Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/qD1LxuUa72y3fI-hbPDjqbHyYlw.roa
File: qD1LxuUa72y3fI-hbPDjqbHyYlw.roa (raw, json)
Hash identifier: CRBIwMVvWLraVHg8EpH83WVYlsk/eyI4CuAS3Xf+iyA=
Subject key identifier: A8:3D:4B:C6:E5:1A:EF:6C:B7:7C:8F:A1:6C:F0:E3:A9:B1:F2:62:5C
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0185735625A55A789AB0D21F701190E8E594
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/qD1LxuUa72y3fI-hbPDjqbHyYlw.roa
Signing time: Mon 02 Jan 2023 16:35:03 +0000
ROA not before: Mon 02 Jan 2023 16:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51540
IP address blocks: 176.43.129.0/24 maxlen: 24
176.43.128.0/24 maxlen: 24
176.43.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:25:a5:5a:78:9a:b0:d2:1f:70:11:90:e8:e5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 2 16:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a83d4bc6e51aef6cb77c8fa16cf0e3a9b1f2625c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:1a:d4:6f:e1:6c:58:a3:73:7a:b7:29:ff:
ed:14:48:c6:4f:dc:9e:d1:bd:06:01:f2:4e:8e:2a:
19:b5:4b:92:cc:e7:21:1d:b8:6a:83:e5:f3:80:3e:
7e:ce:af:cb:74:83:8e:0c:23:d1:e0:7f:42:d2:93:
ab:e2:4c:fd:63:3c:c1:41:55:16:5f:71:75:5f:4f:
03:d2:df:4b:b1:72:b1:e1:f4:b7:18:dc:06:eb:29:
d4:e7:a7:23:41:ae:f5:a8:25:c5:24:f9:af:8a:52:
19:16:60:bf:90:c9:03:27:9e:8d:81:2e:e0:8e:9d:
0d:8e:94:70:fe:b7:cb:b3:12:a4:3a:fe:dc:35:76:
6b:c8:dc:af:34:40:59:3e:8c:29:e7:99:d1:1e:d5:
0f:40:8a:07:3e:23:43:cf:82:f6:24:51:50:58:52:
40:51:e0:e5:67:df:04:ec:d5:f4:1f:41:7e:d8:0f:
ab:da:80:fc:83:23:70:2a:fa:b3:80:79:39:be:12:
88:0e:53:5c:05:30:bd:14:7c:33:cc:2f:ee:4b:81:
81:b3:e8:cd:b2:87:56:2e:04:b0:ff:a5:54:fb:31:
ef:f0:8e:6b:44:98:ea:84:7e:01:74:2e:7a:24:8d:
9b:75:50:68:b4:56:8f:50:9c:65:0b:6b:d3:ab:31:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3D:4B:C6:E5:1A:EF:6C:B7:7C:8F:A1:6C:F0:E3:A9:B1:F2:62:5C
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/qD1LxuUa72y3fI-hbPDjqbHyYlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.43.128.0-176.43.130.255
Signature Algorithm: sha256WithRSAEncryption
21:c0:73:32:57:a9:21:76:f8:14:1a:42:67:b1:77:63:04:85:
52:dd:d1:34:c2:ca:55:45:93:66:64:89:57:cb:98:43:d8:8e:
df:9b:87:8f:65:55:5f:0e:e7:6f:dc:50:81:64:05:af:b5:80:
74:00:c5:e8:db:0a:39:f9:6f:e0:70:1a:8d:57:c5:15:80:d3:
0a:7f:f9:b1:19:38:e1:e1:ab:ec:87:dd:6f:5e:45:83:52:40:
f4:bf:50:54:3f:7d:72:dc:83:50:53:98:8f:62:de:56:52:26:
e0:3b:8e:cb:e3:f2:34:c5:77:26:64:88:4f:0a:63:77:ef:72:
09:cf:e4:71:42:49:d0:53:39:cc:60:24:b9:89:79:d2:a4:ec:
e8:f3:1f:6d:ba:5a:42:34:29:8a:bd:d0:23:b5:f6:41:73:1c:
ce:a2:32:a0:e7:21:be:c6:17:c5:19:a2:bd:9b:ea:76:d8:40:
66:60:11:62:f3:12:86:c1:55:37:82:0b:a8:c1:a9:82:3f:58:
92:42:2c:a8:c3:af:2d:d9:20:13:28:0a:b2:9c:30:19:86:4b:
c4:86:76:fa:cc:e0:c2:85:19:b2:14:db:02:ca:3b:34:f8:c1:
4a:bd:44:f4:ad:2f:c0:77:18:e7:33:6f:21:e2:6f:30:0c:68:
be:c6:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:38:38 2025 by rpki-client