Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/q_KJ9jjZMx4rAj1-hVIDJSbwd2o.roa
File: q_KJ9jjZMx4rAj1-hVIDJSbwd2o.roa (raw, json)
Hash identifier: KqTJDXuGkuoiBs8tW5dWH8jLYFOocA/acr+saYDNUQc=
Subject key identifier: AB:F2:89:F6:38:D9:33:1E:2B:02:3D:7E:85:52:03:25:26:F0:77:6A
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018BD8517F2440992B3A210F2FD89FE2AE40
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/q_KJ9jjZMx4rAj1-hVIDJSbwd2o.roa
Signing time: Thu 16 Nov 2023 13:28:21 +0000
ROA not before: Thu 16 Nov 2023 13:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21106
IP address blocks: 82.206.0.0/21 maxlen: 24
82.206.8.0/21 maxlen: 24
82.206.16.0/21 maxlen: 24
82.206.22.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:51:7f:24:40:99:2b:3a:21:0f:2f:d8:9f:e2:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Nov 16 13:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abf289f638d9331e2b023d7e8552032526f0776a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:dd:48:56:14:50:6e:1d:12:9e:b0:a1:77:
4a:04:15:eb:54:40:46:e3:a0:ab:47:d7:f3:db:41:
59:58:4f:54:22:9e:14:72:b4:a2:c1:10:50:9c:26:
14:2b:31:55:14:b5:ee:3e:2b:b5:25:77:c1:d1:40:
e8:ab:38:64:22:6f:cf:2f:53:27:02:b7:3d:4a:cf:
5d:52:fe:d4:a8:a6:9e:a4:41:0b:31:a2:65:d1:d7:
2d:19:02:5a:7f:88:0a:20:07:04:96:c8:78:0e:ac:
4c:54:0a:50:bb:16:71:45:8e:04:53:02:4c:04:bc:
f3:f2:4a:01:43:1a:bb:ac:ea:b1:f7:91:1c:73:ea:
98:53:5c:90:cf:2c:f6:37:4f:15:75:b2:c7:33:07:
13:a5:53:85:1c:63:cb:68:95:6c:37:2d:21:11:b2:
02:ec:72:5f:c6:81:97:df:6a:f8:9f:7f:22:7c:19:
2e:54:2b:f6:7c:0f:90:5a:a1:16:d1:5f:f0:b8:11:
f6:2f:86:3b:9e:79:35:c8:d6:20:ac:cc:d4:46:1d:
42:55:2a:1b:5f:ac:00:6d:dd:51:81:5f:1c:2e:86:
79:8e:cc:64:d9:9a:23:2e:fb:3e:d2:2d:d7:d9:75:
44:ec:72:39:e9:fe:24:2b:c4:55:5d:56:af:f1:a0:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:89:F6:38:D9:33:1E:2B:02:3D:7E:85:52:03:25:26:F0:77:6A
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/q_KJ9jjZMx4rAj1-hVIDJSbwd2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.0.0-82.206.23.255
Signature Algorithm: sha256WithRSAEncryption
05:b5:f7:1a:ec:5b:e1:7d:46:d7:81:0e:96:fc:90:2b:c8:a4:
f1:c7:dd:82:f1:d5:a8:a6:f4:75:e3:66:f7:89:7e:e7:25:93:
d7:a7:be:7e:97:a8:24:04:46:9a:7e:c1:32:57:3d:44:d8:44:
1f:75:b6:c7:a1:43:f3:75:83:e0:53:c7:f7:eb:6b:eb:70:84:
67:00:20:59:3b:cf:b8:d2:3d:6f:24:65:d0:57:12:a0:92:bd:
ce:a8:b4:c5:fa:15:79:f0:90:28:2a:b1:a4:24:61:c1:f1:da:
42:0d:c7:ee:fc:19:e0:02:f1:3e:16:ea:d0:5c:27:3a:5b:e9:
2c:af:b4:58:ed:5c:27:33:d9:a9:2d:dd:8d:93:18:61:65:84:
7e:2c:a8:b6:c1:a4:15:6e:87:7a:f2:3c:60:1a:78:1e:d3:cf:
a8:13:2d:ee:53:69:9d:a5:00:1c:f1:5a:7b:0d:ba:91:4a:2b:
b1:ed:3c:4f:9e:fa:69:c1:c6:de:80:66:46:db:9e:9b:26:b4:
f5:09:44:0a:01:ad:9b:ae:a7:a9:d5:08:ca:c5:74:34:8f:c9:
93:8c:4e:a1:d9:eb:4c:33:e0:7d:0c:0e:c9:ed:e3:fe:48:1b:
90:ae:33:de:dd:3f:f5:ec:29:bd:ed:9d:79:33:e2:4f:02:85:
a1:64:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:35 2025 by rpki-client