Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/QCVjYK1biIfLeYZBvXUjKWuSeYE.roa
File: QCVjYK1biIfLeYZBvXUjKWuSeYE.roa (raw, json)
Hash identifier: oIaVb432YNX0Z9WGHHoFNFCyNfMwLtw/0b1zKfn++0U=
Subject key identifier: 40:25:63:60:AD:5B:88:87:CB:79:86:41:BD:75:23:29:6B:92:79:81
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 01856F9E0659B33E5D049CF6BD39CE55495D
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/QCVjYK1biIfLeYZBvXUjKWuSeYE.roa
Signing time: Sun 01 Jan 2023 23:15:05 +0000
ROA not before: Sun 01 Jan 2023 23:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205595
IP address blocks: 37.228.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:06:59:b3:3e:5d:04:9c:f6:bd:39:ce:55:49:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jan 1 23:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40256360ad5b8887cb798641bd7523296b927981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:bf:6b:a8:4a:8c:d4:68:0e:f9:87:e1:0f:
03:e4:55:57:49:19:12:d9:a9:1e:a1:2b:55:0b:30:
14:40:e1:8e:4c:78:d7:47:a8:39:2d:8a:a6:e4:66:
59:3a:4f:06:f6:24:38:ed:00:3d:0d:5e:6e:9f:a2:
99:d2:97:b9:ab:28:bb:2d:a4:da:28:07:b3:60:6c:
51:f3:dd:be:eb:ef:b0:c2:3d:50:4f:ac:cd:60:fe:
82:b3:4d:44:1d:76:b8:1d:ec:34:dd:a3:b8:b5:b2:
c0:db:de:2a:35:2f:76:2d:a4:c2:39:0a:a0:8f:c4:
05:a5:d8:06:e1:fc:ed:bb:c3:fb:c3:00:33:95:34:
51:03:f4:93:9f:f4:c6:5d:8c:23:13:78:cf:26:7e:
a5:f7:67:87:03:7d:7e:89:06:e0:3c:ef:70:85:c6:
aa:97:6b:d8:a6:fb:65:82:7b:f7:1c:74:58:10:8a:
0e:54:a2:c8:3e:76:20:a3:a7:f8:ec:ad:07:21:94:
3b:b2:78:6b:83:bd:65:94:21:9a:75:70:30:af:09:
a1:43:97:1a:0e:ce:ba:71:19:ef:fc:a7:b6:83:0a:
99:74:25:ff:dd:e8:f7:a1:1f:4e:61:b9:45:9d:74:
2b:4b:02:0f:5e:2c:9c:cd:23:c2:f9:92:dc:ab:14:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:25:63:60:AD:5B:88:87:CB:79:86:41:BD:75:23:29:6B:92:79:81
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/QCVjYK1biIfLeYZBvXUjKWuSeYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0a:f7:2e:e2:f0:5f:72:85:41:e3:ed:4f:25:a3:2b:34:dc:
74:cf:0e:60:9f:8e:1a:d6:f8:8e:90:f4:04:d1:cd:b0:7c:8a:
ac:97:28:68:08:99:ff:ff:87:04:da:ac:ea:df:d7:69:74:45:
77:97:45:f3:24:c7:f7:e5:bf:c7:0d:73:1b:8f:57:11:d2:c0:
5b:89:68:73:1c:2d:9a:fb:fd:bb:2a:f0:6a:2d:96:af:7c:d9:
7d:58:88:8c:66:57:8b:8c:60:7d:17:3a:98:a3:cc:75:7f:39:
af:6b:20:b6:58:66:6f:98:53:cf:2c:e8:6a:3e:b5:bb:2c:48:
ed:38:5b:5e:40:b1:dd:5e:73:cc:8b:05:bd:d1:91:87:15:93:
b7:9a:65:1b:d6:47:41:3a:bb:51:70:28:6e:1a:cd:7e:b2:82:
ee:0f:c0:b1:a3:bf:66:2d:e1:6f:0a:c0:30:c5:d1:91:f4:24:
aa:5b:4b:e9:ed:58:3b:fb:ff:fa:97:82:47:28:d3:fb:1d:4b:
d9:4f:47:d0:8f:2f:07:cf:da:f5:f1:e9:e7:fa:4f:23:69:aa:
1c:67:50:7a:c1:c0:c1:8b:ac:5a:de:2e:52:23:ea:8b:6d:45:
2f:21:5d:df:31:c8:75:11:bd:de:ee:6e:e0:7a:37:d7:65:75:
6d:2e:67:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:54:20 2025 by rpki-client