Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/Qhy4jHNncf9R5mLKv1_KKsCvdXQ.roa
File: Qhy4jHNncf9R5mLKv1_KKsCvdXQ.roa (raw, json)
Hash identifier: jeIoksglAiOAsXbAGw9cn0J7vjRk8MQAP7v7S4ufyfc=
Subject key identifier: 42:1C:B8:8C:73:67:71:FF:51:E6:62:CA:BF:5F:CA:2A:C0:AF:75:74
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018570027B80FC052AD0D9339AEADCBBD5A4
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/Qhy4jHNncf9R5mLKv1_KKsCvdXQ.roa
Signing time: Mon 02 Jan 2023 01:04:48 +0000
ROA not before: Mon 02 Jan 2023 01:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199671
IP address blocks: 78.31.209.0/24 maxlen: 24
31.135.168.0/21 maxlen: 21
195.225.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7b:80:fc:05:2a:d0:d9:33:9a:ea:dc:bb:d5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 01:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=421cb88c736771ff51e662cabf5fca2ac0af7574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:10:c4:8d:52:b9:8d:d3:c3:8b:7d:27:c8:
01:aa:5e:0a:7e:7d:c7:2f:4b:32:72:e2:ce:b5:f0:
c3:14:5b:76:b0:2e:f9:c3:6f:a1:48:52:40:f4:e0:
bc:0c:a9:b3:7c:79:2b:5f:5c:88:84:eb:38:35:03:
5d:84:f4:c5:2f:b9:c0:0d:6b:fb:f1:41:48:ef:38:
09:2c:25:fc:47:a9:d5:2e:de:33:6a:24:20:5e:73:
13:0d:d5:f4:bc:8f:7c:fb:40:f5:27:c5:42:21:40:
0a:04:1f:40:e5:c7:7b:4c:db:6e:fb:0f:a0:74:96:
27:f5:18:24:95:a2:58:68:db:05:db:3a:3b:78:e9:
aa:c2:18:a6:46:d6:88:16:b5:48:4b:20:0b:7f:87:
91:c2:da:1c:65:a9:62:c1:54:21:59:8e:8f:7e:77:
3a:bd:86:10:46:8a:b4:25:fd:7a:9c:16:0c:5a:3c:
bc:2d:79:ba:6b:db:5e:48:48:6a:62:f0:8a:32:c4:
05:a3:6a:8c:21:f2:a9:18:a9:26:b3:4d:4c:b0:99:
74:83:a8:35:b7:37:b5:fc:f1:3d:62:16:a2:42:4d:
7a:a6:4a:8a:05:7a:08:77:0f:88:b8:d4:14:59:ec:
a9:1b:12:38:87:dc:a1:da:ea:71:cc:db:8c:df:3d:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1C:B8:8C:73:67:71:FF:51:E6:62:CA:BF:5F:CA:2A:C0:AF:75:74
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/Qhy4jHNncf9R5mLKv1_KKsCvdXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.168.0/21
78.31.209.0/24
195.225.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:89:0b:a0:83:35:da:3f:87:ac:a1:d1:37:7e:0f:27:59:85:
ca:8b:dd:e2:23:49:68:5d:2a:00:54:31:48:39:67:29:04:5f:
2c:bf:ff:74:81:30:92:79:79:69:ca:2e:b8:92:d5:0f:86:63:
e2:55:69:94:95:1a:f1:3c:b9:34:03:55:2e:6f:dd:e3:0c:18:
1c:75:58:3c:a2:07:fe:b2:e8:ea:98:2e:6d:07:f0:b3:a2:40:
8d:6a:dd:39:2d:76:d2:0f:1c:9c:6e:a1:ba:d0:a6:4f:0e:40:
00:9f:d4:02:cf:ba:c8:cc:e8:4c:94:3f:e5:fc:ab:b1:4b:ca:
09:d4:45:66:14:d1:ee:4a:51:36:61:7d:ef:61:b6:c5:e2:a5:
6f:0d:27:31:e5:f2:35:ea:a2:d5:c5:bb:e2:e6:6e:63:c1:26:
cc:a8:95:f9:2f:55:8c:25:9f:fa:86:20:62:8c:9b:3d:d3:49:
ca:07:91:ac:af:00:70:c2:1e:7e:0f:e3:08:23:1c:43:1e:18:
bf:13:46:a1:2f:7e:66:1d:f1:23:a1:29:94:ad:e4:1d:6d:2b:
f5:0c:4f:df:db:3a:63:d2:d6:be:d0:51:c6:cf:a5:8a:88:86:
3e:cb:5e:36:ed:ff:2b:94:d4:09:2b:e2:28:f4:cc:7e:48:16:
dd:15:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:56 2025 by rpki-client