Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_Qkq9s6WlVvKt56OAWLFJ3KOa0U.roa
File: _Qkq9s6WlVvKt56OAWLFJ3KOa0U.roa (raw, json)
Hash identifier: n7siN0Y8SwOLzCwVWa+bc8N77zadz4kEVJ1vF+3bRk8=
Subject key identifier: FD:09:2A:F6:CE:96:95:5B:CA:B7:9E:8E:01:62:C5:27:72:8E:6B:45
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018832B6166979DD478EBDD6D639AD5080EC
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_Qkq9s6WlVvKt56OAWLFJ3KOa0U.roa
Signing time: Fri 19 May 2023 06:32:54 +0000
ROA not before: Fri 19 May 2023 06:32:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.18.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:b6:16:69:79:dd:47:8e:bd:d6:d6:39:ad:50:80:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: May 19 06:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd092af6ce96955bcab79e8e0162c527728e6b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:d5:c5:12:8a:88:66:5a:12:1e:a5:9b:3b:
a5:e4:0c:29:ae:83:f6:7a:3f:78:09:fa:72:77:8d:
9c:3a:45:8d:72:e7:ae:ce:bc:87:ae:70:64:7f:39:
0f:b6:83:37:14:1b:4e:47:cd:67:13:87:01:c8:c0:
f6:93:09:97:0b:78:50:35:1e:63:f9:1e:84:d9:a0:
69:01:95:d8:e7:9c:5a:c9:97:37:97:28:4e:02:cc:
7e:39:90:ce:91:0c:a2:e2:1b:e8:35:aa:48:e8:b2:
66:da:9a:a9:5e:b1:37:7f:bf:b8:d2:42:ca:b0:c4:
bd:95:64:da:bc:56:b2:63:6f:5c:ee:b4:39:c9:2b:
7e:e0:ff:d1:c5:cd:d6:c2:e4:75:54:71:53:0f:67:
85:63:4d:2c:fb:5e:f2:eb:ac:68:45:d3:bb:29:ed:
c5:eb:be:7c:0c:d1:4c:b1:24:28:8b:b6:91:13:93:
7a:d0:d7:88:19:34:45:b8:a6:f6:36:90:3a:ca:34:
f6:f9:af:c6:20:d9:d1:68:ba:46:bc:26:5b:23:6f:
32:fa:33:8c:4e:5a:48:54:63:73:e7:c2:a3:e8:23:
c6:8e:d8:8e:84:cb:46:06:3f:c1:ab:a2:57:f4:3b:
86:ee:a7:a5:5e:c3:33:51:79:9c:d2:2f:61:cb:8c:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:09:2A:F6:CE:96:95:5B:CA:B7:9E:8E:01:62:C5:27:72:8E:6B:45
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_Qkq9s6WlVvKt56OAWLFJ3KOa0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.18.0/23
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
50:18:66:c2:99:80:8c:07:f0:64:1f:2e:39:d9:41:ea:6c:a2:
7f:a6:77:85:05:a8:8c:4d:38:55:ed:18:be:3d:d4:57:27:a5:
9a:d5:69:08:26:b0:c7:87:88:86:fd:33:65:5e:19:ff:d3:3b:
60:94:22:86:c4:91:ca:6e:21:26:39:a3:19:6a:49:7e:a6:73:
3c:50:71:5a:2f:a9:f4:f4:91:1f:22:b6:7b:d2:dc:57:3d:a8:
db:82:1f:6c:5d:f7:fc:0f:fd:b0:be:2c:db:7f:49:34:46:ba:
39:44:bc:10:73:42:4d:68:34:95:19:56:95:d1:55:93:24:36:
b8:eb:27:95:92:20:3e:1b:ea:db:84:d9:fd:3b:d4:74:c4:c5:
2c:fa:7d:25:91:40:fb:0b:af:21:15:32:8f:ba:10:f8:5b:92:
87:9c:57:21:55:50:86:e4:d1:3e:b3:85:39:3e:ed:a9:0c:1f:
69:11:f1:78:17:11:c3:19:f4:5e:0b:4c:49:1f:ba:ff:37:0e:
c2:33:2d:4b:9d:7c:0d:48:64:1a:2f:f9:74:ab:83:4e:f2:87:
61:4c:eb:59:03:f6:40:e6:3c:16:44:b7:af:0e:d2:07:6c:67:
5f:f6:a7:d7:5f:7d:99:9e:ef:73:22:9f:09:11:81:f2:72:53:
08:6b:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:29:10 2025 by rpki-client