Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/qW30Sup23yP95-7h681HqT9G-C8.roa
File: qW30Sup23yP95-7h681HqT9G-C8.roa (raw, json)
Hash identifier: AvMlCjv1URKYPejlo+QUoa3DSiaL5y/TDx77bp4wP6w=
Subject key identifier: A9:6D:F4:4A:EA:76:DF:23:FD:E7:EE:E1:EB:CD:47:A9:3F:46:F8:2F
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 01856CCAB60481018A1AB959045F29064C7F
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/qW30Sup23yP95-7h681HqT9G-C8.roa
Signing time: Sun 01 Jan 2023 10:05:02 +0000
ROA not before: Sun 01 Jan 2023 10:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47230
IP address blocks: 195.216.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:b6:04:81:01:8a:1a:b9:59:04:5f:29:06:4c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Jan 1 10:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a96df44aea76df23fde7eee1ebcd47a93f46f82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:99:fb:bd:26:e1:fc:4f:ea:3c:8f:22:48:
b7:fb:e9:26:f6:ed:ab:8d:f4:4f:60:9d:d0:08:92:
1b:d6:dc:13:f9:29:c5:bb:2b:36:49:93:3e:92:5b:
65:fb:5d:64:19:16:5d:1e:2e:31:fe:fa:15:67:31:
05:e1:a5:6c:23:23:c7:2a:b2:f1:2b:d7:67:d7:2f:
6b:83:14:85:0e:59:9e:8f:d4:83:90:62:49:0a:9e:
e2:3d:22:85:c3:18:13:2b:04:79:e7:b0:45:a9:01:
8d:20:19:ca:4d:0a:47:eb:86:c1:73:8e:08:95:f0:
7f:8d:77:4b:02:56:64:13:5d:b6:2f:06:76:2a:1e:
a3:5e:be:55:2b:3f:ad:65:61:3f:e1:89:d7:52:5a:
d4:2d:02:aa:29:ef:9c:7f:d2:1a:7c:20:19:b9:ce:
ee:d9:29:b4:4a:2f:12:e9:e5:83:d4:7b:54:30:a3:
f9:bc:bb:24:b1:fa:ef:19:51:3c:89:d4:05:34:32:
a4:e3:c8:4e:98:d6:77:4e:67:70:18:42:b7:3b:1c:
b1:3d:8b:a3:d5:93:77:fc:8a:a3:b6:c4:ae:4d:4d:
be:32:f7:82:a5:ea:68:9f:d6:68:73:3f:e6:67:2a:
45:bb:90:21:2d:1f:b5:8c:a0:7d:70:fa:eb:25:b6:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6D:F4:4A:EA:76:DF:23:FD:E7:EE:E1:EB:CD:47:A9:3F:46:F8:2F
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/qW30Sup23yP95-7h681HqT9G-C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.239.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:0a:c4:73:6e:bd:06:91:1b:f2:56:9a:df:f5:ea:4d:38:4c:
b9:96:ac:99:af:7e:99:c0:12:a6:f1:8c:88:d0:26:6a:9c:f6:
6a:cd:34:0f:ef:95:36:bd:3c:33:6b:26:b4:63:d5:04:4c:6e:
4b:6b:a1:45:c6:8a:b2:6b:00:43:98:3f:6a:a6:89:0c:62:b3:
d3:a1:a9:aa:44:30:d6:26:00:f7:19:db:83:ce:52:b6:b0:cf:
ac:05:08:ef:8e:63:e3:f3:50:ae:bc:6f:5b:9e:30:67:41:e4:
cf:73:07:e3:76:da:8b:4a:31:da:47:07:bb:c8:50:67:04:4f:
b7:1b:e4:8e:e1:01:81:40:27:01:2b:32:ac:65:19:28:ed:d3:
ba:9a:76:29:9f:9b:17:36:68:d6:cf:3e:c1:17:6e:f6:dd:92:
a8:b9:83:81:3b:97:e4:dd:00:ac:89:6a:8a:c3:9b:f9:76:4d:
9a:88:92:1b:2a:46:9e:c8:0d:b9:55:e0:d5:bf:1c:45:08:da:
7a:1a:1f:f9:25:b7:fd:7a:37:24:3e:52:43:f1:fb:c7:d8:62:
1f:3d:66:fb:02:c7:8e:e0:3c:cb:00:1a:0f:4f:9b:1c:b5:76:
84:73:61:bb:27:07:d6:22:5f:34:91:9f:97:1a:13:ac:4e:11:
21:5d:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:03:52 2025 by rpki-client