Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/qEj9UMNw33AXQtPcZE8VvI5eRwQ.roa
File: qEj9UMNw33AXQtPcZE8VvI5eRwQ.roa (raw, json)
Hash identifier: Jid9aKQPrqIuobUQywJmL32wY0bR/Pwe4UVYnS/SA8E=
Subject key identifier: A8:48:FD:50:C3:70:DF:70:17:42:D3:DC:64:4F:15:BC:8E:5E:47:04
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 03A086E4
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/qEj9UMNw33AXQtPcZE8VvI5eRwQ.roa
Signing time: Sat 01 Jan 2022 10:54:33 +0000
ROA not before: Sat 01 Jan 2022 10:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30782
IP address blocks: 195.234.20.0/23 maxlen: 23
130.255.152.0/21 maxlen: 21
185.91.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60851940 (0x3a086e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Jan 1 10:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a848fd50c370df701742d3dc644f15bc8e5e4704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:75:1f:94:3a:53:08:37:b6:b5:82:94:9e:
4d:73:3a:74:fa:08:4a:d9:51:ec:e5:cd:0e:61:a2:
a8:48:3c:6d:94:b8:87:67:af:53:77:20:a4:2a:b2:
27:e3:8f:20:2a:3a:7b:dd:59:c4:6c:dc:6a:cf:30:
e7:d2:e7:76:6d:66:d7:5e:7c:44:e2:39:bf:c4:28:
69:94:5f:78:a9:87:f8:54:58:9b:94:80:12:c8:1e:
52:d0:d1:47:86:cc:95:1d:a3:79:6e:c6:82:49:12:
22:62:16:d4:38:81:3d:52:3e:da:fa:3d:95:49:b9:
26:17:f3:f6:54:f6:16:50:cd:7e:aa:75:9f:46:a8:
83:b1:d5:25:a9:54:e1:8a:b0:04:f2:0a:b4:c0:54:
df:4c:87:6e:41:8a:2e:3b:3b:29:ae:c1:fc:3a:1f:
2b:48:4d:cb:19:c1:24:84:90:e7:9a:03:2b:ed:55:
7f:55:7a:f4:f4:1b:b1:5c:03:b1:cf:33:5e:cc:25:
07:01:04:7c:b4:85:e5:e3:5b:25:7a:dc:b2:f3:01:
98:0f:8a:3b:98:84:f3:e2:c6:2e:30:39:e2:9f:2a:
01:0f:b0:de:95:a7:5a:0e:d2:ac:fb:e4:33:26:f7:
f0:9b:29:ed:e9:22:e6:d8:70:7e:c0:ab:3b:85:78:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:48:FD:50:C3:70:DF:70:17:42:D3:DC:64:4F:15:BC:8E:5E:47:04
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/qEj9UMNw33AXQtPcZE8VvI5eRwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.152.0/21
185.91.212.0/22
195.234.20.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:a5:75:51:19:37:97:71:95:54:0b:20:6e:20:95:0e:f7:9d:
db:97:77:ad:a9:12:00:17:76:3d:b9:25:a3:c5:a9:8f:18:d7:
79:85:61:3f:a1:c2:f5:a7:0d:13:9b:43:c3:04:8d:4f:9d:e3:
09:d7:49:55:ed:cc:ce:f7:60:e9:04:9b:b9:7a:1c:f1:17:02:
82:cd:17:a0:77:a8:e9:25:4e:41:bf:89:e3:18:9c:36:54:87:
4e:ae:71:cc:82:41:d6:94:f3:6b:97:c0:6c:ae:aa:cc:37:4a:
ce:ea:cb:ae:f0:48:c7:9a:21:55:35:5c:bb:6d:2d:87:7d:51:
b6:39:bf:8d:6a:55:4b:40:31:db:b7:d1:b7:b0:14:2d:70:75:
3f:ee:56:df:6b:93:05:56:94:40:c6:77:63:ab:fb:27:0d:59:
8c:c5:d1:45:36:94:56:c1:46:ed:27:68:58:b3:65:5d:75:ab:
0e:15:bf:69:a2:96:03:e6:0d:25:e5:15:4a:3c:b0:6c:d6:06:
69:5d:fd:e0:20:78:c7:4e:f4:f1:aa:8e:45:f7:6d:96:7d:5b:
7a:fe:9c:d2:11:e6:dc:8a:11:eb:e8:fe:2c:02:f1:8c:86:af:
7d:f5:e7:b0:2b:f8:3a:3d:74:82:4e:e8:8a:1a:ca:4e:fe:f2:
f9:14:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:42 2025 by rpki-client