Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QrOqcEVtqxZwOe-oGveLMYb_EXM.roa
File: QrOqcEVtqxZwOe-oGveLMYb_EXM.roa (raw, json)
Hash identifier: 1LBuYgd7uMkrZGPyGpyZK+e2cmpZArORkokoiRCZ96o=
Subject key identifier: 42:B3:AA:70:45:6D:AB:16:70:39:EF:A8:1A:F7:8B:31:86:FF:11:73
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01820B62F23D114ED939104BD1DA3680B74B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QrOqcEVtqxZwOe-oGveLMYb_EXM.roa
Signing time: Sun 17 Jul 2022 09:00:09 +0000
ROA not before: Sun 17 Jul 2022 09:00:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134963
IP address blocks: 45.93.18.0/24 maxlen: 24
45.93.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0b:62:f2:3d:11:4e:d9:39:10:4b:d1:da:36:80:b7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 17 09:00:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42b3aa70456dab167039efa81af78b3186ff1173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:26:80:2f:e0:bf:db:0e:e4:e2:98:23:35:
1b:92:35:aa:74:1e:29:31:9b:57:42:0b:7f:5d:1c:
da:fb:34:a0:b6:d2:4c:19:9f:8f:b4:fd:57:41:79:
17:07:fe:dd:3a:38:ca:3f:87:73:57:a2:8e:1c:27:
b3:45:63:6c:bc:47:56:f1:85:81:f3:0e:12:1f:fe:
47:10:83:c7:da:5c:44:9a:05:6f:19:63:89:f7:3a:
bd:e7:56:5b:a6:e3:7e:0b:78:be:69:5c:16:0d:a2:
b7:d7:e5:74:01:bf:21:1b:78:e6:b2:91:e3:0a:e3:
f0:f9:2b:26:bb:76:a2:09:db:fd:91:b7:2c:c5:c7:
82:44:71:39:14:0b:89:4a:32:2e:1d:c0:9b:55:fd:
8d:c6:8d:2b:6c:a5:21:70:1f:65:bf:52:aa:ac:96:
58:ca:7d:29:31:46:4f:03:d2:e9:73:a9:a6:1a:d5:
eb:da:3f:67:61:b8:fd:0f:56:b8:84:f1:4a:d0:32:
c0:96:1b:76:3e:70:3b:d9:a7:9a:e8:8a:b9:87:99:
6a:fc:f3:3f:db:f8:c4:a0:75:7a:89:70:94:bd:52:
6f:92:d6:04:d6:51:f7:7e:e8:cf:16:e7:e9:5a:7a:
c9:e6:b3:0e:1f:bc:2f:71:b0:c6:ab:78:21:00:1b:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B3:AA:70:45:6D:AB:16:70:39:EF:A8:1A:F7:8B:31:86:FF:11:73
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QrOqcEVtqxZwOe-oGveLMYb_EXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.18.0/23
Signature Algorithm: sha256WithRSAEncryption
76:d8:2b:fb:f3:21:f1:d6:da:02:e5:d8:48:8d:03:62:5c:ca:
89:14:16:17:9f:02:83:12:84:ff:95:80:e3:ef:40:3e:98:b0:
c4:2c:5f:97:5e:7f:b4:e2:47:6d:11:cc:79:ea:89:9f:76:78:
d6:c7:80:e4:7b:0d:bd:a6:88:99:29:c9:8a:22:cc:52:06:28:
a5:f4:90:6e:58:a3:0b:94:0d:a2:a6:4e:6f:3e:ac:e7:7a:ff:
9d:04:2a:5f:68:5e:ff:6d:43:c3:a5:1d:a1:f5:bc:7c:20:05:
71:c7:b4:9a:af:02:1c:d5:4d:40:06:c8:83:89:66:52:35:e9:
f9:3a:00:3d:e1:9a:d6:d6:73:96:67:c3:9f:02:40:93:45:68:
c7:fc:7e:52:40:45:79:6f:ef:2b:f0:ee:68:7c:ca:29:93:9a:
54:c4:70:ad:e0:21:7f:e5:05:1b:9a:b0:68:45:af:f5:4a:96:
6e:88:77:fc:ee:8f:d4:46:80:62:e7:84:67:83:f4:18:c4:fe:
59:48:3b:8a:bc:9e:03:cd:60:ba:2f:53:cf:4c:58:6a:55:26:
67:f6:f0:a8:e9:26:27:c0:44:5e:af:fa:e9:d1:6f:82:ed:ac:
07:7c:5f:61:f3:41:14:c3:46:c1:3a:b0:ce:8e:6f:3c:ba:43:
28:e9:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:18 2025 by rpki-client