Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/QsDB6FmkzDnLYoFnTXVGxK_xBfs.roa
File: QsDB6FmkzDnLYoFnTXVGxK_xBfs.roa (raw, json)
Hash identifier: /h7vRo4UgCqmsqdgYlEL32nBDy8zkHlAFa4WgXNQGJw=
Subject key identifier: 42:C0:C1:E8:59:A4:CC:39:CB:62:81:67:4D:75:46:C4:AF:F1:05:FB
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 01856E4AFD69309146EB63DBD4B86615C417
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/QsDB6FmkzDnLYoFnTXVGxK_xBfs.roa
Signing time: Sun 01 Jan 2023 17:04:46 +0000
ROA not before: Sun 01 Jan 2023 17:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41039
IP address blocks: 92.242.96.0/19 maxlen: 24
195.184.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:4a:fd:69:30:91:46:eb:63:db:d4:b8:66:15:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 17:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42c0c1e859a4cc39cb6281674d7546c4aff105fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:7f:77:48:89:a5:5d:37:c2:88:45:53:75:
b8:2e:53:35:38:0f:34:77:7a:c7:03:9d:29:cb:1e:
41:52:35:2e:30:e9:b8:f4:2b:18:e1:7f:fe:54:25:
eb:2e:92:0d:e6:88:56:f8:72:87:28:88:b8:5c:7d:
77:b0:dd:7b:8d:a5:6f:38:aa:42:bf:f3:7b:e8:c0:
5f:a5:91:6f:47:58:f3:bb:2f:fd:bf:c4:d9:76:20:
6b:2d:66:96:4b:82:b4:e1:5d:35:c6:6e:86:7c:80:
c2:40:64:55:ab:97:1f:f9:15:3e:89:9a:c5:29:c1:
f6:10:13:2e:8c:09:93:d5:b6:6a:55:97:2b:9f:b3:
83:f3:04:82:7a:dc:e4:4d:34:16:3d:2e:22:f7:52:
ad:4a:e7:34:8c:d4:e3:92:df:2f:7f:d5:4b:e9:b0:
d4:48:68:69:3a:af:fb:ce:33:3e:02:23:27:95:f9:
59:2d:31:42:73:1d:b1:9b:e4:05:15:9e:70:9a:1c:
20:59:21:59:b8:ba:7d:01:63:c2:82:53:d5:19:43:
bb:60:41:32:ab:e5:62:88:21:8b:a0:cf:1e:05:a2:
dc:f1:c5:e0:3a:c0:fd:1b:cd:f4:e6:fd:14:e6:3c:
3d:cf:3d:49:39:15:67:50:31:e6:9b:ce:b4:b4:fa:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:C1:E8:59:A4:CC:39:CB:62:81:67:4D:75:46:C4:AF:F1:05:FB
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/QsDB6FmkzDnLYoFnTXVGxK_xBfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.96.0/19
195.184.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:2f:6e:fc:ea:7d:df:5d:69:4f:dd:b9:3d:5d:a3:59:4e:4e:
07:5b:2d:a0:4e:d4:8a:83:82:1d:a1:ad:48:e8:ba:66:30:03:
7a:76:19:10:9e:c0:30:df:25:59:86:e9:9a:7e:4a:d9:8f:db:
c8:46:0b:a8:8f:6f:e9:8a:22:2d:44:81:61:2f:d2:b5:e2:90:
cd:df:82:5e:32:ea:6c:1f:3f:b5:d5:1d:24:e7:7b:31:05:c8:
2d:48:d9:97:c7:ab:c4:28:b0:83:77:2d:2e:1a:08:0e:01:54:
52:ee:c8:96:6a:5d:f3:47:97:4b:ec:8a:cf:69:62:34:89:02:
74:bf:0e:bc:0e:ad:81:ae:5f:ce:04:3d:f8:db:d2:4e:b9:d0:
dd:9f:e8:88:6c:c3:e7:6d:c5:3d:3a:9f:bb:84:00:4f:17:71:
23:09:79:64:cf:45:43:b9:6e:23:f2:94:94:c9:b2:ad:81:fb:
ed:26:e4:f8:25:0d:46:65:3d:25:8e:aa:1d:c7:11:b3:4f:04:
35:c3:64:d1:59:a6:cf:89:1d:2c:19:55:d0:f3:7e:1a:42:72:
ee:2c:e0:3b:6a:58:62:43:5f:b0:35:89:a7:0d:32:0a:22:31:
ee:b4:55:b5:c8:0c:15:84:9c:ef:04:e5:6a:30:d5:a9:b5:47:
b6:bb:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:38:56 2025 by rpki-client