Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/QyUoaWKIsPOI4E8A2DZqgapizuM.roa
File: QyUoaWKIsPOI4E8A2DZqgapizuM.roa (raw, json)
Hash identifier: 46UzuDxQXcnMK1zQMwnazMWG2r6H8b9r7mNTDLZIzks=
Subject key identifier: 43:25:28:69:62:88:B0:F3:88:E0:4F:00:D8:36:6A:81:AA:62:CE:E3
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 018317C109C62EB39CC576B5BAFD072BFC47
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/QyUoaWKIsPOI4E8A2DZqgapizuM.roa
Signing time: Wed 07 Sep 2022 11:41:10 +0000
ROA not before: Wed 07 Sep 2022 11:41:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202103
IP address blocks: 176.39.0.0/19 maxlen: 20
92.52.128.0/18 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:c1:09:c6:2e:b3:9c:c5:76:b5:ba:fd:07:2b:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Sep 7 11:41:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=432528696288b0f388e04f00d8366a81aa62cee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:21:e3:66:3e:aa:48:95:5a:1f:f3:4f:14:
8b:8f:02:8c:d6:a6:6d:ec:18:80:12:6e:72:57:b7:
00:19:7e:ce:19:10:e1:32:98:78:d1:4e:d4:73:a9:
6e:29:93:80:8f:ad:1a:6f:ce:72:fb:e4:ff:2a:a9:
06:b9:88:2a:cd:72:95:70:a5:e3:71:f4:4d:ae:a5:
93:be:c6:51:93:39:b9:19:95:aa:81:fa:4f:8c:17:
a0:ba:52:dc:43:be:96:8b:8a:d4:a3:c5:bf:66:e6:
98:24:57:b1:7f:6a:72:e7:65:56:c8:5b:37:33:59:
9f:df:4d:e2:8c:dd:49:90:28:88:93:85:82:50:5a:
11:87:8c:b5:37:e9:5d:c0:3a:80:8a:3d:41:82:12:
8b:bc:6e:cc:38:a9:3c:03:50:04:41:94:6d:f2:f7:
1c:85:dd:6d:a0:bc:1a:1d:62:6b:e4:6e:d8:33:a5:
b2:8e:96:87:89:3f:d5:35:be:e2:fe:19:f8:81:cc:
32:a5:81:b5:b3:72:ea:a9:83:6c:59:d9:fa:10:77:
0b:40:56:04:19:cb:a6:ff:6a:9c:37:ae:9e:e3:7a:
bb:35:e4:44:66:33:ab:19:3c:28:53:15:f5:4b:d2:
78:3d:2a:09:3e:88:24:34:5c:b2:55:8d:20:a8:a2:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:25:28:69:62:88:B0:F3:88:E0:4F:00:D8:36:6A:81:AA:62:CE:E3
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/QyUoaWKIsPOI4E8A2DZqgapizuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.128.0/18
176.39.0.0/19
Signature Algorithm: sha256WithRSAEncryption
46:59:64:e6:94:fd:20:0a:16:3f:40:ec:cd:92:a9:3c:f7:27:
e1:6a:42:60:bf:64:06:32:b9:3f:fb:8f:87:41:43:cf:76:d9:
02:6a:7d:28:42:bc:73:5d:b0:3e:e0:ef:07:f5:df:3c:cc:06:
f2:40:28:ec:82:87:64:21:87:cf:bc:89:56:3e:72:cd:d6:3d:
0d:fd:fb:bb:53:9e:33:5a:0f:e5:64:a3:bf:c4:e8:24:a3:15:
bf:8a:e1:1a:cf:e4:de:8d:e7:08:67:60:ea:33:b6:7a:93:fe:
fd:03:3d:7c:47:73:23:ec:94:6e:68:a7:a4:40:82:5e:b2:f6:
90:64:e7:e9:5b:c9:dc:b8:0e:a1:b5:95:28:4f:c8:84:a6:d7:
fc:1f:20:83:a1:e5:11:e6:3c:40:db:d4:45:61:98:66:2e:70:
2a:f0:0c:fa:ae:0e:28:ff:c7:29:4a:48:60:d6:ac:0d:20:f3:
26:1e:25:35:33:83:d2:07:04:bd:a1:6d:46:0e:56:31:df:47:
61:6c:ea:84:bd:01:8c:d5:96:04:18:0d:ad:89:4a:7a:49:d8:
fa:51:08:49:aa:09:5c:00:2d:46:6e:0f:7f:95:9a:c5:36:6a:
6a:96:09:8b:87:8a:cf:d1:e7:89:eb:3d:34:c7:7e:45:e3:23:
07:5f:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:36:15 2025 by rpki-client