Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/QVk2aFUqC2BnOx52tPicEjh0k_Y.roa
File: QVk2aFUqC2BnOx52tPicEjh0k_Y.roa (raw, json)
Hash identifier: nkbxZi8CcgiWa3yfn9N/ju4d+dJnW1nbS4aJ4LpZ63A=
Subject key identifier: 41:59:36:68:55:2A:0B:60:67:3B:1E:76:B4:F8:9C:12:38:74:93:F6
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 055CB5EA
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/QVk2aFUqC2BnOx52tPicEjh0k_Y.roa
Signing time: Sat 01 Jan 2022 12:02:25 +0000
ROA not before: Sat 01 Jan 2022 12:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60798
IP address blocks: 195.39.202.0/23 maxlen: 24
195.39.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89961962 (0x55cb5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Jan 1 12:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41593668552a0b60673b1e76b4f89c12387493f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:b5:17:ce:3c:78:e3:7f:01:1c:a1:f3:a7:
bf:8b:4a:0e:f6:37:06:86:a2:e6:8d:13:2b:a6:0b:
06:af:af:53:ef:d4:9c:0d:a8:c5:85:0e:4e:f0:55:
14:69:0f:a3:d6:6b:c7:3f:04:ab:12:4c:45:8f:92:
14:09:1a:3c:e8:a4:1c:16:28:8f:26:d4:a0:c0:49:
51:1c:b0:2e:50:48:6d:8e:3b:ec:c9:c4:4b:b1:a7:
f8:91:ee:9c:af:eb:c8:e6:2b:ed:b0:dc:59:74:e6:
e1:69:2a:ca:94:aa:b5:ee:17:ca:29:b3:71:f5:62:
91:18:1d:e5:2e:92:45:ef:19:27:9f:6a:2f:04:19:
90:82:8b:a4:2c:57:30:76:d5:5a:7b:3f:07:86:ae:
fe:ca:46:ea:39:41:93:5c:9a:af:33:07:64:5c:fd:
a6:33:98:6b:f6:fe:f6:3b:cf:0e:81:0e:41:4f:b0:
92:1e:b6:27:ff:aa:0b:4a:a3:9d:1c:73:ad:33:6c:
30:ba:65:c3:e7:f2:92:52:ec:27:5f:90:e2:59:14:
43:9d:35:c7:60:5c:6a:86:8b:fa:83:4e:a3:ce:e3:
bb:8a:43:fd:a4:fc:20:49:4d:bf:7e:58:c5:20:58:
e1:6f:59:83:3b:ef:40:1e:74:10:8b:91:73:6b:56:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:59:36:68:55:2A:0B:60:67:3B:1E:76:B4:F8:9C:12:38:74:93:F6
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/QVk2aFUqC2BnOx52tPicEjh0k_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.194.0/23
195.39.202.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:a1:f4:13:35:bb:45:4c:14:3e:87:66:5b:5a:07:b6:b7:6a:
c6:20:4d:e3:35:66:c9:a7:1c:2c:63:b1:16:2b:b0:b2:94:4d:
cb:4d:80:e6:67:d8:55:9f:f7:e0:c4:b5:9a:fd:27:eb:ac:88:
bd:d9:f7:c4:70:0f:1a:05:2e:4f:d9:90:61:1a:f3:69:9a:a5:
d3:75:b9:fe:cc:17:fc:16:67:65:72:76:c7:f2:89:b3:31:f7:
60:11:ab:d4:09:3f:28:0f:14:1d:e7:ca:fd:51:71:0b:75:e4:
7e:7e:97:41:32:5a:ed:50:b0:d9:8a:39:69:4b:a4:40:c7:b7:
70:ea:87:78:3c:4d:f8:a1:80:1d:19:c1:63:4d:0b:72:c5:f9:
97:f7:4e:16:76:f6:d4:dd:d0:c4:67:2d:9f:25:8d:8c:f7:13:
0d:8d:b4:0e:4b:10:d3:82:29:04:2a:53:94:6e:d5:68:8b:4a:
da:fb:49:bb:de:95:ce:3a:7b:f9:1b:ee:53:7f:2e:38:4c:61:
a2:d8:f1:97:ef:85:79:fb:dc:a8:42:0b:2e:47:ef:1b:f4:3a:
60:4f:c0:d9:a1:5b:8d:15:90:b6:9f:3b:a4:78:84:ad:d0:56:
7e:cc:f4:73:8c:74:0a:ae:dc:1e:88:6e:09:54:53:1b:53:fa:
62:00:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:59 2025 by rpki-client