Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/QRclQAJltQ2vR9MJJmqJPBsq5T4.roa
File: QRclQAJltQ2vR9MJJmqJPBsq5T4.roa (raw, json)
Hash identifier: Hipa5EXHLuQh5awapgjt+bSaryNyCZT7nG2KTVbDEM8=
Subject key identifier: 41:17:25:40:02:65:B5:0D:AF:47:D3:09:26:6A:89:3C:1B:2A:E5:3E
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 018A0268927827D5356619BD033578366939
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/QRclQAJltQ2vR9MJJmqJPBsq5T4.roa
Signing time: Thu 17 Aug 2023 07:32:02 +0000
ROA not before: Thu 17 Aug 2023 07:32:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 185.114.104.0/22 maxlen: 24
45.137.208.0/22 maxlen: 24
81.201.208.0/20 maxlen: 24
2a00:e900::/29 maxlen: 48
2a0b:fd82::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:68:92:78:27:d5:35:66:19:bd:03:35:78:36:69:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Aug 17 07:32:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=411725400265b50daf47d309266a893c1b2ae53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c1:ab:1d:f2:14:d3:a9:3d:86:98:21:f0:97:
dd:b9:da:61:5f:77:6e:d1:d1:3a:d9:d7:d9:26:2b:
52:6d:9c:9f:f9:7e:87:7e:19:f9:db:4b:26:c1:26:
47:52:04:cc:f5:b0:2d:97:8c:f4:5d:11:3b:a9:5e:
06:36:6f:74:ba:ac:4e:a4:33:55:44:d9:72:1c:60:
71:7e:94:e4:8b:94:61:12:c1:ab:e8:a3:71:6e:5c:
4f:7c:f0:41:47:7a:e7:cf:d6:54:9f:04:9a:79:fc:
28:8a:2b:ea:87:1e:4d:2c:31:55:23:27:49:d1:d3:
85:31:64:c3:06:fc:d1:43:c8:8e:59:56:0e:d2:01:
ed:f4:0c:cb:b5:6d:bd:51:d1:b7:d5:66:70:5b:7f:
81:26:26:e8:10:f6:22:95:f1:e4:f8:f2:0c:07:7d:
45:f0:11:a9:1f:d6:7a:f7:29:32:c0:1d:2f:13:c2:
69:ad:7d:d7:e9:8f:ad:4d:f2:14:a9:de:99:9e:d0:
d7:68:e9:79:78:ac:39:e4:37:8a:e6:3c:90:23:40:
e0:f5:dd:4b:f3:2a:f1:76:2a:50:ca:72:8a:db:54:
1c:00:43:2d:07:2c:3a:d7:ee:2b:65:e3:ea:e3:0a:
8f:67:d8:68:f4:71:d6:4f:17:5e:76:ee:f7:31:ad:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:17:25:40:02:65:B5:0D:AF:47:D3:09:26:6A:89:3C:1B:2A:E5:3E
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/QRclQAJltQ2vR9MJJmqJPBsq5T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.208.0/22
81.201.208.0/20
185.114.104.0/22
IPv6:
2a00:e900::/29
2a0b:fd82::/32
Signature Algorithm: sha256WithRSAEncryption
8b:f6:7b:72:7c:c2:46:b0:9d:c5:bf:e9:b6:e8:44:5a:eb:75:
d1:e7:ee:dc:e7:81:11:48:36:9a:1e:ab:6e:91:9a:6d:b7:23:
f2:12:4a:1d:aa:eb:a1:c3:a0:17:be:82:1e:35:be:1a:4c:71:
c3:48:83:e4:46:95:fa:4b:f0:9b:eb:22:26:65:e8:b3:67:ef:
0f:99:a3:29:8c:c1:52:36:77:44:12:e1:1f:64:0b:3b:7c:c8:
1b:07:f6:bd:4f:1e:80:2a:1f:b2:f1:0f:6c:ee:53:60:6c:37:
60:81:9b:89:6f:78:3a:02:72:a6:18:69:52:62:90:a2:fd:3a:
38:86:75:33:ff:bd:ad:7d:20:85:39:ff:29:d9:dd:38:a2:89:
b1:cc:f7:59:6c:b9:f7:f8:8b:1e:2a:cb:0c:41:c1:df:b3:5d:
af:66:00:44:f3:09:9a:6e:61:f0:aa:77:5d:26:dc:30:1b:97:
bd:62:cd:69:35:12:0f:a5:6b:d2:9a:2b:01:28:95:6c:33:cf:
2a:90:01:f6:a7:57:35:4d:6b:9e:55:83:5e:96:d3:57:77:72:
f4:65:e3:20:1d:72:64:c3:2e:0d:23:01:03:a4:f1:99:6d:fd:
8f:13:16:d4:0a:4b:fd:9a:b8:14:12:8d:18:6e:e8:4c:93:58:
34:53:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:07 2025 by rpki-client