Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/qDQPqfvszE7YxtXUzdp8JXDPK6U.roa
File: qDQPqfvszE7YxtXUzdp8JXDPK6U.roa (raw, json)
Hash identifier: B3WrR9TVQD6rR8G6IE+EgyIkllyvfcD477O/hY13xqA=
Subject key identifier: A8:34:0F:A9:FB:EC:CC:4E:D8:C6:D5:D4:CD:DA:7C:25:70:CF:2B:A5
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 01856D13CF25BEC8A70541713303F1B3F6CC
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/qDQPqfvszE7YxtXUzdp8JXDPK6U.roa
Signing time: Sun 01 Jan 2023 11:24:52 +0000
ROA not before: Sun 01 Jan 2023 11:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39048
IP address blocks: 193.176.93.0/24 maxlen: 24
193.176.92.0/24 maxlen: 24
193.176.95.0/24 maxlen: 24
193.176.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:cf:25:be:c8:a7:05:41:71:33:03:f1:b3:f6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Jan 1 11:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8340fa9fbeccc4ed8c6d5d4cdda7c2570cf2ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:44:15:2d:87:57:93:81:83:92:2e:73:bc:89:
2c:89:bc:49:7d:de:3e:a6:41:85:80:dd:12:f0:d8:
5a:7f:24:94:bd:90:b4:ca:cc:5d:18:fb:a2:b0:93:
df:1f:13:22:12:d2:26:0d:7c:3e:30:78:f5:5b:22:
b3:d8:e1:7d:94:89:e1:f6:28:84:50:31:8c:d6:d3:
d3:b1:da:0a:45:17:68:46:19:d6:ff:5b:a0:be:7b:
e7:8b:03:8e:5b:70:18:1b:4d:87:df:c7:01:45:e8:
40:37:fb:8c:72:c3:06:86:10:4b:9b:a2:43:de:22:
47:39:c2:88:c8:aa:21:23:8b:ad:63:60:ab:1e:92:
d3:12:34:e0:99:9e:6e:9f:c6:74:5c:f4:e0:2f:bd:
6c:8c:8c:95:8c:38:9f:97:69:b9:f6:da:28:21:5d:
98:cd:ab:09:31:8c:a0:c5:5b:42:10:02:c6:bc:e2:
78:b5:f7:c8:71:c7:bf:99:7e:32:73:e3:c8:f6:7d:
43:46:5b:ea:54:90:54:84:4a:e5:17:1c:2e:28:11:
42:21:e9:08:53:d5:2b:3f:24:14:61:78:73:21:0c:
0f:7b:3c:a8:a8:7a:6c:06:f2:c4:2c:cb:0c:dc:91:
75:26:7d:cd:c6:8d:1c:e0:b3:8b:97:21:53:b9:bb:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:34:0F:A9:FB:EC:CC:4E:D8:C6:D5:D4:CD:DA:7C:25:70:CF:2B:A5
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/qDQPqfvszE7YxtXUzdp8JXDPK6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
16:e0:4a:43:9e:8c:f6:f8:65:e1:ad:a8:25:75:68:7e:ac:49:
1c:58:07:20:df:79:2a:56:66:0d:4f:6c:71:96:1b:c3:95:4a:
5b:83:64:0b:a2:e0:23:a8:73:f3:96:23:3d:dd:6e:51:56:31:
35:8c:41:4b:95:8f:a9:a6:7b:84:29:8e:25:25:88:31:18:20:
4b:36:32:1f:e3:d5:b7:41:9d:c6:fc:13:90:a7:43:d7:70:df:
f7:58:25:c0:b9:61:9d:d8:be:e4:ac:d9:99:49:1b:62:f7:8e:
0f:7b:e0:ba:15:c9:89:74:1b:17:55:88:c3:81:3a:d7:a4:68:
16:1f:ca:19:6d:21:ce:5d:bf:27:4e:17:b5:b1:a1:18:b2:79:
aa:86:02:a9:d4:d8:7f:c7:49:78:7a:9c:95:7e:d7:00:21:be:
93:59:26:e2:30:ee:96:7d:54:01:45:07:29:9d:3f:c1:75:ea:
af:f8:29:2f:54:64:b6:49:5a:02:6b:eb:8c:c1:8f:49:fb:d6:
83:a9:cd:24:0d:5b:4f:78:60:ef:84:8d:00:1b:c0:bf:f3:5f:
2d:16:07:df:56:53:ba:f3:8a:07:d8:52:16:02:cd:01:76:c6:
71:18:73:51:54:e8:5d:21:5d:c8:5c:fa:32:67:d8:d3:86:59:
1d:95:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:54 2025 by rpki-client