:22:80:be:03:
72:9e:eb:83:3d:59:1a:2c:5b:6b:74:4e:1c:04:fc:d2:0a:38:
af:3f:6b:46:df:db:3a:ee:bb:c4:d5:5e:6b:a4:8a:a6:70:22:
f2:1c:56:cb:18:2c:7f:4a:7f:2f:1a:53:50:85:16:59:ab:0b:
6a:56:de:4c:e4:e0:88:3c:3b:b1:ea:2b:00:88:ef:b3:94:46:
f0:57:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:35:34 2025 by rpki-client