Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/Q5BHnrzZ_VrXHkrTWI4oJIsopR8.roa
File: Q5BHnrzZ_VrXHkrTWI4oJIsopR8.roa (raw, json)
Hash identifier: aoWtm8t/vuc/LB1cvAPCr7c5TZ6VVdmJ+lbHqOl3t7o=
Subject key identifier: 43:90:47:9E:BC:D9:FD:5A:D7:1E:4A:D3:58:8E:28:24:8B:28:A5:1F
Certificate issuer: /CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Certificate serial: 018571F0EF88484D84883E8E2F57C8DD223B
Authority key identifier: A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/Q5BHnrzZ_VrXHkrTWI4oJIsopR8.roa
Signing time: Mon 02 Jan 2023 10:04:53 +0000
ROA not before: Mon 02 Jan 2023 10:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41799
IP address blocks: 195.242.127.0/24 maxlen: 24
195.242.126.0/23 maxlen: 23
195.242.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:ef:88:48:4d:84:88:3e:8e:2f:57:c8:dd:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Validity
Not Before: Jan 2 10:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4390479ebcd9fd5ad71e4ad3588e28248b28a51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:24:5f:45:3f:f0:4c:4d:9e:b0:a9:ba:06:8c:
d8:3e:ce:99:12:95:9b:c1:26:98:2f:1f:2d:84:7e:
ba:4e:de:17:78:3e:10:25:b7:9b:8a:b2:98:00:83:
fb:3e:5a:ac:07:4c:61:d6:ab:c7:b8:bf:90:a5:81:
09:66:e7:c1:4d:7d:c4:9f:5f:12:82:93:ad:b6:94:
ce:9e:78:51:b8:df:ac:78:e1:ce:d7:09:6c:36:5c:
e8:bb:18:32:28:20:7a:21:4d:93:41:bf:2d:7a:06:
a1:74:22:12:64:27:41:af:11:56:92:bc:de:94:49:
af:17:26:a3:5f:37:b9:e1:c8:57:03:51:a3:a3:2e:
e1:ee:c0:89:c0:6d:2f:89:fb:f3:9b:e7:7f:0a:c1:
e8:80:41:bf:04:c1:bb:d0:91:0c:19:41:58:0f:87:
81:7e:da:62:9f:87:46:69:aa:33:8f:c8:2c:9a:94:
31:96:1d:06:0f:13:2e:af:9e:46:78:5b:85:20:b8:
6f:20:1f:68:cc:40:2d:de:71:ff:55:0b:09:55:ae:
18:1c:15:98:f8:82:4e:3c:da:8c:58:6f:4b:77:c5:
d4:ed:c9:1f:a6:fe:b7:9f:a1:6c:5b:04:ac:cf:3c:
c2:8e:2c:de:a3:9b:9c:80:9b:c7:16:cc:4f:15:c8:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:90:47:9E:BC:D9:FD:5A:D7:1E:4A:D3:58:8E:28:24:8B:28:A5:1F
X509v3 Authority Key Identifier:
keyid:A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/Q5BHnrzZ_VrXHkrTWI4oJIsopR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.126.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:b2:52:6e:45:44:e1:55:34:bd:94:52:14:4c:51:b1:b9:9a:
c5:03:f3:24:69:c5:43:3c:9d:5d:9f:ed:79:b2:3e:0e:94:41:
74:13:c9:56:d3:b0:a3:a0:cb:88:b4:22:9d:f2:3e:3f:e2:37:
47:10:41:ab:a2:6e:5b:d4:5b:f8:de:42:4c:4d:43:fa:46:65:
6d:a0:6f:a5:98:23:04:00:d4:a8:98:6f:68:22:af:b2:cb:92:
00:3b:f5:2d:e0:25:bf:3e:43:c6:62:7c:4c:22:3a:94:40:ca:
0a:57:f8:e6:e7:28:9f:e5:d4:1d:28:96:82:d8:60:87:fc:43:
64:57:a5:6d:ef:e1:ef:0a:b5:aa:dd:65:88:d5:e7:0a:43:5e:
e6:15:48:d7:1c:44:3f:95:e0:cb:bb:70:cb:b0:13:57:9b:c0:
88:4e:3a:a4:b1:5e:86:cb:e1:21:94:fd:fb:c4:ee:de:f7:38:
53:09:2e:ce:21:a4:69:3d:e6:12:34:d2:19:14:fe:76:86:76:
30:22:12:bf:28:c3:94:16:70:d0:7e:10:b2:4f:79:91:a1:b2:
f0:0f:5e:bb:a1:73:4c:37:0f:52:e9:05:ff:0b:ff:c2:4a:37:
b4:42:21:7c:18:fe:2d:8e:d1:46:e5:f4:f1:0e:82:b3:50:dd:
5e:b8:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:17 2025 by rpki-client