Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/QGlPQr758i3jF5S2-YIoQxYzyvM.roa
File: QGlPQr758i3jF5S2-YIoQxYzyvM.roa (raw, json)
Hash identifier: 6XIpftcX/CevV1dfEsK6OsdOY7cI1M2ThvG49TuD5/I=
Subject key identifier: 40:69:4F:42:BE:F9:F2:2D:E3:17:94:B6:F9:82:28:43:16:33:CA:F3
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 0184EB70F95A93E7BC9B9D5D8E0217FF561B
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/QGlPQr758i3jF5S2-YIoQxYzyvM.roa
Signing time: Wed 07 Dec 2022 07:16:00 +0000
ROA not before: Wed 07 Dec 2022 07:16:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47564
IP address blocks: 176.107.226.0/23 maxlen: 23
176.107.232.0/23 maxlen: 23
176.107.228.0/23 maxlen: 23
176.107.236.0/23 maxlen: 23
176.107.234.0/23 maxlen: 23
91.204.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:70:f9:5a:93:e7:bc:9b:9d:5d:8e:02:17:ff:56:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Dec 7 07:16:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40694f42bef9f22de31794b6f98228431633caf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:89:b1:14:6b:4c:10:0a:46:10:8d:43:45:
bc:6c:c5:2c:02:25:57:95:84:22:11:31:55:11:37:
52:e3:bb:72:75:1f:9a:d0:2e:0a:0a:4e:7c:36:38:
a8:b5:b2:b8:6f:01:58:81:71:6a:33:34:54:08:04:
ea:80:22:e4:41:f4:ba:c8:22:a6:91:15:f3:dd:04:
e9:70:36:d4:40:fd:8a:40:09:dc:f2:f4:f8:75:61:
ce:2a:87:64:da:17:e5:db:b6:b0:f4:2e:92:ee:f7:
60:90:22:bb:21:29:83:f2:17:34:db:5f:af:13:b7:
64:2a:4b:61:15:0b:a8:94:87:13:1c:43:ed:65:61:
59:d4:24:c5:92:f9:f2:3e:0f:ba:1d:49:95:7e:8f:
20:3a:14:11:8a:0c:d7:5d:06:f6:7d:d1:e3:d8:8b:
ff:6d:99:6f:e8:da:6b:2f:96:33:a5:c5:87:5c:4e:
e2:f2:0f:b7:d8:59:fc:20:8d:35:0f:3a:61:47:fe:
45:2d:77:8d:44:09:56:3e:14:bb:bc:43:62:f4:4c:
79:2b:b3:4b:e3:ef:ff:6f:62:8b:c0:84:36:89:72:
3d:00:c2:ae:54:4a:c6:0b:40:70:b3:a6:ab:ed:b8:
1d:64:10:07:d6:42:7a:5d:20:90:1f:21:2b:56:d0:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:4F:42:BE:F9:F2:2D:E3:17:94:B6:F9:82:28:43:16:33:CA:F3
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/QGlPQr758i3jF5S2-YIoQxYzyvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.200.0/22
176.107.226.0-176.107.229.255
176.107.232.0-176.107.237.255
Signature Algorithm: sha256WithRSAEncryption
92:ea:58:78:31:27:a3:21:76:0e:5b:d0:43:df:22:78:35:1f:
2f:f5:ea:2e:42:b3:12:22:fa:56:b9:da:61:26:42:1d:25:89:
9d:ae:54:46:52:79:0c:55:28:46:15:59:94:4f:19:04:60:bc:
e2:ec:c8:1b:ef:a6:83:56:8a:f0:59:eb:0a:fd:d2:ff:4d:1f:
a4:4f:6d:50:02:ef:de:fd:db:32:62:ac:ae:f3:42:9a:26:1b:
32:94:bd:ff:5c:80:26:7f:e2:89:f6:62:fe:90:0e:d2:54:5d:
dd:ba:4c:5b:74:1d:4b:1a:17:bf:56:44:24:01:15:27:05:df:
74:77:42:25:fe:73:33:07:d1:99:94:5d:51:08:63:70:c0:01:
91:d5:cd:05:fb:9e:a6:78:0e:eb:51:e2:20:ff:72:0d:73:4a:
83:53:cb:a7:b5:32:ef:90:39:3d:01:77:40:05:9a:33:51:f0:
33:11:52:cf:83:87:2a:6c:c5:96:f7:a0:ff:77:c2:f2:0b:57:
db:9a:c5:f8:1d:b7:11:b1:6a:76:85:74:21:e9:e9:5c:e0:2f:
18:9a:df:4a:d3:d8:91:27:c1:21:19:b5:07:5f:28:8f:e0:c1:
47:8c:22:b5:85:ec:47:ad:3a:1f:8e:a2:ed:f3:08:66:ca:3b:
83:ec:21:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:41 2025 by rpki-client