Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/qim7Q9kcZycygXTxAKTvodV-Ov8.roa
File: qim7Q9kcZycygXTxAKTvodV-Ov8.roa (raw, json)
Hash identifier: H0Ul0uN9Qym12+4338benAJEPtSXU+exrDXp4mMBc10=
Subject key identifier: AA:29:BB:43:D9:1C:67:27:32:81:74:F1:00:A4:EF:A1:D5:7E:3A:FF
Certificate issuer: /CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Certificate serial: 606E
Authority key identifier: B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/qim7Q9kcZycygXTxAKTvodV-Ov8.roa
Signing time: Wed 12 Jan 2022 12:27:21 +0000
ROA not before: Wed 12 Jan 2022 12:27:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42189
IP address blocks: 45.15.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24686 (0x606e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Validity
Not Before: Jan 12 12:27:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa29bb43d91c6727328174f100a4efa1d57e3aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:7b:2e:da:25:83:ec:db:b2:5e:4e:81:43:
2e:1e:40:32:8d:89:c7:df:7b:8b:ed:5e:4d:44:4f:
3f:fc:5d:27:16:7a:dc:e3:ca:50:e7:fb:85:54:b5:
f7:4c:58:55:3c:7a:85:14:50:7e:54:db:a9:1a:fb:
45:f3:a5:ae:16:28:71:07:4f:d4:86:04:ba:20:e5:
a2:9e:9a:c1:00:35:b9:e8:3d:b8:bd:6f:d4:ed:c6:
84:5e:e0:d4:23:2f:ca:a0:1d:7e:19:00:72:b6:ba:
c5:eb:6c:7a:d5:45:63:0e:4c:56:c3:a1:65:8e:3f:
1f:5b:fe:32:0d:eb:a6:50:f1:34:84:26:8c:ea:21:
48:db:4f:27:ea:a0:3e:7f:1c:f3:fd:b8:6d:e1:27:
d9:7b:fc:30:a8:93:0c:ed:47:f4:64:bf:bf:26:1f:
51:96:99:f9:a2:dc:c6:6a:6c:09:68:7e:72:90:19:
df:ef:fc:24:65:5d:0b:75:f2:51:f1:96:92:15:a5:
77:a8:af:fd:b5:29:4e:3e:46:79:f4:bf:67:0f:63:
85:ef:5d:13:a8:61:79:4d:4f:20:95:b8:45:1c:df:
7b:bf:7f:7d:2c:b9:ef:c0:8c:a2:ca:c4:37:d9:e7:
e1:7c:95:c6:98:a6:1f:d4:96:d0:54:cd:9d:e2:e1:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:BB:43:D9:1C:67:27:32:81:74:F1:00:A4:EF:A1:D5:7E:3A:FF
X509v3 Authority Key Identifier:
keyid:B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/qim7Q9kcZycygXTxAKTvodV-Ov8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.56.0/22
Signature Algorithm: sha256WithRSAEncryption
05:37:7f:d6:c6:70:42:bf:0a:d1:b4:c6:05:ab:29:fd:81:59:
b6:12:2c:7c:7d:fd:7c:f2:67:ac:c5:b6:a5:72:26:56:c7:5b:
7b:c0:2c:6c:d2:c9:61:48:5a:97:c4:5c:fc:3c:ff:2d:43:5a:
be:9d:3f:4a:90:8f:c3:0a:6a:bc:00:f0:64:f0:44:84:98:0c:
8e:2f:ff:be:29:58:5a:71:1c:32:47:c7:d7:85:ef:35:02:0f:
38:5d:0a:1e:e5:64:ec:db:6a:16:eb:07:0a:8a:99:e0:0f:a8:
7d:b0:bf:a5:2d:12:7a:b7:1c:d3:e3:d2:9a:ca:2e:6c:fb:cf:
28:18:de:e3:58:24:3e:7e:37:e2:3e:43:e6:61:76:d4:44:bf:
50:f4:57:a3:68:f2:34:0f:fa:70:91:51:45:a8:fd:9d:61:c8:
a2:0b:a9:d8:8f:ad:65:4c:46:5e:16:5e:a1:07:47:96:c7:c2:
5b:32:a5:97:37:62:8b:70:b0:87:40:90:e8:48:a5:77:9f:79:
df:e6:30:22:f5:00:f0:02:a0:7f:b0:cb:d9:71:c5:44:5f:86:
e4:4e:86:64:75:2f:ab:ca:0c:7d:1f:fb:89:3f:db:e0:73:66:
51:e8:d8:3e:dc:a3:20:5d:65:02:e6:7f:ef:ea:cb:63:ac:7e:
65:cd:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:55:21 2025 by rpki-client