Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/QYOPlI90eQzvkk1aGepb65RpmKE.roa
File: QYOPlI90eQzvkk1aGepb65RpmKE.roa (raw, json)
Hash identifier: K8MFYjYhlqBPbYcqvtJHadfFWMBg4P43rFhG7TmWO80=
Subject key identifier: 41:83:8F:94:8F:74:79:0C:EF:92:4D:5A:19:EA:5B:EB:94:69:98:A1
Certificate issuer: /CN=ec9269185f63dc3356037f713ce8a0909ff07225
Certificate serial: 018570F086BD4CEE702F632F873150C3CDD0
Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/QYOPlI90eQzvkk1aGepb65RpmKE.roa
Signing time: Mon 02 Jan 2023 05:24:49 +0000
ROA not before: Mon 02 Jan 2023 05:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12301
IP address blocks: 195.144.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:86:bd:4c:ee:70:2f:63:2f:87:31:50:c3:cd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225
Validity
Not Before: Jan 2 05:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41838f948f74790cef924d5a19ea5beb946998a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:23:9f:50:be:f5:a2:71:5a:1c:98:3a:45:7e:
f1:b5:40:54:6c:83:4f:ec:56:28:47:c3:17:56:7c:
c6:b7:1c:3b:ad:3b:5f:18:e2:63:c1:c9:ea:48:f4:
ad:a3:1b:fb:44:fd:35:e8:e1:65:c1:e4:9f:63:9f:
48:ef:39:93:82:43:28:22:b5:7f:e4:38:ec:8a:2c:
86:53:f2:62:0f:b8:c8:60:89:8f:06:f0:74:f0:f0:
25:43:88:61:7b:c2:d4:1c:7d:4d:3c:de:26:09:1a:
a8:fb:dc:9f:ea:e8:53:11:bd:2a:3b:ae:fd:5a:cf:
5b:85:ae:fc:e0:73:db:3c:c8:47:20:6c:d2:34:1f:
61:11:8a:02:35:83:ad:7e:98:37:ce:05:6b:d7:f6:
6a:ca:8d:2c:ef:c8:82:8a:bd:82:74:fb:05:cd:48:
67:75:fb:64:3e:6a:f7:6c:33:bd:b9:fe:53:46:a8:
37:42:a9:9f:f0:8c:6e:2d:e9:be:e6:96:3c:46:a0:
15:46:73:4d:0f:c2:6e:e5:55:39:d2:1f:61:fa:e3:
96:e4:95:09:e1:a6:9b:c3:d3:f0:04:49:8d:72:e7:
23:37:4e:89:37:94:2f:a7:ff:91:d3:f6:60:d5:35:
0c:b7:8f:79:34:cb:0f:4f:49:14:fa:1b:74:5c:de:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:83:8F:94:8F:74:79:0C:EF:92:4D:5A:19:EA:5B:EB:94:69:98:A1
X509v3 Authority Key Identifier:
keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/QYOPlI90eQzvkk1aGepb65RpmKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.20.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:98:30:30:34:9f:85:c6:89:db:4f:69:1f:52:28:8d:1c:3a:
27:1e:f6:76:d3:ea:5f:3e:9e:e3:0f:1f:cb:b7:30:2e:e4:0d:
cb:99:2f:d1:73:40:7d:e4:09:00:79:4f:02:8a:c8:55:8d:ba:
c4:3c:80:fa:88:c7:3c:28:e9:3b:7b:b7:a9:a6:91:64:29:88:
98:0a:b4:ae:3c:8e:46:bc:90:ab:c9:70:d7:d8:a3:d4:a0:85:
43:e8:92:9d:5e:59:a3:29:22:8d:4f:2b:a0:80:04:b6:ee:a0:
f7:3a:be:30:a6:e6:b2:97:e4:35:1b:6e:c0:da:60:bc:ae:68:
f3:2a:47:10:a0:ac:5a:16:50:7c:c7:50:b5:ea:2f:ee:8b:34:
87:5d:c4:fc:93:e0:fe:bd:69:70:12:be:f0:83:81:32:2a:14:
79:78:93:e5:f7:d9:53:32:6a:1a:0c:97:07:69:02:b8:51:b1:
8a:19:61:dd:35:cb:bc:e8:00:85:f5:6e:a6:bb:1a:2c:58:b0:
8a:85:ed:9b:d1:a2:4b:fa:41:66:9d:ce:85:e6:2d:e0:9a:c5:
ca:5c:51:16:d6:fd:79:49:90:3b:19:3c:b1:5a:1d:5e:bd:48:
07:b9:bd:78:55:68:90:59:47:4f:00:f2:75:45:8a:56:32:75:
34:d6:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:30 2025 by rpki-client