Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/qyk-5jZiBQO8f23cyrrh07pxFs4.roa
File: qyk-5jZiBQO8f23cyrrh07pxFs4.roa (raw, json)
Hash identifier: 6cg+V3PnnwKk+e5ELlZtWy5a/wgRK6UCZMoYyw32lO4=
Subject key identifier: AB:29:3E:E6:36:62:05:03:BC:7F:6D:DC:CA:BA:E1:D3:BA:71:16:CE
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 028BEF05
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/qyk-5jZiBQO8f23cyrrh07pxFs4.roa
Signing time: Sat 01 Jan 2022 02:00:54 +0000
ROA not before: Sat 01 Jan 2022 02:00:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213145
IP address blocks: 185.117.99.0/24 maxlen: 24
185.117.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42725125 (0x28bef05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: Jan 1 02:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab293ee636620503bc7f6ddccabae1d3ba7116ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:7e:3f:fb:80:be:fb:46:30:97:c8:3a:c3:
36:6e:ff:31:43:ba:a0:57:32:e9:10:e7:1a:c0:03:
77:48:56:78:e6:87:f6:ee:1b:43:c1:b2:ac:56:5d:
0b:1c:6d:7d:d9:c5:6c:7a:10:d1:46:c2:20:10:20:
90:bd:dc:ff:fa:af:64:8a:db:52:06:48:60:ad:2d:
11:7f:cb:ea:45:62:4f:25:7f:82:b1:7e:74:22:f8:
8f:31:dc:76:01:f5:22:3f:d2:cb:cc:1b:ce:d8:35:
3f:31:0b:03:16:98:3a:13:de:0d:84:30:bc:34:08:
c3:a5:6a:52:2b:6c:bc:b5:78:5c:71:02:71:5b:c4:
6b:03:43:72:dc:61:fb:7a:38:b8:c1:e9:12:bd:14:
a6:83:93:f6:dd:ab:c0:40:df:04:50:40:04:0a:09:
63:10:f2:6a:0d:23:9a:e4:b3:5c:39:97:3c:cb:d1:
ce:27:4e:72:4c:1b:43:00:5d:88:87:88:84:b3:ac:
67:10:d6:60:ca:c6:02:83:6e:9d:a2:7a:e7:17:ec:
2e:62:36:7a:d3:42:f6:49:e0:89:29:70:8c:5d:b8:
28:c9:7e:c8:d5:85:20:93:39:b6:59:60:f5:86:e5:
dd:07:b7:3d:00:49:47:a0:1c:76:b5:b9:8d:ca:8b:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:29:3E:E6:36:62:05:03:BC:7F:6D:DC:CA:BA:E1:D3:BA:71:16:CE
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/qyk-5jZiBQO8f23cyrrh07pxFs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.99.0/24
185.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
82:99:3a:aa:86:a4:49:ee:a8:23:24:5c:0d:f0:8a:3b:9a:8e:
9a:92:9e:0c:77:1a:da:5e:49:5c:f1:1b:6d:cb:3f:12:6a:f6:
46:40:08:ba:03:2d:e8:09:bc:c8:35:00:b3:a0:2a:2b:2e:21:
03:d6:6a:c8:d4:b2:c6:16:e8:ca:66:9b:88:38:b0:c2:e2:29:
b5:95:8a:a1:fb:c1:77:af:b2:41:fa:ff:d7:5b:ea:1b:74:68:
2f:47:1f:fe:33:76:3a:0d:53:b0:0a:36:ee:98:c8:ba:6e:03:
31:c7:98:44:31:ca:86:40:1c:a7:51:30:57:a9:a0:60:d0:e3:
41:cb:42:99:36:37:21:59:f4:84:dd:78:5b:c3:33:96:4d:35:
a3:9f:64:16:18:56:6c:25:64:50:0a:d7:b4:79:3a:aa:4e:66:
e9:26:cc:75:d4:78:1b:2b:01:b5:52:ee:8f:14:38:f8:46:e6:
97:c6:de:eb:51:ff:a2:cb:9f:1f:8a:f4:42:7c:5e:a9:0d:15:
d8:2a:52:46:b4:6f:e7:41:69:9f:d1:da:8d:36:88:f7:2d:18:
bd:34:fa:f6:7b:dc:e3:48:9c:72:38:07:05:0a:67:ca:6f:87:
68:24:27:d2:2e:37:a1:99:03:23:4e:5b:c9:94:c2:c3:70:5f:
56:d1:7e:8f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAovvBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTllNjg4N2VhNzU3MmE2NDExMzA2Yzg3YjBjYzA4OTM5N2E2MzU0MB4XDTIyMDEw
MTAyMDA1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWIyOTNlZTYzNjYy
MDUwM2JjN2Y2ZGRjY2FiYWUxZDNiYTcxMTZjZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ0jfj/7gL77RjCXyDrDNm7/MUO6oFcy6RDnGsADd0hWeOaH
9u4bQ8GyrFZdCxxtfdnFbHoQ0UbCIBAgkL3c//qvZIrbUgZIYK0tEX/L6kViTyV/
grF+dCL4jzHcdgH1Ij/Sy8wbztg1PzELAxaYOhPeDYQwvDQIw6VqUitsvLV4XHEC
cVvEawNDctxh+3o4uMHpEr0UpoOT9t2rwEDfBFBABAoJYxDyag0jmuSzXDmXPMvR
zidOckwbQwBdiIeIhLOsZxDWYMrGAoNunaJ65xfsLmI2etNC9kngiSlwjF24KMl+
yNWFIJM5tllg9Ybl3Qe3PQBJR6AcdrW5jcqLSzkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSrKT7mNmIFA7x/bdzKuuHTunEWzjAfBgNVHSMEGDAWgBSenmiH6nVypkET
Bsh7DMCJOXpjVDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25wNW9oLXAxY3FaQkV3Yklld3pBaVRsNlkxUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzMvZTJhYmFkLTU4ZmEtNGNlZC04NjUwLWVjNTA4ZGVjNzc5My8x
L3F5ay01alppQlFPOGYyM2N5cnJoMDdweEZzNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMv
ZTJhYmFkLTU4ZmEtNGNlZC04NjUwLWVjNTA4ZGVjNzc5My8xL25wNW9oLXAxY3Fa
QkV3Yklld3pBaVRsNlkxUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALl1YwMEArl1eDANBgkqhkiG9w0B
AQsFAAOCAQEAgpk6qoakSe6oIyRcDfCKO5qOmpKeDHca2l5JXPEbbcs/Emr2RkAI
ugMt6Am8yDUAs6AqKy4hA9ZqyNSyxhboymabiDiwwuIptZWKofvBd6+yQfr/11vq
G3RoL0cf/jN2Og1TsAo27pjIum4DMceYRDHKhkAcp1EwV6mgYNDjQctCmTY3IVn0
hN14W8Mzlk01o59kFhhWbCVkUArXtHk6qk5m6SbMddR4GysBtVLujxQ4+Ebml8be
61H/osufH4r0QnxeqQ0V2CpSRrRv50Fpn9HajTaI9y0YvTT69nvc40iccjgHBQpn
ym+HaCQn0i43oZkDI05byZTCw3BfVtF+jw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:25 2025 by rpki-client