Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/gqLHq8Suhfdqp30ukw5M49rksCU.roa
File: gqLHq8Suhfdqp30ukw5M49rksCU.roa (raw, json)
Hash identifier: fSorIKVL6Dj+Pt1bj6roCeHAIq8kus0blwFoUuOaGHk=
Subject key identifier: 82:A2:C7:AB:C4:AE:85:F7:6A:A7:7D:2E:93:0E:4C:E3:DA:E4:B0:25
Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial: 018340CB6C2DFFB1C44022057AE1AD34235A
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/gqLHq8Suhfdqp30ukw5M49rksCU.roa
Signing time: Thu 15 Sep 2022 10:56:56 +0000
ROA not before: Thu 15 Sep 2022 10:56:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1257
IP address blocks: 185.118.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:cb:6c:2d:ff:b1:c4:40:22:05:7a:e1:ad:34:23:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Validity
Not Before: Sep 15 10:56:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82a2c7abc4ae85f76aa77d2e930e4ce3dae4b025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:84:95:93:f6:39:c2:4b:3a:d4:a3:f7:66:
08:62:1f:0d:77:7f:6d:d3:4d:22:86:bc:86:a4:e5:
8a:54:c2:9f:aa:31:0e:d5:b5:a3:a1:60:c8:f3:10:
4d:32:0c:c9:7b:29:69:88:d3:00:2c:bf:1b:9f:72:
7d:0d:38:16:28:f8:45:58:da:be:cc:cb:87:7e:b7:
c2:f5:44:f0:01:a6:89:88:d8:c5:6a:8a:a0:d1:4e:
79:3b:64:90:ce:f3:91:21:bc:9d:81:aa:fe:d7:5d:
cc:cc:47:62:1f:14:f1:68:26:21:f0:77:e2:b7:50:
a1:cb:e6:c7:c8:0f:49:44:85:15:30:12:0b:db:06:
03:f9:a9:4d:7e:ea:5a:f0:31:86:9a:f7:31:d2:d8:
08:7d:fa:fe:0b:31:a9:db:d1:f8:ff:28:e1:43:37:
d5:95:dc:e9:41:66:b7:ee:3d:d2:73:9b:7d:a7:f0:
9f:87:17:0c:47:97:9f:fe:7d:8c:cd:ca:e9:64:b6:
b1:1f:92:a3:19:0b:06:bc:bb:7b:74:00:5f:eb:0d:
90:45:dd:fb:5e:08:0a:a5:62:80:46:d2:77:0f:a6:
24:9e:51:f2:d4:cd:ff:52:06:02:f3:95:1a:6d:0e:
22:0f:c7:c5:c9:62:2d:95:b4:3b:4a:aa:c3:34:2e:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:C7:AB:C4:AE:85:F7:6A:A7:7D:2E:93:0E:4C:E3:DA:E4:B0:25
X509v3 Authority Key Identifier:
keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/gqLHq8Suhfdqp30ukw5M49rksCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.160.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:e6:ef:b3:2a:b5:4a:e1:4a:eb:01:d9:7c:69:fd:0f:a7:3c:
90:9a:b3:9f:52:f9:71:3e:ae:34:1e:4c:0c:4a:73:98:b8:f6:
04:ca:1c:c2:ea:31:94:8d:2f:14:d2:5d:a6:bb:42:66:c0:a1:
63:2a:02:2f:90:30:8c:33:23:56:6d:6f:33:c8:34:e6:42:c5:
df:e7:12:66:67:5d:c7:29:af:2c:b4:6c:31:17:e6:84:49:73:
74:fa:95:a6:8b:fc:4f:7b:db:5d:20:55:d5:2e:d2:7f:07:74:
f7:a8:17:68:26:ef:a0:4a:ea:5f:4a:f8:22:c7:44:95:24:62:
37:ce:e5:2c:0e:a4:28:1e:57:f0:16:90:1f:9f:8d:95:6c:fa:
c4:29:a0:ca:db:8b:bb:53:75:2b:c2:ee:f1:a4:6d:45:e1:13:
e7:80:a1:57:dd:64:22:61:4f:f7:dd:4d:c2:15:44:d2:80:60:
75:6d:8c:ef:9e:6e:8a:a4:af:44:0b:c8:04:eb:33:2a:4c:0e:
77:b8:56:97:0b:90:39:a9:b8:ab:b7:f7:7e:52:d9:b5:4a:2c:
27:8d:2a:14:a6:51:b0:e3:bf:38:61:63:66:ec:43:77:5c:f7:
ad:0b:c2:0b:9b:8b:45:11:44:9e:65:bf:fc:7b:1c:53:9d:08:
19:fe:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:37 2025 by rpki-client