Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QMnuxpcCtAaY9nYTSINiyjxfNXo.roa
File: QMnuxpcCtAaY9nYTSINiyjxfNXo.roa (raw, json)
Hash identifier: UcIkM4S5dvseYDyad3JQqIMFYs9fsMvNSEI+lnH6Ke4=
Subject key identifier: 40:C9:EE:C6:97:02:B4:06:98:F6:76:13:48:83:62:CA:3C:5F:35:7A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01874BC0723A9CB27C531BAAD53ADF85C72E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QMnuxpcCtAaY9nYTSINiyjxfNXo.roa
Signing time: Tue 04 Apr 2023 10:11:56 +0000
ROA not before: Tue 04 Apr 2023 10:11:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42447
IP address blocks: 92.38.48.0/23 maxlen: 24
93.170.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:c0:72:3a:9c:b2:7c:53:1b:aa:d5:3a:df:85:c7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 4 10:11:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40c9eec69702b40698f67613488362ca3c5f357a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:2a:07:19:51:3d:df:df:ab:ca:13:d3:83:
20:66:2c:4b:2a:8e:77:24:ac:f1:af:d8:ad:b8:1b:
73:7c:b8:be:fc:be:80:e5:ba:ba:0e:3f:b3:42:79:
02:8c:59:44:98:21:42:c2:95:7a:10:c2:6c:dd:ff:
2d:47:d5:e7:71:6b:d5:32:7d:de:19:a4:bd:41:93:
04:4e:49:69:b3:27:86:bc:ff:bd:73:86:3f:98:96:
95:09:1d:e6:1b:21:fd:d4:e0:a5:df:30:28:0e:97:
2e:d4:c9:72:e2:35:c6:01:4f:5f:87:ac:ef:12:88:
e9:26:a8:5a:09:16:19:98:1c:83:df:71:42:9a:99:
12:de:51:32:67:1c:63:04:13:cb:dd:57:d7:14:74:
25:15:ef:cd:d1:dd:74:f7:02:d4:b3:e7:94:9e:7d:
7c:00:82:8c:1d:8c:91:af:b0:26:b9:ea:19:a8:49:
3d:5e:d1:93:35:08:8e:b6:d1:c9:e4:90:4a:55:86:
92:38:67:c2:2d:0c:35:71:bc:25:14:e2:38:1a:5c:
75:5f:89:ff:32:4b:64:7a:56:48:c3:7a:08:cf:9c:
83:e6:2b:62:6a:5c:bc:8f:7b:81:af:d6:8b:31:b6:
d2:83:76:f5:57:43:15:36:9f:40:1f:e1:b8:c0:1d:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C9:EE:C6:97:02:B4:06:98:F6:76:13:48:83:62:CA:3C:5F:35:7A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QMnuxpcCtAaY9nYTSINiyjxfNXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.48.0/23
93.170.72.0/23
Signature Algorithm: sha256WithRSAEncryption
96:6a:d8:bf:77:c3:e2:cd:41:58:e2:c3:fb:e1:3d:78:7d:8a:
11:f6:e1:48:3c:8c:4a:bb:91:65:fa:85:6a:8b:c8:d6:d4:03:
04:86:51:b2:5f:bd:cd:f9:4b:c1:57:55:26:25:46:81:a7:cf:
6c:5c:ae:10:94:f6:ef:d7:ac:a1:13:50:0b:28:42:fb:cc:d1:
6a:7a:66:0e:c8:5b:8d:32:d2:ad:c8:bb:87:e3:40:b8:a3:75:
6f:0a:be:0e:da:c1:76:0e:03:cd:1d:d1:3c:1d:0d:76:6f:d1:
6e:b6:4c:9e:f1:4a:14:15:82:f9:51:5c:a1:b7:06:a3:c3:36:
5e:a9:cb:d2:d4:86:72:45:db:19:1d:da:05:a1:9a:85:a6:f3:
5d:c9:f2:10:d2:4b:d5:8f:a8:17:ff:e9:73:4f:a4:11:79:ea:
65:85:26:b7:94:66:c6:ef:3d:c4:d1:0f:00:93:cb:80:57:91:
2e:74:54:b4:be:8a:f2:b1:bf:f0:e6:75:1b:6f:3c:32:65:56:
11:6b:8a:c8:56:88:c0:3f:55:ac:33:86:01:e1:55:f7:9f:47:
fa:6f:e7:e8:a0:cf:44:28:ae:6e:06:cc:fa:53:5c:4a:5c:58:
7b:e5:5f:b4:b5:04:17:ed:ac:25:7c:92:59:75:82:46:dd:e9:
d5:8b:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:17 2025 by rpki-client