Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qz5SNZUDYgKQPKlDRGHWdX0mtU0.roa
File: qz5SNZUDYgKQPKlDRGHWdX0mtU0.roa (raw, json)
Hash identifier: 7bVk5a1PNo1c8J/O1Shmjr+KodL92P9D5pJr+Szk/O0=
Subject key identifier: AB:3E:52:35:95:03:62:02:90:3C:A9:43:44:61:D6:75:7D:26:B5:4D
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018200E87800CD4D2D933EEB306D580275EC
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qz5SNZUDYgKQPKlDRGHWdX0mtU0.roa
Signing time: Fri 15 Jul 2022 08:10:11 +0000
ROA not before: Fri 15 Jul 2022 08:10:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49011
IP address blocks: 95.174.160.0/19 maxlen: 19
178.19.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:e8:78:00:cd:4d:2d:93:3e:eb:30:6d:58:02:75:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 08:10:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab3e523595036202903ca9434461d6757d26b54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:c6:ad:6b:f8:60:85:b5:37:f9:d6:2d:6a:
62:0c:7a:fd:aa:3b:ba:33:23:23:5d:55:74:24:db:
58:0e:38:98:7d:ff:93:0f:bf:f1:9c:a4:d4:42:50:
75:57:54:35:b5:07:fe:8b:3c:28:31:c7:d6:ef:68:
67:41:6d:1c:23:b8:de:ac:68:1c:09:01:71:b7:25:
97:d7:c0:67:f2:69:8f:7c:dd:c2:c4:6d:2d:ad:8b:
a1:2f:24:cd:df:e9:78:b5:7d:98:4e:93:4d:af:ec:
c0:5f:e7:10:24:52:30:7f:25:f8:d1:d3:39:c8:9a:
ec:14:88:a6:f4:b4:c2:3a:3a:77:65:dc:1a:d6:83:
25:98:66:01:c8:89:0d:e8:50:6b:92:76:11:ce:62:
c7:50:86:20:87:2b:ce:09:49:f1:4e:29:76:5e:50:
9f:c1:f6:14:1f:2d:cd:ec:b4:62:fb:80:e4:80:1e:
35:f2:9b:72:c8:8c:71:3b:04:48:6b:24:90:b1:71:
f3:24:fb:97:21:5b:27:23:3e:40:e5:6e:09:a6:5c:
1d:ed:c3:85:5d:0c:2d:05:2b:21:ee:2c:fb:8f:74:
f8:e7:17:85:50:e7:c7:7a:1a:21:6f:0e:d3:c5:3d:
68:0e:43:3d:96:ba:93:40:82:b5:b8:92:87:94:2e:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3E:52:35:95:03:62:02:90:3C:A9:43:44:61:D6:75:7D:26:B5:4D
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qz5SNZUDYgKQPKlDRGHWdX0mtU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.160.0/19
178.19.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:6d:cd:60:b8:cc:6b:65:f9:24:f7:a8:9f:6c:e8:b3:95:ba:
0e:7d:35:cc:f3:fd:a3:83:44:dc:e1:d8:16:ca:f6:ed:1b:37:
49:66:67:d9:a9:7f:48:7c:0d:4d:a8:39:f8:e7:95:08:37:28:
87:e8:73:58:4f:96:c6:27:76:b2:64:4b:19:4a:f3:ac:1f:09:
1d:2f:75:80:d5:aa:91:35:5b:95:62:da:c9:35:90:f9:fb:f5:
88:c0:e7:e6:99:5f:a9:9d:73:18:5d:a0:e3:2a:60:6b:db:bb:
8e:e7:52:28:1a:5e:02:3a:91:c4:ba:99:ac:c7:02:9f:0e:8e:
05:f4:f6:ae:d2:68:a0:41:34:d2:d0:c8:65:fc:42:30:7e:fb:
61:cf:b8:92:e1:c4:cf:bd:59:37:f6:34:99:98:df:62:ce:3e:
3c:24:7f:4d:5a:66:f1:4c:f9:7c:a5:e9:e3:a2:90:ca:bb:ef:
e3:a6:a8:2b:ea:19:b8:45:2e:5c:01:de:72:e7:ab:28:83:61:
41:38:9e:3b:b9:31:d9:95:90:db:2a:24:d6:59:6c:6a:75:d8:
87:1d:90:ec:14:93:f8:b3:01:c9:c5:b5:f2:73:88:3f:ba:30:
e1:02:1a:7b:d2:3a:07:c0:d1:64:47:e7:ef:b3:9d:80:99:00:
91:b8:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:57:39 2025 by rpki-client