Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/dQdflq129GKl0CWd-QG3dZMBOd8.roa
File: dQdflq129GKl0CWd-QG3dZMBOd8.roa (raw, json)
Hash identifier: fCOhRSxMmT9xYH5LmpJhakYerKLZIUYQo49sumlomlw=
Subject key identifier: 75:07:5F:96:AD:76:F4:62:A5:D0:25:9D:F9:01:B7:75:93:01:39:DF
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 06D42E17
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/dQdflq129GKl0CWd-QG3dZMBOd8.roa
Signing time: Sat 01 Jan 2022 11:59:00 +0000
ROA not before: Sat 01 Jan 2022 11:59:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34599
IP address blocks: 193.104.76.0/24 maxlen: 24
193.104.80.0/24 maxlen: 24
193.104.94.0/24 maxlen: 24
193.104.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114568727 (0x6d42e17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Jan 1 11:59:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75075f96ad76f462a5d0259df901b775930139df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:22:b6:32:65:cc:c4:3c:27:8f:bf:60:8c:
2b:49:74:64:9e:ee:05:d9:94:87:b9:1d:c9:11:cd:
84:ea:d9:6d:d2:22:aa:1d:ce:26:d7:98:7e:66:bc:
42:66:f2:04:b4:d3:bf:a0:4b:c0:15:30:8e:02:cd:
c5:4b:7e:b6:52:8c:d8:55:8c:70:21:10:6b:22:9e:
f1:cd:7f:1c:0e:74:a4:42:f6:90:e1:df:a2:e6:ab:
4c:f0:cc:0c:92:e7:46:d5:78:ed:56:ef:f0:21:fb:
c9:06:28:07:a0:7f:90:4a:17:69:fb:d3:be:07:fa:
40:93:05:c8:1b:1d:f7:d0:e6:73:78:bf:0d:fb:b9:
18:e6:f9:ab:56:23:4a:f3:3c:b3:9e:7d:9b:01:68:
f3:a4:ab:37:9e:5c:28:0e:9a:7a:dd:a3:da:ca:7d:
d4:16:c6:bc:8a:e7:58:cc:9e:81:68:d0:e6:8b:07:
df:4c:73:e4:f9:0b:91:28:a9:2e:9e:f9:3d:57:2f:
40:3e:08:d1:7f:d9:8c:8a:7e:0a:ed:b0:7d:5b:4d:
5f:86:bb:a8:c5:53:0f:aa:57:dd:67:84:31:62:27:
05:53:3e:e0:08:20:83:3b:50:8e:11:09:27:2b:d7:
97:45:56:48:74:f0:bf:d0:ef:9c:86:e9:3d:db:84:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:5F:96:AD:76:F4:62:A5:D0:25:9D:F9:01:B7:75:93:01:39:DF
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/dQdflq129GKl0CWd-QG3dZMBOd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.76.0/24
193.104.80.0/24
193.104.93.0-193.104.94.255
Signature Algorithm: sha256WithRSAEncryption
5b:a9:79:78:38:c3:d9:70:d3:d8:e9:18:e0:7b:25:43:eb:2a:
78:1b:ab:9a:0e:fe:2d:e8:5f:46:a1:bb:a8:e6:58:ba:f0:c0:
4c:e6:75:9c:b9:63:74:37:08:11:29:9e:59:ba:17:29:e6:4d:
19:7d:31:fc:b7:f5:48:1a:2a:a6:09:e1:86:d3:9c:2c:0a:50:
77:e4:2b:38:bf:7c:f3:6f:50:dd:e2:54:d5:4d:02:c0:fa:03:
ac:b6:df:43:c3:13:aa:04:be:bf:eb:83:33:33:92:78:bf:42:
86:e9:c5:8c:ae:ae:72:52:5e:6c:8b:35:a3:53:88:e4:51:39:
8d:27:1e:32:f5:bb:5e:1b:dc:97:1d:eb:23:e4:34:b2:c3:91:
04:7f:ae:99:d9:c9:25:16:fa:88:83:88:bc:10:a7:36:0b:c2:
d8:4b:ee:5f:0f:42:f3:bf:53:a4:41:fa:7d:31:55:f0:48:f7:
f0:32:fd:1f:4b:55:89:7f:ad:f5:58:53:59:00:46:c7:24:c0:
02:96:f0:68:ec:7c:63:42:ba:71:c6:9a:bb:4e:81:18:d9:e6:
2d:d6:dc:03:1f:0a:40:eb:27:f9:cf:8d:70:c5:b3:a2:8d:89:
58:c5:1f:f9:68:34:ae:8a:bf:7f:ef:2f:08:66:ed:cb:a6:98:
c5:3d:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:05:18 2025 by rpki-client