Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QhCzzWtMGJ7iAFEA41uUAXXTRe8.roa
File: QhCzzWtMGJ7iAFEA41uUAXXTRe8.roa (raw, json)
Hash identifier: UH0kbfAgDOSrpZs2sfXml+t+xfDvNt6OlUrqIQjQgn8=
Subject key identifier: 42:10:B3:CD:6B:4C:18:9E:E2:00:51:00:E3:5B:94:01:75:D3:45:EF
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 08D9F6E8
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QhCzzWtMGJ7iAFEA41uUAXXTRe8.roa
Signing time: Sat 01 Jan 2022 07:01:24 +0000
ROA not before: Sat 01 Jan 2022 07:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.92.113.0/24 maxlen: 24
193.107.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148502248 (0x8d9f6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 1 07:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4210b3cd6b4c189ee2005100e35b940175d345ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:a8:15:b6:26:f7:fb:2d:04:d1:02:91:fd:
b0:ca:79:fd:01:a6:e8:d4:df:81:44:a3:f2:71:bb:
a2:f0:d4:32:08:ab:35:40:19:63:52:10:b8:f0:39:
8c:8e:ab:0a:b5:50:a7:2a:3d:3a:43:f5:ed:92:df:
07:7c:d8:3a:20:76:73:cb:c7:d9:b1:67:52:d8:99:
0f:c9:63:81:f8:21:b3:9e:e8:77:0c:27:bc:72:c9:
ca:d6:c4:bd:b0:bd:ad:97:48:1d:0b:72:01:36:4b:
83:6c:ac:06:08:df:0b:08:2f:7d:cd:10:0d:1b:c1:
fe:52:85:39:90:d1:bb:7c:38:22:b9:8d:10:d7:bf:
d3:60:26:a0:1e:ab:17:a0:bf:f4:b5:d9:fc:b7:85:
3f:eb:bb:6e:4a:04:d1:a0:63:2c:9b:af:8c:6b:f7:
53:5f:98:f6:5a:ab:34:8e:71:5d:ff:c4:23:bb:64:
f0:30:69:fa:c3:03:e4:54:4e:2a:82:86:11:d5:ba:
52:d5:eb:cb:82:0f:45:79:2b:e8:c9:f1:f5:4d:b0:
63:c4:3d:4b:ae:55:9f:ad:54:f1:6d:4e:14:a4:7a:
eb:da:41:ea:f5:e9:da:14:bf:2c:64:58:5c:47:e0:
11:14:ff:e6:3b:96:17:3a:b0:45:e5:35:18:62:1f:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:B3:CD:6B:4C:18:9E:E2:00:51:00:E3:5B:94:01:75:D3:45:EF
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QhCzzWtMGJ7iAFEA41uUAXXTRe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.113.0/24
193.107.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:76:19:61:54:53:f2:8a:16:1b:d2:27:9e:3d:4c:96:16:20:
40:22:fb:bf:4c:c5:de:22:69:b3:b1:57:24:92:c8:49:3e:21:
c9:6a:6e:c3:14:5a:d4:2b:a3:ac:1f:33:e3:b6:ca:6b:09:b5:
59:50:96:e7:5d:40:ec:95:c9:b0:3e:da:cd:86:66:b5:b4:b3:
45:17:58:c2:87:74:dd:67:5a:3e:9e:01:f6:90:76:9f:77:64:
9c:f8:64:1e:c9:ac:2c:82:93:83:85:f2:dd:af:ce:77:2c:93:
3e:02:85:2b:75:97:8c:aa:99:d8:d3:71:64:08:e3:d2:f2:6c:
54:2a:e5:4f:8f:f2:97:7d:7f:e1:59:34:30:3f:6d:d5:45:90:
05:77:29:ad:8c:db:4a:70:44:77:87:7d:80:1e:15:88:01:04:
c0:c1:67:c7:c9:55:05:9f:c0:ac:fd:22:cf:21:36:03:ee:1f:
ef:8a:d4:1b:c9:54:53:3b:73:19:a2:54:bc:6b:82:86:48:68:
67:7b:37:f5:47:8b:36:71:45:3f:1e:df:34:52:66:c7:2e:56:
b1:ff:24:ed:fe:20:09:60:50:65:9f:75:c9:f8:54:51:34:e2:
fa:c2:2c:07:a0:ea:41:62:4f:45:56:b5:6b:73:ab:bc:90:25:
bd:64:a9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:38 2025 by rpki-client