Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/qbyuxK3P4hzbnXX8vv8DjHfl29I.roa
File: qbyuxK3P4hzbnXX8vv8DjHfl29I.roa (raw, json)
Hash identifier: 6Yy2feLlq1hhA3igH7tblb/+m7cw9xpelf4kZn5Yeo8=
Subject key identifier: A9:BC:AE:C4:AD:CF:E2:1C:DB:9D:75:FC:BE:FF:03:8C:77:E5:DB:D2
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 01896DF73C94113C54640BC6EAAD6BF795F0
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/qbyuxK3P4hzbnXX8vv8DjHfl29I.roa
Signing time: Wed 19 Jul 2023 11:44:26 +0000
ROA not before: Wed 19 Jul 2023 11:44:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24837
IP address blocks: 176.108.178.0/23 maxlen: 24
176.108.176.0/23 maxlen: 24
176.108.180.0/23 maxlen: 24
176.108.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:f7:3c:94:11:3c:54:64:0b:c6:ea:ad:6b:f7:95:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Jul 19 11:44:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9bcaec4adcfe21cdb9d75fcbeff038c77e5dbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:3e:6b:12:14:02:e7:cd:c9:42:d9:07:b7:
aa:f1:ce:82:0b:2a:f6:77:10:9a:c7:a3:cf:4d:c4:
f6:b9:44:fc:e3:72:f0:47:25:5b:29:c9:58:93:bb:
41:39:6e:a6:21:a3:80:5b:ef:11:78:d3:d2:ae:49:
7d:d4:77:b4:81:d2:ba:12:ba:03:c3:b1:4f:39:26:
13:db:4d:d2:a1:af:48:21:67:57:81:dd:74:b1:a1:
7a:4f:dd:e4:7a:fe:36:19:4e:f9:d0:70:f2:ed:69:
2e:23:22:06:9a:e6:dd:88:d8:1d:b3:ae:ee:83:5d:
a7:05:0f:d6:eb:c5:5d:e9:46:35:ce:50:0c:13:1c:
a0:aa:a9:a5:2d:41:01:15:58:9e:9a:75:ca:75:3d:
00:99:74:ec:18:0a:8e:6c:af:50:b3:e3:5b:87:73:
5b:59:9b:6b:b8:82:4e:97:8f:bf:0c:95:d8:65:8d:
06:71:42:ae:ba:c0:a1:83:f9:29:62:b6:a4:23:bd:
24:c9:c6:9d:79:4b:29:27:62:90:8f:91:0d:b9:8b:
22:50:e6:b2:21:a4:78:c4:94:19:77:20:88:3e:a6:
d5:2e:f6:a2:40:81:76:83:98:7d:1c:1f:c6:0b:b1:
3f:04:0c:20:cc:4e:dd:21:0c:8f:5b:a8:b8:81:27:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:AE:C4:AD:CF:E2:1C:DB:9D:75:FC:BE:FF:03:8C:77:E5:DB:D2
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/qbyuxK3P4hzbnXX8vv8DjHfl29I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.176.0-176.108.181.255
176.108.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d1:a1:a8:ff:d3:2c:62:1f:e5:6c:63:ad:35:23:37:0f:fb:
d5:16:b3:8b:47:b2:0a:96:8d:fa:7d:b0:f6:06:f8:6b:22:f2:
c6:62:89:d5:fc:11:82:b8:ef:b3:e1:ac:fb:4a:eb:bd:38:f7:
ba:48:6c:46:b3:a9:66:59:ff:19:f6:b6:a8:62:ac:93:32:c0:
95:87:40:01:d6:cf:a9:fa:95:c0:76:b5:66:ae:e9:d3:cd:13:
89:3d:1d:59:3c:de:a0:39:c8:63:b6:28:7d:81:6b:5c:28:c1:
37:c1:f7:bd:61:d4:df:4f:d8:54:43:5a:95:06:d9:e7:4d:8b:
18:fc:f7:8e:08:67:14:34:c2:ed:b6:68:ac:be:59:81:8a:fe:
36:aa:50:59:10:3f:64:67:9e:fd:25:7f:ce:d0:c6:9d:57:44:
6e:57:61:fd:71:55:af:0b:89:5a:99:1c:93:e8:02:60:02:b2:
53:b4:db:21:f1:fa:8b:06:c1:5b:04:61:38:fa:6c:7c:a5:a4:
8b:1c:fc:b5:03:94:cb:d9:92:df:85:4c:db:9c:14:f9:99:27:
db:91:82:9f:59:d5:b8:05:ee:88:05:b5:aa:c3:3c:9e:05:5b:
ea:79:c4:b7:f1:49:ee:6b:73:ea:18:9e:7b:5c:d0:9a:7c:78:
90:1d:b3:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:54:47 2025 by rpki-client