Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/qcmF-TIHzMrjWdD5AGfJI307cRA.roa
File: qcmF-TIHzMrjWdD5AGfJI307cRA.roa (raw, json)
Hash identifier: PGBFoSFceMG/CFs9rI0pUtObBfOWlWp0qSO0Uxnjsqk=
Subject key identifier: A9:C9:85:F9:32:07:CC:CA:E3:59:D0:F9:00:67:C9:23:7D:3B:71:10
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 018702F81D348E0FA0757417C23DD854DF75
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/qcmF-TIHzMrjWdD5AGfJI307cRA.roa
Signing time: Tue 21 Mar 2023 07:00:27 +0000
ROA not before: Tue 21 Mar 2023 07:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 185.90.152.0/23 maxlen: 23
2a05:e100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:02:f8:1d:34:8e:0f:a0:75:74:17:c2:3d:d8:54:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Mar 21 07:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c985f93207cccae359d0f90067c9237d3b7110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:6a:ad:bd:ae:ac:d2:b5:86:df:e0:7c:42:
69:b2:4a:93:a7:f4:dd:80:10:19:f1:d1:2f:19:42:
b7:af:62:6f:d8:8c:75:10:35:10:1b:dc:76:a6:7c:
78:eb:90:d5:5f:f8:dd:43:4a:2e:3e:f8:78:c1:d5:
99:8e:b6:e9:c3:66:56:f1:2c:90:67:a8:05:af:ba:
36:2b:ae:9b:ba:6e:9e:3f:8d:c8:f5:b1:b7:44:1e:
c5:ec:83:d7:d7:10:43:8c:43:de:c4:c1:65:74:dc:
5a:02:b5:5f:51:f6:b7:3b:1d:db:60:5c:42:2c:d2:
2a:81:72:b4:c8:8e:d2:78:b8:17:fc:24:b3:7e:99:
32:00:1b:00:af:5a:87:25:59:bc:b0:06:e8:a3:93:
28:77:88:ea:75:96:fc:c3:e4:f5:ff:9b:41:7d:26:
87:d4:59:78:ee:ac:f0:a4:3b:6f:01:88:6a:9b:65:
bd:ed:4a:53:85:d9:cd:b7:41:46:6c:a1:06:d3:81:
17:f2:13:b1:37:ca:0a:e1:e1:08:af:5d:9f:67:25:
ce:44:55:10:a8:b8:a4:28:25:a7:66:d2:7e:da:be:
a4:3e:87:27:8c:07:fc:9c:4a:5a:2d:36:0f:11:87:
e6:99:f5:71:53:42:19:30:19:13:e9:ec:3c:3d:b3:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C9:85:F9:32:07:CC:CA:E3:59:D0:F9:00:67:C9:23:7D:3B:71:10
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/qcmF-TIHzMrjWdD5AGfJI307cRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.152.0/23
IPv6:
2a05:e100::/48
Signature Algorithm: sha256WithRSAEncryption
3e:64:28:4e:70:bb:42:b8:f4:9b:52:ea:e0:ec:c1:c3:70:ff:
68:95:7e:79:6c:6e:a1:3e:f7:c2:49:8e:a3:88:31:05:e0:c5:
70:db:2d:ce:48:da:16:9a:17:b8:e9:60:e8:cd:df:df:c0:57:
60:61:28:70:0f:5b:be:02:10:a5:d8:0a:9b:1f:72:25:40:c2:
4f:ed:e4:f2:32:e4:3b:1d:5f:d3:55:c7:87:d4:09:fa:10:b6:
25:8b:be:68:73:a0:84:e0:41:82:7a:45:14:96:fb:f4:6f:be:
96:df:7d:57:d8:53:60:36:e7:6d:d9:a4:44:a9:67:ec:4a:61:
72:6c:5c:e7:b5:80:d3:c0:50:21:d3:91:dc:86:71:84:d8:e8:
36:fc:eb:9d:bc:5e:d1:b7:7f:72:22:65:cf:b6:67:7d:0a:85:
5b:c5:92:9d:d4:1d:63:3c:8e:5a:5e:64:c5:69:6e:6b:12:00:
09:46:27:2c:db:7f:ec:6e:48:d7:34:bf:c2:68:31:4a:e0:54:
f3:ee:75:67:79:bb:8c:99:26:49:73:bf:47:84:3b:12:19:6f:
90:da:3f:3e:b6:74:40:8c:a5:f7:19:a9:51:e7:77:a0:a5:42:
2b:22:92:94:04:d7:ce:bc:25:b9:d7:f6:77:7f:9e:e2:86:83:
0e:1a:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:11 2025 by rpki-client