Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/qlmRswfyA3W2gxdp7gFH7zMu0bE.roa
File: qlmRswfyA3W2gxdp7gFH7zMu0bE.roa (raw, json)
Hash identifier: 7JAeeItIiKGJDIpag0MGDevDhEyk/En4njfO4MDiJ9g=
Subject key identifier: AA:59:91:B3:07:F2:03:75:B6:83:17:69:EE:01:47:EF:33:2E:D1:B1
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018752524060EC7AA159078D4E2386C31B7F
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/qlmRswfyA3W2gxdp7gFH7zMu0bE.roa
Signing time: Wed 05 Apr 2023 16:48:54 +0000
ROA not before: Wed 05 Apr 2023 16:48:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 176.46.138.0/23 maxlen: 24
176.46.137.0/24 maxlen: 24
94.74.190.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.140.0/22 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:52:40:60:ec:7a:a1:59:07:8d:4e:23:86:c3:1b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Apr 5 16:48:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa5991b307f20375b6831769ee0147ef332ed1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:db:77:31:3c:23:5f:76:1a:b2:81:82:ca:8a:
80:3c:c6:bc:b3:f9:fd:3d:88:65:19:ea:cd:40:8f:
90:64:49:9c:70:57:7c:26:5f:4b:b8:87:b0:09:d2:
21:5b:c5:1f:e1:84:e4:5b:26:1f:ad:a9:4e:8f:79:
d7:e6:f2:2f:82:82:8f:b2:a7:6f:f6:47:7f:de:98:
c7:36:c4:ca:99:3d:3b:7a:6e:ea:59:44:68:58:53:
16:a6:9a:b7:5d:47:99:16:00:0d:3a:bc:b0:60:fe:
08:53:81:09:1a:02:c0:cb:c5:cb:86:7a:2e:2e:59:
ed:76:5a:de:61:99:f6:fb:d4:ab:f0:8f:2a:e6:33:
64:b3:db:29:5d:6a:28:e8:00:00:2e:9a:bc:c2:2b:
8f:28:d9:1a:77:c5:54:4b:f6:05:66:4f:12:8f:ac:
4f:0b:7f:5e:82:ac:5e:49:04:84:a7:91:91:58:95:
be:e5:96:62:6c:60:26:b3:d4:c2:72:6e:f2:16:35:
84:17:e6:d8:47:b8:71:62:60:6e:8c:cf:87:06:ac:
b1:09:73:bf:32:c3:46:eb:1d:b7:73:cf:21:d6:58:
71:15:75:07:84:99:a7:5f:1b:75:9d:88:90:a4:4d:
8d:13:74:5b:8a:4c:4d:ae:a0:d1:13:ab:80:ea:c5:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:59:91:B3:07:F2:03:75:B6:83:17:69:EE:01:47:EF:33:2E:D1:B1
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/qlmRswfyA3W2gxdp7gFH7zMu0bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.137.0-176.46.159.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:f2:97:16:04:b6:fc:0c:a8:15:29:b0:03:cf:9b:15:3b:e7:
0b:70:36:f1:9b:ae:14:25:ef:d8:48:04:ba:0a:cf:49:bd:44:
7d:0d:cc:54:3e:a6:ed:e1:97:fb:80:f9:e4:53:a6:1b:19:95:
50:59:da:56:7b:81:f9:99:65:1f:4c:4a:a2:e0:ca:ab:6c:d8:
40:8e:11:94:2e:3e:f3:e2:e9:cb:0a:9b:ff:6c:ad:8a:55:36:
73:f1:c8:31:5f:e2:44:5b:5e:ec:57:b3:2d:8c:7e:b9:15:e9:
36:12:b2:74:b3:d5:67:4d:33:0e:20:bf:0e:e3:bb:45:b7:98:
ca:ac:97:d4:17:7b:90:5f:c6:8b:eb:f5:31:42:ba:42:e7:85:
c8:8c:9d:e1:e8:b3:e5:e4:b4:8b:b2:2f:47:de:26:20:64:d4:
1f:ef:be:44:a4:10:76:e9:fb:3f:35:b7:24:f9:61:b7:4d:8a:
ac:1e:5c:99:77:d4:3c:62:e3:08:4e:16:ad:da:7e:6e:9b:07:
0b:ee:68:55:01:01:ac:37:3d:23:d4:e9:fe:e4:3b:cb:a7:9a:
9b:8f:74:5f:ae:5c:77:8d:f5:93:02:96:c0:18:08:b9:13:68:
ae:09:81:07:73:70:f7:25:12:79:bf:79:f2:51:77:10:57:c2:
56:31:c8:e6
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYdSUkBg7HqhWQeNTiOGwxt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjMwNDA1MTY0ODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTU5OTFiMzA3ZjIwMzc1YjY4MzE3NjllZTAxNDdlZjMzMmVkMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidt3MTwjX3YasoGCyoqAPMa8s/n9
PYhlGerNQI+QZEmccFd8Jl9LuIewCdIhW8Uf4YTkWyYfralOj3nX5vIvgoKPsqdv
9kd/3pjHNsTKmT07em7qWURoWFMWppq3XUeZFgANOrywYP4IU4EJGgLAy8XLhnou
LlntdlreYZn2+9Sr8I8q5jNks9spXWoo6AAALpq8wiuPKNkad8VUS/YFZk8Sj6xP
C39egqxeSQSEp5GRWJW+5ZZibGAms9TCcm7yFjWEF+bYR7hxYmBujM+HBqyxCXO/
MsNG6x23c88h1lhxFXUHhJmnXxt1nYiQpE2NE3RbikxNrqDRE6uA6sWaqQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFKpZkbMH8gN1toMXae4BR+8zLtGxMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvcWxtUnN3ZnlBM1cyZ3hkcDdnRkg3ek11MGJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQEH6owAwQG
XkqAAwQFbcugMAwDBACwLokDBAWwLoADBAK5IqAwDQYJKoZIhvcNAQELBQADggEB
AG7ylxYEtvwMqBUpsAPPmxU75wtwNvGbrhQl79hIBLoKz0m9RH0NzFQ+pu3hl/uA
+eRTphsZlVBZ2lZ7gfmZZR9MSqLgyqts2ECOEZQuPvPi6csKm/9srYpVNnPxyDFf
4kRbXuxXsy2MfrkV6TYSsnSz1WdNMw4gvw7ju0W3mMqsl9QXe5Bfxovr9TFCukLn
hciMneHos+XktIuyL0feJiBk1B/vvkSkEHbp+z81tyT5YbdNiqweXJl31Dxi4whO
Fq3afm6bBwvuaFUBAaw3PSPU6f7kO8unmpuPdF+uXHeN9ZMClsAYCLkTaK4JgQdz
cPclEnm/efJRdxBXwlYxyOY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:54 2025 by rpki-client