Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qxgeqb1bYLRyZUD0tzZULLGNTqU.roa
File: Qxgeqb1bYLRyZUD0tzZULLGNTqU.roa (raw, json)
Hash identifier: lv9//y69+IJRTA/EeuDvAfrJZSSzs1VgLb5gKXWAAHQ=
Subject key identifier: 43:18:1E:A9:BD:5B:60:B4:72:65:40:F4:B7:36:54:2C:B1:8D:4E:A5
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0185E8A7E295C11E68AF17EA48F89BC8524D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qxgeqb1bYLRyZUD0tzZULLGNTqU.roa
Signing time: Wed 25 Jan 2023 11:19:54 +0000
ROA not before: Wed 25 Jan 2023 11:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 212.221.0.0/17 maxlen: 24
46.33.64.0/19 maxlen: 24
77.77.128.0/18 maxlen: 24
213.251.0.0/18 maxlen: 24
212.115.128.0/18 maxlen: 24
185.160.40.0/22 maxlen: 22
213.200.64.0/18 maxlen: 18
195.143.0.0/16 maxlen: 16
141.136.96.0/20 maxlen: 20
213.254.192.0/18 maxlen: 24
89.149.128.0/18 maxlen: 24
77.67.0.0/17 maxlen: 24
87.119.64.0/18 maxlen: 24
134.222.0.0/16 maxlen: 16
212.222.0.0/16 maxlen: 24
2001:668::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:a7:e2:95:c1:1e:68:af:17:ea:48:f8:9b:c8:52:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 25 11:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43181ea9bd5b60b4726540f4b736542cb18d4ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a1:2c:3e:c1:56:00:83:fc:32:5c:cf:f2:08:
6f:25:9c:e5:fc:25:9e:a7:03:47:8b:77:20:ab:2e:
6b:5d:16:7e:64:8d:f3:be:02:4a:10:93:d2:bb:28:
cf:1d:fe:c6:8e:10:bb:81:09:1c:3a:52:64:5e:fc:
f2:c4:f5:6e:8b:00:01:c2:6e:91:3f:48:a9:86:4b:
54:e3:c0:d2:c1:61:54:5e:c6:eb:63:91:b9:ff:1d:
2e:8b:ae:70:25:53:da:19:65:20:3f:31:22:cd:b9:
34:ba:d7:7a:23:9c:16:22:64:7c:a9:2b:7e:2b:bd:
a6:e8:e4:dc:9e:fc:48:40:a9:1e:3d:fa:6b:44:d0:
04:fb:69:ae:6b:cc:ce:18:00:03:94:0c:4b:3a:9c:
e5:2a:71:98:e9:88:dd:c3:56:6a:12:68:56:5e:29:
04:f5:df:a5:e5:15:ec:a5:b3:e2:09:7d:d2:83:88:
0c:e4:8b:a9:59:61:6a:bc:ad:a4:c2:c9:72:ec:bb:
b8:6b:b6:65:bb:a1:9b:89:2f:3a:eb:5c:93:09:d4:
f8:7a:6e:03:e9:68:de:b2:ac:d0:10:86:b3:e4:ba:
ff:da:a6:f8:93:c4:9d:bb:39:da:c2:c3:2b:60:0c:
cc:2e:27:5c:90:3e:77:ea:b4:97:ac:21:ec:a5:94:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:1E:A9:BD:5B:60:B4:72:65:40:F4:B7:36:54:2C:B1:8D:4E:A5
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qxgeqb1bYLRyZUD0tzZULLGNTqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.64.0/19
77.67.0.0/17
77.77.128.0/18
87.119.64.0/18
89.149.128.0/18
134.222.0.0/16
141.136.96.0/20
185.160.40.0/22
195.143.0.0/16
212.115.128.0/18
212.221.0.0/17
212.222.0.0/16
213.200.64.0/18
213.251.0.0/18
213.254.192.0/18
IPv6:
2001:668::/29
Signature Algorithm: sha256WithRSAEncryption
c4:06:42:e3:a5:53:26:ff:3d:6f:ec:4d:c3:3f:26:db:a4:3a:
5e:6a:3c:2c:18:e4:80:c4:5b:58:a0:a2:fa:c9:68:88:ea:ef:
4e:01:39:dc:75:a9:70:5f:39:39:64:93:19:83:76:5f:e9:b9:
0b:45:50:a8:ba:05:15:6c:29:54:fb:db:12:9f:50:92:8e:f2:
ae:09:41:f9:54:24:51:f1:6e:28:c5:f1:a2:c8:f2:e7:04:c7:
93:73:74:7b:68:de:f5:b9:36:03:13:a0:1c:8a:48:19:d8:8a:
ce:81:29:96:79:3c:63:9e:12:92:ed:24:30:25:de:f0:3b:15:
ed:58:0b:2f:cf:e6:66:ab:df:e0:4b:2c:ad:cc:76:7d:57:48:
7a:d4:ae:0e:a9:da:0f:fe:7d:da:94:16:21:78:eb:86:df:93:
73:d6:c8:7b:29:93:a2:4a:62:01:f2:33:6d:01:23:c2:b8:2a:
a9:96:d5:19:da:9b:c2:c5:42:18:16:ac:37:8e:13:79:fc:55:
46:92:c1:e2:c3:da:4b:69:ae:40:fe:9a:b3:fe:f0:d7:d4:35:
36:af:3d:8c:f3:24:4b:8b:30:09:d5:04:84:3f:67:6f:2d:bb:
f9:79:36:b8:54:c0:cd:9a:13:13:c2:9f:2c:e0:c3:0d:4c:95:
f9:0d:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:41 2025 by rpki-client