Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/QeGizjcdOT0aCUgFdAU_aRGjFUE.roa
File: QeGizjcdOT0aCUgFdAU_aRGjFUE.roa (raw, json)
Hash identifier: TkBdeRrDFe1Rv3M5/Z6YhNpPFg7/LYMl3KFiJ1H1YsI=
Subject key identifier: 41:E1:A2:CE:37:1D:39:3D:1A:09:48:05:74:05:3F:69:11:A3:15:41
Certificate issuer: /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Certificate serial: 018562590E29E97CF1D6C9ACEE70A3CD0042
Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/QeGizjcdOT0aCUgFdAU_aRGjFUE.roa
Signing time: Fri 30 Dec 2022 09:24:41 +0000
ROA not before: Fri 30 Dec 2022 09:24:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205237
IP address blocks: 193.104.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:59:0e:29:e9:7c:f1:d6:c9:ac:ee:70:a3:cd:00:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Validity
Not Before: Dec 30 09:24:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41e1a2ce371d393d1a09480574053f6911a31541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:83:9d:7c:66:0b:97:c9:36:6a:f6:d9:7b:24:
85:13:a8:42:f9:99:b7:a1:69:8c:8f:34:a6:13:8d:
10:11:d9:22:08:7c:7d:ee:fc:6a:cc:83:53:71:c7:
43:8e:bf:6e:fe:9b:95:33:3f:2f:f8:18:a8:a7:87:
b6:80:c4:c7:0e:10:94:d5:03:ac:c0:11:48:25:2a:
d1:13:f7:16:41:8b:6e:75:27:d6:85:e1:6a:f7:dc:
10:f8:04:9e:1e:c5:ca:fa:fb:63:7e:3b:f4:91:34:
e0:c4:90:fa:59:f6:ef:14:61:67:b6:ae:ed:18:00:
eb:f0:79:75:ad:26:e5:e6:63:43:70:aa:6e:79:16:
91:d2:df:67:4a:41:e0:a1:64:0f:ef:f3:be:fb:e1:
5b:53:37:8e:94:4a:00:7c:70:95:ca:40:0f:15:ff:
cb:14:0b:a6:77:fb:89:ab:be:d8:63:7a:06:a2:31:
0c:c7:37:eb:b3:45:4a:ff:91:80:f7:10:64:8d:0f:
c8:42:e4:0b:7a:54:cd:ae:d6:8c:65:29:f5:51:60:
43:93:2d:21:93:d7:33:8f:7b:3b:1a:c0:52:bb:34:
4a:97:73:3f:00:8f:11:2c:6b:f7:75:a8:92:68:f7:
e9:2a:2f:aa:06:72:73:35:e9:66:f9:e4:64:68:20:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:A2:CE:37:1D:39:3D:1A:09:48:05:74:05:3F:69:11:A3:15:41
X509v3 Authority Key Identifier:
keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/QeGizjcdOT0aCUgFdAU_aRGjFUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.25.0/24
Signature Algorithm: sha256WithRSAEncryption
18:78:5a:c0:ba:e3:0d:9a:e1:56:ec:90:5d:c5:b3:2d:ec:d6:
c8:81:08:85:1a:1d:34:b1:77:76:e1:fb:16:44:58:05:a3:60:
3d:d4:05:9a:5e:93:bd:5b:23:17:bd:d7:8c:23:1b:54:44:f2:
62:29:ba:96:ae:b5:30:ab:27:d3:7d:5b:16:85:d1:c3:e4:20:
48:4c:c0:4d:03:bb:cf:91:da:2b:05:d0:84:e4:74:f5:9a:b1:
dc:8c:cb:bd:d9:eb:db:1c:6b:f0:40:d0:d4:92:68:69:90:24:
65:dd:5c:82:45:7d:2f:23:e4:6f:67:30:f4:5f:b5:36:7c:a9:
bb:10:6b:77:d8:52:c8:26:30:2e:df:1b:9d:9f:87:bb:0d:5f:
b3:28:7b:07:96:50:c0:63:e3:9b:57:72:31:9a:07:92:b8:e7:
9a:e3:27:29:44:bf:6e:ef:97:6c:dc:c4:ac:19:f4:6a:a9:dd:
94:82:e5:16:52:7e:4a:37:35:db:7d:c1:dc:87:93:58:c6:5b:
e1:93:7a:c1:9c:41:b3:13:40:44:d2:74:0c:17:a4:d2:49:26:
1d:e5:42:32:77:35:f2:78:f2:c3:ee:ec:4c:80:d9:e4:3e:68:
3a:76:81:6a:5f:ca:0a:92:ea:3b:74:c9:ee:f8:e1:f9:24:01:
7c:46:b1:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYViWQ4p6Xzx1sms7nCjzQBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MWJmNzhiNzBhYzI3NmNiZjY1YmI5MDlmOTkzNDA4MmY0
ZDJkNzkwHhcNMjIxMjMwMDkyNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWUxYTJjZTM3MWQzOTNkMWEwOTQ4MDU3NDA1M2Y2OTExYTMxNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIOdfGYLl8k2avbZeySFE6hC+Zm3
oWmMjzSmE40QEdkiCHx97vxqzINTccdDjr9u/puVMz8v+Biop4e2gMTHDhCU1QOs
wBFIJSrRE/cWQYtudSfWheFq99wQ+ASeHsXK+vtjfjv0kTTgxJD6WfbvFGFntq7t
GADr8Hl1rSbl5mNDcKpueRaR0t9nSkHgoWQP7/O+++FbUzeOlEoAfHCVykAPFf/L
FAumd/uJq77YY3oGojEMxzfrs0VK/5GA9xBkjQ/IQuQLelTNrtaMZSn1UWBDky0h
k9czj3s7GsBSuzRKl3M/AI8RLGv3daiSaPfpKi+qBnJzNelm+eRkaCB4bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEHhos43HTk9GglIBXQFP2kRoxVBMB8GA1UdIwQY
MBaAFOQb94twrCdsv2W7kJ+ZNAgvTS15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wY2MwNDItY2YyYi00NjE2LTkyZTAt
YWYwNTU2YzQ3YTM3LzEvUWVHaXpqY2RPVDBhQ1VnRmRBVV9hUkdqRlVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wY2MwNDItY2YyYi00NjE2LTkyZTAtYWYwNTU2YzQ3YTM3
LzEvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgZMA0G
CSqGSIb3DQEBCwUAA4IBAQAYeFrAuuMNmuFW7JBdxbMt7NbIgQiFGh00sXd24fsW
RFgFo2A91AWaXpO9WyMXvdeMIxtURPJiKbqWrrUwqyfTfVsWhdHD5CBITMBNA7vP
kdorBdCE5HT1mrHcjMu92evbHGvwQNDUkmhpkCRl3VyCRX0vI+RvZzD0X7U2fKm7
EGt32FLIJjAu3xudn4e7DV+zKHsHllDAY+ObV3IxmgeSuOea4ycpRL9u75ds3MSs
GfRqqd2UguUWUn5KNzXbfcHch5NYxlvhk3rBnEGzE0BE0nQMF6TSSSYd5UIydzXy
ePLD7uxMgNnkPmg6doFqX8oKkuo7dMnu+OH5JAF8RrFq
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:42 2025 by rpki-client