Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/Q5e9m2wvDsbt5JEPQ22vKIJb0j8.roa
File: Q5e9m2wvDsbt5JEPQ22vKIJb0j8.roa (raw, json)
Hash identifier: V+d0yCNBN9AI3my/wy76SWXNekKNN0DWClUcwNNWE+o=
Subject key identifier: 43:97:BD:9B:6C:2F:0E:C6:ED:E4:91:0F:43:6D:AF:28:82:5B:D2:3F
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 018635FAB862DF30B60E103F7254E19AAB1D
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/Q5e9m2wvDsbt5JEPQ22vKIJb0j8.roa
Signing time: Thu 09 Feb 2023 11:41:08 +0000
ROA not before: Thu 09 Feb 2023 11:41:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61347
IP address blocks: 213.226.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:fa:b8:62:df:30:b6:0e:10:3f:72:54:e1:9a:ab:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Feb 9 11:41:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4397bd9b6c2f0ec6ede4910f436daf28825bd23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bb:05:76:a6:bf:9f:2b:6d:eb:74:d6:cf:be:
49:a2:37:44:23:56:62:36:4b:9f:5d:b3:ce:a1:2b:
63:70:52:2a:b3:4c:83:74:90:c1:d7:71:fd:1d:a8:
24:b6:11:85:33:fc:b6:3a:b9:82:48:16:9a:cf:a1:
2c:6a:c0:b1:19:ab:1d:b4:dd:cd:20:22:1d:30:b8:
3a:5f:0a:65:f6:ad:2e:f5:e3:5e:e4:45:e2:44:d5:
f8:73:fa:c1:e4:a1:90:cc:06:57:a1:4e:ab:a4:d8:
1d:2a:6e:c5:4e:63:d1:1d:7c:76:2e:41:0c:f6:af:
92:c1:56:29:5a:18:e4:d2:4c:a7:74:5c:56:6b:17:
1d:fb:35:56:14:78:98:f4:4d:9c:e8:44:23:77:c1:
01:5c:05:c8:e0:82:cd:ca:3b:8b:2b:eb:c4:d1:ea:
71:63:20:9d:d2:55:84:b0:27:61:17:9c:98:f0:ae:
2b:f8:d6:5c:c2:87:42:19:10:85:12:78:d1:5e:8f:
af:13:cd:3a:cb:1e:a9:95:82:f9:f3:56:58:ed:07:
93:07:fa:6e:1d:9d:9a:ac:f7:82:79:90:ac:f6:cf:
3a:40:bd:35:a3:50:b3:bf:ce:12:81:46:31:75:07:
2f:4c:ee:e4:4d:bb:16:5a:e1:4d:d8:c0:47:41:39:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:BD:9B:6C:2F:0E:C6:ED:E4:91:0F:43:6D:AF:28:82:5B:D2:3F
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/Q5e9m2wvDsbt5JEPQ22vKIJb0j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a8:c1:3c:40:78:d5:6a:1c:a4:d9:71:82:f2:0c:a0:f0:cf:
9b:0c:d4:67:96:f3:9a:af:7a:c2:d6:5d:86:ac:fd:c8:a6:6f:
f1:9d:a6:7f:6b:f3:02:9d:38:42:1f:0f:45:72:3a:2a:e8:d2:
c5:42:71:b3:7a:f8:57:f3:c8:e6:2f:b6:67:ae:d9:b7:ef:f6:
c9:cb:98:bd:5e:5f:1d:af:f9:49:b8:46:91:9f:71:bf:03:5b:
6b:af:c1:f5:4c:c0:bd:82:6f:06:c9:4d:a0:21:cd:39:01:65:
d3:52:93:41:da:36:77:51:28:7e:95:50:2c:be:ec:02:5a:e4:
6c:7b:07:1a:f4:f6:82:fa:8f:c4:a2:d6:b7:e4:91:4e:d1:8e:
cc:47:01:e1:fe:40:10:1b:0c:e3:21:2f:21:72:3c:8c:83:2d:
b4:63:be:f7:4a:a2:96:62:68:dc:76:33:6c:c4:b5:0b:12:1b:
94:09:d1:cb:35:37:40:9b:95:9f:e9:a7:80:d6:f3:00:30:11:
4f:17:a3:a1:51:b1:b0:2a:7c:19:ec:2e:f6:b5:41:86:1c:38:
b3:35:73:e9:ba:d4:df:6c:67:8b:ac:71:6a:88:e9:7a:9b:6a:
c8:f8:7f:3b:97:c5:65:e4:8c:22:08:ee:ef:fa:8e:75:ae:33:
62:97:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:56:11 2025 by rpki-client