Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/qeLftn9pHp3djTyXEo6gxIFvhF4.roa
File: qeLftn9pHp3djTyXEo6gxIFvhF4.roa (raw, json)
Hash identifier: bAW9kj6hgThmxKXCmgy1My9X0tixO5dHsJXe+0e347Q=
Subject key identifier: A9:E2:DF:B6:7F:69:1E:9D:DD:8D:3C:97:12:8E:A0:C4:81:6F:84:5E
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 040041BA
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/qeLftn9pHp3djTyXEo6gxIFvhF4.roa
Signing time: Sat 01 Jan 2022 01:52:29 +0000
ROA not before: Sat 01 Jan 2022 01:52:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48458
IP address blocks: 94.155.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67125690 (0x40041ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9e2dfb67f691e9ddd8d3c97128ea0c4816f845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:04:5c:b5:0e:a0:7f:46:34:43:59:9e:48:
bf:29:e7:89:a2:21:2c:46:71:20:d5:e7:e5:47:be:
00:8b:ee:fe:65:2d:f5:2d:c8:c9:a1:6c:65:44:7f:
7b:c2:96:1e:28:57:85:47:c8:2c:e1:32:ca:2d:93:
7b:ac:57:1c:31:99:d5:40:ed:bf:e0:79:d1:41:25:
a3:8a:08:2a:db:32:28:8a:db:a4:99:89:a8:d1:71:
ba:e9:9e:26:2c:2f:75:04:1c:be:c3:29:24:7c:94:
56:7a:62:d3:1d:60:4f:84:63:03:e5:32:7b:b6:77:
ab:c9:7c:ef:db:88:da:6e:65:41:05:74:2c:4c:8c:
f3:57:e9:91:42:ec:d2:ca:f2:70:f1:39:85:69:00:
82:fd:18:ec:17:7b:73:3b:ff:72:29:bb:b6:b7:53:
40:c0:02:3b:69:50:46:1a:61:99:ea:7f:9c:c1:cb:
9e:2e:9c:74:ad:5e:94:4a:e1:f4:76:b6:8a:dd:87:
76:2c:a8:80:dc:0e:23:f1:db:d0:51:e1:df:39:5c:
af:77:99:15:22:b6:71:c4:38:45:7e:66:67:de:2f:
50:14:d9:dd:e2:ae:1c:1f:34:82:97:a2:bb:99:d7:
07:e6:09:7f:0a:40:5c:9e:ca:fd:61:29:98:c4:b3:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E2:DF:B6:7F:69:1E:9D:DD:8D:3C:97:12:8E:A0:C4:81:6F:84:5E
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/qeLftn9pHp3djTyXEo6gxIFvhF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3f:81:84:51:1a:e3:5a:73:73:e7:fd:80:e6:bb:29:24:3e:
80:6e:fa:de:1a:be:f2:ae:dc:75:00:53:03:43:4c:6b:a1:32:
d3:74:a2:ce:f1:25:0a:cc:75:1a:d6:9c:99:96:49:2b:5a:fa:
f3:aa:ac:2b:5e:8a:7e:d3:8f:d4:89:8c:16:ca:17:fe:94:91:
82:37:b2:21:76:53:e2:83:c1:d2:03:8d:e9:04:5f:dd:07:17:
01:bf:d8:6c:37:34:ff:5a:2c:03:21:94:74:2a:11:73:7c:04:
c0:0d:2c:a4:ce:df:e8:35:e7:3e:5d:4c:58:2d:32:00:4d:e5:
96:a6:82:2b:d6:5a:85:f2:30:54:c7:5c:91:fa:f7:d0:55:55:
3e:2c:11:22:46:86:38:1e:3a:a1:2f:7c:29:29:e2:6c:8c:b7:
3e:86:f2:a3:e8:70:76:9b:6d:73:e1:7f:f0:70:c7:60:15:f8:
b1:67:9c:49:4f:e2:df:99:0c:34:00:ea:7a:9a:e3:8b:95:f7:
42:a5:e8:ea:e6:ae:50:96:99:79:09:7f:83:b0:66:a7:d2:67:
0f:ac:f7:a9:e8:2e:da:16:d9:8a:ff:a2:f5:b3:86:86:c3:06:
d1:47:37:61:04:96:7e:65:b7:a2:62:bb:73:72:de:8a:ec:e8:
72:61:e0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:36 2025 by rpki-client