Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/QYURlK0gq0t7_M_zVH2auO48QC4.roa
File: QYURlK0gq0t7_M_zVH2auO48QC4.roa (raw, json)
Hash identifier: uwdpI8CPkDqhZ8qLp/m0SILdxYn3eyEbPwwGlRp4Wt4=
Subject key identifier: 41:85:11:94:AD:20:AB:4B:7B:FC:CF:F3:54:7D:9A:B8:EE:3C:40:2E
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50D542D3
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/QYURlK0gq0t7_M_zVH2auO48QC4.roa
Signing time: Sat 01 Jan 2022 16:01:48 +0000
ROA not before: Sat 01 Jan 2022 16:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41503
IP address blocks: 194.209.23.0/24 maxlen: 24
212.243.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356153555 (0x50d542d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41851194ad20ab4b7bfccff3547d9ab8ee3c402e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:95:50:e2:73:8d:01:a1:14:20:b5:0d:20:
56:47:cd:84:f9:12:b7:ae:64:e6:b0:4a:70:d9:b9:
6f:34:51:a0:19:f5:06:27:98:ff:5e:e3:48:b3:e1:
93:ed:8a:f0:03:6a:57:f2:1a:48:34:3c:bd:c6:f0:
b3:ae:a7:6e:c5:f0:57:76:30:59:70:4e:00:c7:60:
5b:24:bf:57:53:29:ec:5c:d9:d2:05:08:fd:a3:0c:
a4:df:43:73:d0:ba:9b:ba:53:19:7c:82:c8:af:f2:
19:81:ba:6a:ca:d4:3d:35:fd:e4:ed:39:73:bd:6c:
1e:a4:54:5e:6a:43:2e:15:10:9f:51:0d:2c:41:61:
5c:54:55:2c:af:73:70:26:a9:92:3a:22:20:76:36:
81:34:66:cd:6b:ed:5e:e2:51:04:50:3c:80:ad:cd:
56:3d:b3:71:4f:1d:68:03:a5:6f:d2:09:1a:0f:96:
26:d9:79:65:29:66:ee:40:0e:f2:3e:ac:f7:bc:9a:
74:40:c8:44:49:8d:87:ac:5a:31:e4:f2:e4:64:76:
cd:31:4f:4b:81:ae:e4:ef:12:ea:76:7c:a4:a6:80:
c0:13:41:03:fc:a5:a5:cc:c6:4e:b9:ba:e8:ba:5f:
c2:26:96:bb:ed:c6:ab:56:be:ed:79:ec:51:13:7e:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:85:11:94:AD:20:AB:4B:7B:FC:CF:F3:54:7D:9A:B8:EE:3C:40:2E
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/QYURlK0gq0t7_M_zVH2auO48QC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.23.0/24
212.243.33.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ab:0b:2b:d7:42:a0:f5:ce:bb:33:82:56:6e:0b:a7:d6:bb:
54:5a:3c:e3:c4:17:e2:1e:d7:b3:11:18:55:12:be:56:c2:64:
98:39:1a:33:42:8c:0b:8f:8e:bb:d7:c1:f0:76:f0:82:48:93:
fa:5f:3f:99:c7:92:73:3d:4a:bd:c6:91:45:d3:26:ea:e9:9a:
a8:5d:b0:02:7d:9e:e7:4c:e0:ce:ce:85:ca:ac:12:3c:d5:3c:
b3:a0:fd:66:41:0c:e2:be:d7:02:0b:6c:e1:dc:2e:5c:47:f8:
2a:a5:68:c9:44:37:24:16:ed:ea:34:7b:ef:2d:6a:a7:37:ff:
21:91:d2:b6:57:48:ba:a9:90:44:d9:ee:52:74:0b:8d:73:a4:
1b:41:38:d1:70:26:fc:33:97:c9:bc:39:5f:ef:77:56:fc:32:
39:2d:a8:69:2c:b4:7e:08:17:1e:ca:66:23:ea:cb:a0:bb:19:
6c:6d:63:3f:29:6e:65:91:d5:19:d8:43:2f:21:70:90:d1:5a:
dd:a3:d4:7d:69:4f:66:bd:c2:b8:d7:77:79:02:35:6b:63:f0:
aa:37:10:b7:bd:f8:a7:97:aa:2c:4d:3b:93:64:66:c8:5d:23:
f9:fc:33:d7:ec:a5:52:77:76:74:a3:e2:53:12:39:8c:52:4d:
84:77:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:36:04 2025 by rpki-client