Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qjjoQTXuXMM-Nz3X30-GGQJOQIA.roa
File: qjjoQTXuXMM-Nz3X30-GGQJOQIA.roa (raw, json)
Hash identifier: yRsbjL8MohT8IJpspWcssoJU5ewAImHA+sm26J3bFmE=
Subject key identifier: AA:38:E8:41:35:EE:5C:C3:3E:37:3D:D7:DF:4F:86:19:02:4E:40:80
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0186278E6F3FA30835D4C09CF54385C72FAB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qjjoQTXuXMM-Nz3X30-GGQJOQIA.roa
Signing time: Mon 06 Feb 2023 16:28:11 +0000
ROA not before: Mon 06 Feb 2023 16:28:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57975
IP address blocks: 146.158.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:8e:6f:3f:a3:08:35:d4:c0:9c:f5:43:85:c7:2f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 6 16:28:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa38e84135ee5cc33e373dd7df4f8619024e4080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c9:ff:ff:fc:99:f7:00:56:f4:89:b7:02:7e:
70:8b:22:74:5f:06:27:fd:54:b5:e3:a4:6d:2f:e8:
c4:d3:c9:b1:57:8e:0d:01:2e:5c:6e:25:3c:2c:fb:
ef:a5:33:9f:a4:65:f7:8c:63:24:30:6d:c7:fe:20:
36:ee:fd:fd:f0:82:39:c1:70:54:e3:6b:1b:3f:e6:
6f:f9:de:da:b5:10:84:fe:91:6d:80:ec:5d:92:24:
d0:72:4f:68:4d:53:0e:04:4d:d8:c3:2b:f1:33:d8:
1f:f7:b6:98:76:a2:32:f2:a1:82:e9:fb:4c:5c:c3:
09:d1:dc:4b:e0:4a:13:e8:43:83:fe:65:8a:a1:09:
5a:5b:aa:de:6d:98:d7:fb:8f:4b:fc:5a:3c:47:5b:
c6:eb:aa:87:e4:4c:c7:5e:a0:e4:60:c5:3b:3d:50:
eb:db:78:09:58:29:80:9d:5d:38:a5:f8:ce:5c:b0:
e8:b6:5e:ab:84:fd:f8:bf:a8:4c:f3:28:9e:a0:c3:
80:dd:78:8a:ed:f2:43:38:b8:55:e8:dc:38:11:0a:
ee:08:b8:b1:c8:d3:e7:b5:46:e9:69:1a:75:a5:1a:
ca:fb:9c:8c:7b:b1:05:e8:ce:78:4b:18:88:cc:57:
c1:41:52:34:5e:ce:61:db:c8:fd:a9:b9:53:28:d2:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:E8:41:35:EE:5C:C3:3E:37:3D:D7:DF:4F:86:19:02:4E:40:80
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qjjoQTXuXMM-Nz3X30-GGQJOQIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:dc:41:28:a3:1b:64:bd:8a:09:64:10:ad:91:74:4d:64:de:
8c:9f:ab:14:db:18:7d:84:4f:af:86:f0:76:8d:84:c3:c3:c5:
b5:61:c8:f1:9f:84:08:0f:a9:0e:ba:4a:b6:fc:18:ef:93:46:
51:e9:30:d6:2e:ca:50:8c:05:9d:e5:e9:84:a5:a5:8a:90:f2:
e1:0c:1a:fb:f7:88:6d:aa:5b:94:fc:2c:e9:48:9c:5b:83:2d:
f9:5f:ca:96:ab:79:2b:96:fd:3a:e5:c8:da:82:dc:85:2c:1e:
f4:9b:95:11:90:cd:82:cf:08:9f:0b:c1:4d:74:d2:38:23:d1:
d1:9b:35:31:76:11:34:6e:c0:5d:65:f1:5c:91:b8:37:0b:23:
14:ae:f2:71:f1:42:60:77:e4:e4:70:fb:5b:62:38:cc:4e:4e:
8b:7b:8d:0c:77:86:46:5d:fc:c2:86:ee:03:9e:04:b5:2c:23:
2a:49:83:04:ba:6c:9b:20:0d:e0:62:f1:52:b4:73:06:dd:88:
e3:b9:cd:49:e4:04:82:41:94:27:14:d6:24:64:3c:7c:ed:f6:
b7:fa:a2:b1:11:00:4d:55:a5:cd:c5:6e:16:8c:07:36:40:3d:
c2:f3:b9:bf:28:12:ca:31:9c:c3:7d:14:04:f3:65:eb:60:c1:
30:82:a8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:13 2025 by rpki-client