Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/qsJo2HzAhi5UTAbpXDMcC9UZMXI.roa
File: qsJo2HzAhi5UTAbpXDMcC9UZMXI.roa (raw, json)
Hash identifier: uJbaCHetiRSfYU7nRvmR4hwSPjzcnydKVuSnFnFSEgA=
Subject key identifier: AA:C2:68:D8:7C:C0:86:2E:54:4C:06:E9:5C:33:1C:0B:D5:19:31:72
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 018571D7D8FC5D6503FEB652DC7586B47D3D
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/qsJo2HzAhi5UTAbpXDMcC9UZMXI.roa
Signing time: Mon 02 Jan 2023 09:37:29 +0000
ROA not before: Mon 02 Jan 2023 09:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197427
IP address blocks: 195.150.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d8:fc:5d:65:03:fe:b6:52:dc:75:86:b4:7d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 2 09:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aac268d87cc0862e544c06e95c331c0bd5193172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:28:11:6f:68:f0:01:fc:89:9d:06:64:94:
98:0a:19:94:29:bc:bc:2c:72:6b:6c:b7:83:7a:62:
25:65:30:40:08:c3:8b:d3:4c:9c:9c:54:94:ee:df:
77:9f:b4:e9:fc:6d:31:ae:35:37:e9:4c:b4:46:f2:
ca:a7:96:35:e9:e8:e6:76:ce:2e:64:2d:19:d3:89:
55:c4:70:b6:70:7a:ec:da:b9:f3:99:ae:15:65:de:
52:1a:63:a6:a9:be:12:ea:e0:55:c8:41:f6:c0:0a:
d7:b3:5f:09:8e:ae:c7:ba:e2:a8:b6:7d:d0:bb:98:
95:93:c0:40:7a:26:f1:8e:05:f1:13:49:1a:e8:9d:
61:76:b8:f9:4b:c8:84:0a:ac:df:ff:75:22:68:ce:
bb:77:2a:40:84:8b:a7:ca:89:1f:5c:57:e4:02:ff:
c1:d0:bf:50:b9:54:c8:eb:ae:78:35:bd:f1:3e:60:
6f:df:97:71:4b:7f:c5:3f:d6:66:07:70:dc:33:47:
f1:3a:1a:e6:7a:34:90:74:3a:71:67:cd:7e:07:e1:
01:a4:3a:bd:df:97:b9:9a:e6:fa:0a:c1:80:ba:34:
55:93:1c:8b:fe:3a:ca:b4:bd:2a:6c:da:91:96:4a:
ce:60:64:2d:7a:fe:bd:01:23:ef:3a:bc:26:7d:05:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:68:D8:7C:C0:86:2E:54:4C:06:E9:5C:33:1C:0B:D5:19:31:72
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/qsJo2HzAhi5UTAbpXDMcC9UZMXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.150.9.0/24
Signature Algorithm: sha256WithRSAEncryption
33:72:da:28:e7:05:e3:a9:62:92:17:13:5b:17:34:96:73:9c:
99:e0:0c:07:49:45:ae:e2:3a:eb:01:61:48:5f:44:e6:f6:6f:
55:6f:10:a5:1a:1f:31:9e:86:39:1d:a8:f3:75:00:06:16:93:
24:37:c9:37:42:f4:96:51:93:32:42:d4:f3:45:9f:66:22:ce:
1e:e6:b1:a7:93:f9:9f:5b:59:4f:be:33:67:c2:90:a0:60:25:
42:6a:27:a8:85:d8:10:9d:36:78:85:f5:76:a8:50:2e:a8:c2:
5d:96:b5:fc:30:2a:18:30:2c:fe:aa:d5:f6:ed:cd:68:82:d2:
49:4a:d1:fa:fd:ae:1b:80:01:5d:c3:07:9c:b5:f5:e2:8e:29:
39:e7:79:6a:de:f0:3f:7a:02:af:e3:03:56:e3:37:07:3c:7c:
a6:bf:a6:f7:f8:c7:26:01:ba:3a:09:b7:19:5e:7d:41:6f:1c:
a6:4f:01:eb:70:2c:bc:f7:cb:f2:f3:59:c1:48:94:a3:57:74:
33:d1:35:e3:f1:59:00:fc:94:2e:de:73:b3:b1:27:72:24:80:
df:18:76:12:76:b8:86:cb:5b:52:aa:d0:f2:fb:88:26:83:e6:
df:cb:1f:8f:e0:7d:94:e9:76:01:e5:4c:42:ca:48:a4:4c:17:
f9:e2:f9:81
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVx19j8XWUD/rZS3HWGtH09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4
ODE4MDQwHhcNMjMwMTAyMDkzNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWMyNjhkODdjYzA4NjJlNTQ0YzA2ZTk1YzMzMWMwYmQ1MTkzMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6EoEW9o8AH8iZ0GZJSYChmUKby8
LHJrbLeDemIlZTBACMOL00ycnFSU7t93n7Tp/G0xrjU36Uy0RvLKp5Y16ejmds4u
ZC0Z04lVxHC2cHrs2rnzma4VZd5SGmOmqb4S6uBVyEH2wArXs18Jjq7HuuKotn3Q
u5iVk8BAeibxjgXxE0ka6J1hdrj5S8iECqzf/3UiaM67dypAhIunyokfXFfkAv/B
0L9QuVTI6654Nb3xPmBv35dxS3/FP9ZmB3DcM0fxOhrmejSQdDpxZ81+B+EBpDq9
35e5mub6CsGAujRVkxyL/jrKtL0qbNqRlkrOYGQtev69ASPvOrwmfQVSpwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKrCaNh8wIYuVEwG6VwzHAvVGTFyMB8GA1UdIwQY
MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx
LTE2Y2Q4ZjRmYjRiOS8xL3FzSm8ySHpBaGk1VVRBYnBYRE1jQzlVWk1YSS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUxLTE2Y2Q4ZjRmYjRi
OS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDlgkw
DQYJKoZIhvcNAQELBQADggEBADNy2ijnBeOpYpIXE1sXNJZznJngDAdJRa7iOusB
YUhfROb2b1VvEKUaHzGehjkdqPN1AAYWkyQ3yTdC9JZRkzJC1PNFn2Yizh7msaeT
+Z9bWU++M2fCkKBgJUJqJ6iF2BCdNniF9XaoUC6owl2WtfwwKhgwLP6q1fbtzWiC
0klK0fr9rhuAAV3DB5y19eKOKTnneWre8D96Aq/jA1bjNwc8fKa/pvf4xyYBujoJ
txlefUFvHKZPAetwLLz3y/LzWcFIlKNXdDPRNePxWQD8lC7ec7OxJ3IkgN8YdhJ2
uIbLW1Kq0PL7iCaD5t/LH4/gfZTpdgHlTELKSKRMF/ni+YE=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:19 2025 by rpki-client