Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/Q_QmnrzDF0HNqI0UU43AZDAUztM.roa
File: Q_QmnrzDF0HNqI0UU43AZDAUztM.roa (raw, json)
Hash identifier: OSulp66k3AueV1KspQ7EL7wXM0fmjmWhN70NmyYSnXY=
Subject key identifier: 43:F4:26:9E:BC:C3:17:41:CD:A8:8D:14:53:8D:C0:64:30:14:CE:D3
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 0184623DBA3B7608234373FCE1C29B985588
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/Q_QmnrzDF0HNqI0UU43AZDAUztM.roa
Signing time: Thu 10 Nov 2022 15:52:02 +0000
ROA not before: Thu 10 Nov 2022 15:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205845
IP address blocks: 185.204.120.0/22 maxlen: 24
45.154.168.0/22 maxlen: 24
2a0a:f740::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:3d:ba:3b:76:08:23:43:73:fc:e1:c2:9b:98:55:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Nov 10 15:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43f4269ebcc31741cda88d14538dc0643014ced3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:61:6a:bb:73:18:7d:f2:dc:74:88:83:d0:
fb:97:bf:35:a2:eb:ca:df:a2:b4:dc:2c:3c:34:6e:
db:0d:73:3a:5d:56:4a:45:85:a8:17:d2:3a:2d:5e:
ef:2b:60:16:b1:9a:a4:a5:b9:c5:bd:a1:2c:ff:f9:
3f:7b:a3:ca:66:d9:69:94:30:c3:2a:4a:0d:34:3d:
cc:2a:cb:a7:ae:02:3f:5c:44:c2:56:07:7c:6b:5d:
fe:28:37:f5:74:ec:09:69:62:26:27:69:e6:b1:80:
06:cd:a3:d6:db:23:cb:de:14:a8:89:c3:78:52:b2:
94:0e:25:0d:ce:43:be:84:87:e0:a3:ff:f9:90:4e:
28:bd:9e:01:bd:54:c0:a1:25:2a:16:4b:60:aa:d1:
84:36:fd:0b:aa:3b:6b:f1:d4:d9:c8:df:12:ed:97:
14:46:33:39:57:9f:6c:3b:ed:e2:7b:93:b1:df:7d:
4b:b5:e6:01:12:6e:4f:d5:26:16:dd:40:3c:fc:24:
99:ae:01:f8:b3:2b:7f:86:7b:0a:c5:ff:52:d1:44:
fe:c8:28:dc:72:17:14:47:d6:87:8b:dc:54:72:89:
a5:df:9b:56:83:41:fd:f2:3d:c4:a1:b9:27:07:bd:
d1:a4:15:7e:eb:8a:08:ed:00:f6:9c:f1:98:40:b2:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:26:9E:BC:C3:17:41:CD:A8:8D:14:53:8D:C0:64:30:14:CE:D3
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/Q_QmnrzDF0HNqI0UU43AZDAUztM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.168.0/22
185.204.120.0/22
IPv6:
2a0a:f740::/29
Signature Algorithm: sha256WithRSAEncryption
79:0c:48:94:b6:64:04:4a:6b:21:5c:bf:08:e7:d6:1b:01:8d:
64:39:72:de:fd:38:99:7f:3c:f0:02:74:7d:d7:e6:37:e5:9d:
c9:73:2e:78:9e:9d:b7:ad:b4:c8:09:70:92:4e:e1:85:da:2f:
06:fd:df:51:6b:b4:92:4a:7b:c6:45:c6:54:11:5b:60:fc:c7:
9d:29:d3:8d:d1:dc:f4:84:33:4b:09:e2:e0:c9:76:4c:11:3e:
8f:d3:1d:bd:77:8e:c3:c2:e5:b4:8b:50:91:4e:76:32:fe:2e:
4e:c3:96:55:0e:25:77:cd:9a:9a:4d:ed:7a:56:c9:a2:b8:f7:
21:6c:3b:8b:b7:8c:54:1a:fd:90:69:80:47:7d:96:f3:03:15:
02:1b:3d:e3:3d:6d:0b:6c:d3:45:c8:9d:1b:44:ea:00:f6:6e:
79:ab:b7:4f:6e:36:45:fb:64:f8:25:29:7e:f7:cd:f8:79:43:
31:3b:1a:37:ec:08:7e:00:1e:f3:d3:06:c0:f2:9e:f1:6e:bb:
e9:55:7b:4d:22:29:11:92:ab:03:51:f0:04:c9:18:26:fc:db:
0d:c3:da:3c:aa:16:2a:4f:6d:fa:cb:e6:00:62:9e:65:c1:24:
5a:ed:07:dd:8b:b2:13:51:d3:fc:2a:c5:da:94:e8:dc:7b:3a:
68:d1:e2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:20 2025 by rpki-client