Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qd-8WZoQ8KuypE_IftG0unzXRy4.roa
File: qd-8WZoQ8KuypE_IftG0unzXRy4.roa (raw, json)
Hash identifier: d91Hacxy8Oc9dCdQ8kZyIzLvyqTHWxOy/JJEmJdZgj8=
Subject key identifier: A9:DF:BC:59:9A:10:F0:AB:B2:A4:4F:C8:7E:D1:B4:BA:7C:D7:47:2E
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 03441CD8
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qd-8WZoQ8KuypE_IftG0unzXRy4.roa
Signing time: Sat 01 Jan 2022 06:56:11 +0000
ROA not before: Sat 01 Jan 2022 06:56:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204094
IP address blocks: 185.113.141.0/24 maxlen: 24
185.113.143.0/24 maxlen: 24
185.113.140.0/24 maxlen: 24
185.113.142.0/24 maxlen: 24
185.231.233.0/24 maxlen: 24
2a03::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54795480 (0x3441cd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Jan 1 06:56:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9dfbc599a10f0abb2a44fc87ed1b4ba7cd7472e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:cb:c8:ed:91:2b:e7:94:d3:12:8c:9c:37:
3a:31:b5:a8:2e:d5:10:df:98:a2:7a:c2:d2:a3:06:
7b:b8:c5:0f:c5:14:9b:34:a3:c6:c4:00:5b:ae:15:
8f:de:a4:84:0f:1e:53:8c:03:e4:44:8b:b8:f7:50:
97:f6:8c:9c:11:f2:39:9a:d7:f1:e5:06:4b:e7:13:
74:d0:81:e6:d3:dc:8c:46:c7:bb:8b:00:52:dc:a9:
96:76:15:35:b3:37:e4:05:5a:8a:cf:82:17:48:c0:
bc:6b:b8:e3:6e:d8:c3:f1:0a:54:5e:5e:f4:c8:3e:
1f:c8:59:a0:29:17:b3:23:ae:7c:0f:d4:09:b9:28:
87:6a:c2:d7:eb:e0:e9:8a:41:8b:e1:2c:c3:6a:0f:
66:82:68:47:52:04:58:4a:e7:56:50:56:72:0e:ea:
5d:8c:46:a3:14:d5:d3:7d:91:ec:f2:a3:3c:68:64:
dd:32:5f:bb:75:74:99:a6:07:34:71:0f:27:da:20:
21:12:87:e1:1a:ab:93:0e:96:8a:4e:8b:fd:27:97:
ff:72:10:74:06:1b:34:8c:26:ec:c1:79:60:4d:c0:
1a:b9:86:da:c1:cc:8d:50:48:50:d9:e2:48:fa:a3:
fb:84:ff:8e:e9:f6:3e:c3:ea:b4:97:7f:2f:95:4e:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DF:BC:59:9A:10:F0:AB:B2:A4:4F:C8:7E:D1:B4:BA:7C:D7:47:2E
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qd-8WZoQ8KuypE_IftG0unzXRy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.140.0/22
185.231.233.0/24
IPv6:
2a03::/32
Signature Algorithm: sha256WithRSAEncryption
09:ba:ff:87:5b:61:57:01:cb:db:aa:77:73:93:93:4d:7a:fb:
ea:57:fe:e9:8c:5e:a3:f5:c4:0e:53:25:25:1e:72:75:bd:fc:
a7:ad:d6:b7:61:db:20:56:a6:29:09:99:68:78:6f:e2:f4:fa:
fa:fb:da:c0:c1:ee:cb:71:f4:da:4c:8b:1d:a4:30:fb:ca:a7:
2a:6e:de:25:98:fd:43:17:28:a9:3a:59:51:09:9c:bf:fb:1d:
d6:5b:3f:23:93:fb:84:f3:93:a8:f6:12:12:f1:b3:26:61:5f:
ba:55:9e:ab:09:ba:cd:29:97:b3:77:69:c7:dc:54:a2:23:72:
78:01:f2:dc:2a:2c:d6:16:88:bf:03:e8:40:d6:5b:78:91:67:
21:61:21:2a:a6:a0:db:27:23:c7:9e:c9:bd:ad:cb:92:d4:35:
e7:68:e1:5c:45:97:b4:33:5b:aa:1d:b2:5a:20:a3:c1:bc:89:
b5:07:ff:e1:bd:4e:b5:a4:6b:86:72:f4:39:5b:dd:f6:69:9a:
a5:7b:60:1a:c4:a1:6a:85:46:2f:8c:a7:65:e2:53:5e:ae:21:
cf:b6:01:64:26:04:6d:b6:8e:a6:0b:91:36:f9:b2:17:bf:97:
bd:cf:17:f9:61:da:b4:ad:a7:fa:fd:f3:dd:f2:3b:37:83:b4:
f2:8b:07:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:09 2025 by rpki-client