Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/QJnOXGjzNaZ5hnvhrm-5TQYumEs.roa
File: QJnOXGjzNaZ5hnvhrm-5TQYumEs.roa (raw, json)
Hash identifier: vJVOMFIsgM0V0yFxAFfGcPWqVK5SF232UDzOmF86/po=
Subject key identifier: 40:99:CE:5C:68:F3:35:A6:79:86:7B:E1:AE:6F:B9:4D:06:2E:98:4B
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 0185720C68E72A95AD10A8235A86F4076BB4
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/QJnOXGjzNaZ5hnvhrm-5TQYumEs.roa
Signing time: Mon 02 Jan 2023 10:34:53 +0000
ROA not before: Mon 02 Jan 2023 10:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42778
IP address blocks: 194.110.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:68:e7:2a:95:ad:10:a8:23:5a:86:f4:07:6b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Jan 2 10:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4099ce5c68f335a679867be1ae6fb94d062e984b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:b7:bf:34:50:f3:2f:08:4c:3c:b8:07:b4:
76:77:32:f4:35:10:2d:50:dc:4b:4f:a5:ab:78:7b:
cf:0a:5e:fb:38:f6:6d:dd:be:57:7c:cf:c1:33:64:
f9:5f:b6:cc:58:ef:ea:9a:7d:68:55:14:6d:03:2d:
2f:9b:73:3c:bb:bd:3e:18:a1:b9:29:87:bc:69:7c:
de:83:14:a6:90:46:a9:78:40:6e:fa:8c:16:ae:5f:
db:3b:30:85:c6:f6:f9:08:36:ae:92:15:6b:9e:c5:
79:38:0e:91:80:ec:ef:59:b3:7b:30:1e:c9:28:fa:
a3:14:29:6f:da:ce:7a:f3:39:96:f6:73:48:d5:e4:
20:f8:60:9d:95:68:28:79:a2:e8:3a:74:ca:50:8b:
ae:47:a0:c1:16:ad:dd:44:76:7d:33:f0:00:25:8d:
31:58:ee:c6:4e:47:d0:2c:c8:1f:f8:da:58:10:88:
50:8a:ef:c5:8f:15:13:35:9d:4f:dc:1b:46:d8:ff:
d0:87:46:2c:aa:a5:70:f2:37:53:43:39:14:d8:88:
ea:62:d6:f2:8f:29:9e:9f:72:17:e4:39:02:d2:61:
e2:eb:4a:00:a4:d2:62:22:69:42:22:55:9a:47:2b:
dd:10:e0:9e:a9:d9:b1:12:32:a8:2f:ca:1d:65:7e:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:99:CE:5C:68:F3:35:A6:79:86:7B:E1:AE:6F:B9:4D:06:2E:98:4B
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/QJnOXGjzNaZ5hnvhrm-5TQYumEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.240.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:af:f2:ba:46:b2:9a:8a:ba:d2:ae:de:96:89:87:35:ed:28:
b1:b4:75:64:aa:ca:a7:d3:ab:d2:60:07:d5:d3:3a:c4:93:5d:
b7:cb:78:ba:ad:ef:bc:a5:6f:47:78:91:01:31:92:4d:14:07:
70:08:35:04:35:db:de:5f:77:78:2a:60:50:0c:a6:31:cf:96:
d3:bf:aa:0a:99:bb:d8:82:e2:18:dc:3e:93:d4:5a:53:de:be:
f5:16:b6:df:d8:25:de:a6:d2:84:72:40:3d:30:e1:0c:c1:e1:
18:e7:1d:38:cb:1a:32:76:ea:7c:a4:8b:20:d5:bd:83:b4:ed:
9a:1f:b7:aa:b4:c5:b8:56:e9:55:08:cc:55:88:50:cf:9e:a8:
69:5b:29:44:87:0e:fa:61:39:33:43:59:e4:16:09:9f:d1:99:
68:db:5e:e1:ca:a0:90:43:a1:d8:5b:e9:ce:c6:e5:37:88:b9:
52:87:a5:09:ac:db:3f:85:ba:8d:9c:5d:57:2d:66:49:e8:60:
d6:be:e4:11:ba:59:48:71:be:72:f0:0b:e6:fb:62:12:cf:9b:
3d:7c:46:ff:aa:46:2c:13:5e:74:cb:b3:77:9f:88:c2:6d:45:
ae:4f:3d:76:b0:d9:16:79:46:5c:1f:3c:32:1c:d9:3d:28:97:
7f:79:44:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyDGjnKpWtEKgjWob0B2u0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmZiOWZkMzFjMmM2MGFiZGExNGUwYjNjOTJhODk4NjY4
MjlkOGUwHhcNMjMwMTAyMTAzNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDk5Y2U1YzY4ZjMzNWE2Nzk4NjdiZTFhZTZmYjk0ZDA2MmU5ODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKq3vzRQ8y8ITDy4B7R2dzL0NRAt
UNxLT6WreHvPCl77OPZt3b5XfM/BM2T5X7bMWO/qmn1oVRRtAy0vm3M8u70+GKG5
KYe8aXzegxSmkEapeEBu+owWrl/bOzCFxvb5CDaukhVrnsV5OA6RgOzvWbN7MB7J
KPqjFClv2s568zmW9nNI1eQg+GCdlWgoeaLoOnTKUIuuR6DBFq3dRHZ9M/AAJY0x
WO7GTkfQLMgf+NpYEIhQiu/FjxUTNZ1P3BtG2P/Qh0YsqqVw8jdTQzkU2IjqYtby
jymen3IX5DkC0mHi60oApNJiImlCIlWaRyvdEOCeqdmxEjKoL8odZX69DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFECZzlxo8zWmeYZ74a5vuU0GLphLMB8GA1UdIwQY
MBaAFKYvuf0xwsYKvaFOCzySqJhmgp2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQt
MWFiYjhlMjdiNGQxLzEvUUpuT1hHanpOYVo1aG52aHJtLTVUUVl1bUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQtMWFiYjhlMjdiNGQx
LzEvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm7wMA0G
CSqGSIb3DQEBCwUAA4IBAQCbr/K6RrKairrSrt6WiYc17SixtHVkqsqn06vSYAfV
0zrEk123y3i6re+8pW9HeJEBMZJNFAdwCDUENdveX3d4KmBQDKYxz5bTv6oKmbvY
guIY3D6T1FpT3r71Frbf2CXeptKEckA9MOEMweEY5x04yxoydup8pIsg1b2DtO2a
H7eqtMW4VulVCMxViFDPnqhpWylEhw76YTkzQ1nkFgmf0Zlo217hyqCQQ6HYW+nO
xuU3iLlSh6UJrNs/hbqNnF1XLWZJ6GDWvuQRullIcb5y8Avm+2ISz5s9fEb/qkYs
E150y7N3n4jCbUWuTz12sNkWeUZcHzwyHNk9KJd/eUQp
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:45:45 2025 by rpki-client