Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/Q-Banm0CTO9HMEUhSjnRdjtk130.roa
File: Q-Banm0CTO9HMEUhSjnRdjtk130.roa (raw, json)
Hash identifier: SBxuWsmxHdTIJYGv64S9wwngf4ui7oO1QIAgrLZRQ3o=
Subject key identifier: 43:E0:5A:9E:6D:02:4C:EF:47:30:45:21:4A:39:D1:76:3B:64:D7:7D
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 0187137FF9A59F0D22DAA31F96367A274FC8
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/Q-Banm0CTO9HMEUhSjnRdjtk130.roa
Signing time: Fri 24 Mar 2023 12:02:46 +0000
ROA not before: Fri 24 Mar 2023 12:02:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48137
IP address blocks: 62.145.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:7f:f9:a5:9f:0d:22:da:a3:1f:96:36:7a:27:4f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Mar 24 12:02:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43e05a9e6d024cef473045214a39d1763b64d77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:0c:1e:13:03:79:ae:37:17:dd:78:c3:92:
0f:e7:0e:b2:35:6a:bc:28:03:b6:f6:ef:b3:b7:16:
56:cd:af:33:23:3a:e3:1d:bc:6e:14:69:a9:66:70:
7c:6c:be:60:bc:71:89:e1:bc:ce:16:f5:f0:90:89:
90:aa:fb:17:a2:c1:0f:ac:34:a8:79:3a:6d:ac:9c:
16:a7:b3:28:4e:22:8b:97:1f:e6:b5:8d:ec:83:17:
a3:96:f5:eb:7f:70:f9:d0:66:ce:bd:26:99:2e:11:
15:fe:f0:53:b2:b4:a6:b4:ad:de:31:02:bf:06:fc:
9d:2c:b4:96:1a:ed:3e:c6:81:41:24:63:7b:35:c5:
45:d7:f2:bb:f9:0f:e9:7b:ad:fb:12:51:72:e3:4e:
e6:97:1b:d5:91:9e:63:c2:b0:db:8b:9a:12:49:8c:
4b:71:8e:ba:54:ab:79:30:60:4b:ac:36:7c:a3:92:
80:25:7f:54:4d:99:30:5e:17:30:fb:bf:4d:36:9e:
ca:00:5c:02:38:b5:b9:a0:24:12:24:3c:65:29:4b:
99:5d:70:5e:5a:c2:27:4e:70:3e:48:5b:93:e1:51:
5b:81:dc:38:46:2c:a2:8f:93:2e:86:2a:cf:20:6f:
46:25:46:31:d9:6a:17:f6:df:b4:29:44:c2:30:0d:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:5A:9E:6D:02:4C:EF:47:30:45:21:4A:39:D1:76:3B:64:D7:7D
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/Q-Banm0CTO9HMEUhSjnRdjtk130.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.145.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a7:68:3a:eb:e1:4e:b6:30:bd:5d:59:7d:d0:34:11:4c:f0:
a1:04:36:4c:3e:e4:bb:67:dd:f3:75:49:21:74:67:8f:f2:9e:
a4:f7:af:35:fe:2e:e5:70:6b:c3:68:50:29:13:99:86:12:86:
c2:c3:62:fc:a1:04:d6:e1:1a:78:33:87:2c:9e:f2:73:5f:72:
fb:d4:c8:a9:d7:18:96:e0:b7:79:63:72:69:71:c1:b9:0f:7b:
1b:26:ee:a5:80:b9:e9:10:39:d7:3d:65:25:3a:da:03:e2:45:
05:64:16:6b:74:2a:dd:f1:36:6c:bd:b3:4b:ac:f7:9e:ec:87:
c5:ee:83:db:4a:fb:26:5f:c4:01:d3:65:9c:1a:a9:01:e6:7d:
70:97:8f:bf:e9:87:fe:69:b2:24:3a:dd:77:3e:4c:9e:69:a7:
ef:6f:77:f5:d0:2d:32:f9:32:c3:6b:57:a3:96:33:5d:a0:75:
33:7c:67:cf:bc:81:ce:81:6e:6f:48:3b:a5:26:d4:28:92:8e:
70:c0:44:ac:5a:fa:c0:e3:4d:23:8a:df:b6:f7:7f:fc:71:03:
c7:e6:e0:47:a0:ff:ef:77:f0:f3:f5:f1:bf:50:a5:6c:6c:eb:
ae:db:b6:7c:31:58:98:92:d4:33:1e:26:ba:e0:cb:f6:6e:83:
b1:c3:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:45 2025 by rpki-client