Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/Qk2Yr86IFsFI-0HJwj8abeqxebU.roa
File: Qk2Yr86IFsFI-0HJwj8abeqxebU.roa (raw, json)
Hash identifier: aNfEVCgtzDMNBfxBdPcC/0t02HR+Yl8CuMMLzXfaOZI=
Subject key identifier: 42:4D:98:AF:CE:88:16:C1:48:FB:41:C9:C2:3F:1A:6D:EA:B1:79:B5
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01856C1392BDCE4503F140DCED509C68E846
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/Qk2Yr86IFsFI-0HJwj8abeqxebU.roa
Signing time: Sun 01 Jan 2023 06:45:00 +0000
ROA not before: Sun 01 Jan 2023 06:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50694
IP address blocks: 95.170.96.0/22 maxlen: 22
95.170.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:92:bd:ce:45:03:f1:40:dc:ed:50:9c:68:e8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 06:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=424d98afce8816c148fb41c9c23f1a6deab179b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:3c:af:12:f0:2e:5c:99:ec:e7:1e:6b:19:
2a:f7:c0:4b:04:c5:36:3c:b6:a4:b4:41:45:62:dc:
2b:c5:aa:55:e9:59:2f:0c:2b:8f:50:1d:24:77:cf:
b1:4a:93:89:8f:f8:38:51:3c:0c:9d:85:d6:b2:3d:
ad:be:a3:e8:45:15:fd:3d:54:9c:1d:35:7e:a7:71:
85:45:5c:cf:1c:7a:d6:7e:9f:43:0b:4d:a5:1c:5e:
f8:53:d5:86:c2:08:bd:dd:89:76:ba:98:a0:5e:ee:
e8:6b:35:75:45:93:f7:1d:6e:05:78:95:59:57:4c:
47:aa:73:6d:be:ef:15:e4:c2:17:f0:de:5c:9f:16:
aa:75:7a:4f:9f:2c:1d:c1:ba:a9:18:2b:cb:04:6e:
83:37:08:e7:57:0e:14:2d:5d:f7:c5:2e:5b:9b:12:
8f:bd:4f:66:d2:d3:8d:24:6a:8b:22:9f:de:7d:45:
64:de:e4:b6:1a:76:47:7f:bd:0d:47:b1:b7:70:71:
0e:c9:37:f5:35:bf:82:a1:f1:42:bd:72:61:16:9d:
9b:16:a7:44:a6:fc:31:de:d9:b5:de:67:72:4f:55:
c1:e0:77:85:e7:8a:aa:95:e3:fc:12:0e:ed:31:6e:
de:77:38:1a:f9:5f:bd:3a:69:26:9d:bd:5e:6e:45:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4D:98:AF:CE:88:16:C1:48:FB:41:C9:C2:3F:1A:6D:EA:B1:79:B5
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/Qk2Yr86IFsFI-0HJwj8abeqxebU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.96.0/21
Signature Algorithm: sha256WithRSAEncryption
13:ed:a6:4d:70:2b:1f:91:2e:f9:93:be:44:99:c4:46:38:60:
31:13:6f:d3:7d:93:1e:8e:77:93:ea:38:9b:c7:7f:2a:e3:14:
7e:88:12:06:57:df:a9:c5:e9:b4:e1:15:bd:01:79:4e:3d:6d:
04:81:9e:87:52:6d:ae:2f:db:e8:5e:06:33:97:35:92:3c:95:
cf:54:07:4f:ba:25:0d:ad:1b:bd:77:30:fe:62:38:cc:50:e2:
f3:5d:59:fd:c7:85:72:3e:0d:85:33:67:26:87:31:81:ed:8f:
c1:41:22:0e:c1:36:d1:d0:5f:07:c0:1f:8e:c0:5f:09:9a:23:
41:f7:b6:09:2d:ae:9a:a2:2c:75:0d:d6:20:a9:08:c4:53:f5:
35:38:f5:7e:2e:91:6a:96:95:ee:3c:e2:37:80:3b:43:1d:0d:
15:bb:a6:2b:b1:73:ae:5c:ef:6b:ab:cf:33:ad:ed:86:92:b2:
4b:c5:7c:6d:eb:b0:10:f5:20:bc:61:e4:30:b9:c0:13:2a:14:
cb:e8:98:5e:43:8a:e0:f3:02:39:e2:08:8f:c3:b5:39:f3:bb:
23:a7:29:52:22:c3:b3:67:42:f6:97:b8:18:59:09:07:33:55:
cd:c4:24:50:3c:e4:df:54:4a:ff:7d:59:26:9b:7c:b2:79:f5:
92:02:39:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsE5K9zkUD8UDc7VCcaOhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx
MDZkOTcwHhcNMjMwMTAxMDY0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjRkOThhZmNlODgxNmMxNDhmYjQxYzljMjNmMWE2ZGVhYjE3OWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXw8rxLwLlyZ7Oceaxkq98BLBMU2
PLaktEFFYtwrxapV6VkvDCuPUB0kd8+xSpOJj/g4UTwMnYXWsj2tvqPoRRX9PVSc
HTV+p3GFRVzPHHrWfp9DC02lHF74U9WGwgi93Yl2upigXu7oazV1RZP3HW4FeJVZ
V0xHqnNtvu8V5MIX8N5cnxaqdXpPnywdwbqpGCvLBG6DNwjnVw4ULV33xS5bmxKP
vU9m0tONJGqLIp/efUVk3uS2GnZHf70NR7G3cHEOyTf1Nb+CofFCvXJhFp2bFqdE
pvwx3tm13mdyT1XB4HeF54qqleP8Eg7tMW7edzga+V+9Omkmnb1ebkUspwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEJNmK/OiBbBSPtBycI/Gm3qsXm1MB8GA1UdIwQY
MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt
ZTE4NjAyNzM5Y2Q1LzEvUWsyWXI4NklGc0ZJLTBISndqOGFiZXF4ZWJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1
LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDX6pgMA0G
CSqGSIb3DQEBCwUAA4IBAQAT7aZNcCsfkS75k75EmcRGOGAxE2/TfZMejneT6jib
x38q4xR+iBIGV9+pxem04RW9AXlOPW0EgZ6HUm2uL9voXgYzlzWSPJXPVAdPuiUN
rRu9dzD+YjjMUOLzXVn9x4VyPg2FM2cmhzGB7Y/BQSIOwTbR0F8HwB+OwF8JmiNB
97YJLa6aoix1DdYgqQjEU/U1OPV+LpFqlpXuPOI3gDtDHQ0Vu6YrsXOuXO9rq88z
re2GkrJLxXxt67AQ9SC8YeQwucATKhTL6JheQ4rg8wI54giPw7U587sjpylSIsOz
Z0L2l7gYWQkHM1XNxCRQPOTfVEr/fVkmm3yyefWSAjk9
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:36 2025 by rpki-client