Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/QxqJIMzbIrZfdEhx1XmK27qfy0s.roa
File: QxqJIMzbIrZfdEhx1XmK27qfy0s.roa (raw, json)
Hash identifier: RFtFl/iParf/FaH/3wioUMx1u4qYL67wExm/RYMHquk=
Subject key identifier: 43:1A:89:20:CC:DB:22:B6:5F:74:48:71:D5:79:8A:DB:BA:9F:CB:4B
Certificate issuer: /CN=c0979e20ffed9f89d07cea58c4c4106819ce662d
Certificate serial: 01857315ED3809DF6613D063D0AF7BBEFB10
Authority key identifier: C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/QxqJIMzbIrZfdEhx1XmK27qfy0s.roa
Signing time: Mon 02 Jan 2023 15:24:54 +0000
ROA not before: Mon 02 Jan 2023 15:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6779
IP address blocks: 185.13.48.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:ed:38:09:df:66:13:d0:63:d0:af:7b:be:fb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0979e20ffed9f89d07cea58c4c4106819ce662d
Validity
Not Before: Jan 2 15:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=431a8920ccdb22b65f744871d5798adbba9fcb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:bb:ae:73:7f:23:05:c7:3e:b0:78:ee:39:
85:f8:c4:7c:13:04:d5:97:ec:b8:35:23:4b:7a:f8:
d1:cc:38:9a:02:7c:24:9f:db:6d:31:6c:4c:0c:66:
25:64:10:cd:f6:df:94:62:4f:90:b5:a4:09:e1:c6:
a7:17:16:23:77:be:c0:18:cd:d8:55:19:1b:a5:24:
6e:57:78:ff:65:8c:7f:4e:5f:ab:8e:5f:a4:6d:cf:
95:7b:2c:4b:c6:13:5c:3b:a1:3f:49:b8:cc:d7:19:
5a:ff:d4:53:27:00:85:fb:13:52:f9:f1:de:94:b0:
63:ee:54:7d:2d:93:da:62:05:ce:57:aa:29:e3:55:
f5:33:e1:94:13:68:9e:e9:5f:aa:18:c4:1d:54:50:
25:2c:77:e5:f1:f8:f5:55:55:d5:7c:79:f3:38:27:
be:43:2c:5f:07:f5:26:81:91:16:dd:a7:51:96:55:
90:4b:04:83:a5:d0:d2:65:71:6e:49:ad:e4:e5:8d:
8a:15:35:d9:e6:a7:af:2a:66:3e:fa:88:db:f7:67:
60:02:5d:77:03:95:44:b5:aa:2d:99:ce:eb:02:e8:
47:59:71:e9:45:6c:a2:00:81:fb:72:ea:3d:30:28:
af:58:dc:cf:58:1f:23:ff:89:4c:91:28:f9:31:67:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:89:20:CC:DB:22:B6:5F:74:48:71:D5:79:8A:DB:BA:9F:CB:4B
X509v3 Authority Key Identifier:
keyid:C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/QxqJIMzbIrZfdEhx1XmK27qfy0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.48.0/23
Signature Algorithm: sha256WithRSAEncryption
24:93:82:fe:6c:a1:da:23:85:75:55:a0:e4:d4:16:37:d7:77:
6d:a4:70:fd:e3:f6:2d:13:c3:c6:06:0c:86:ca:a6:3f:a8:e4:
17:1c:9a:59:2b:3a:7e:2e:3c:34:57:07:55:d6:9a:27:ff:1c:
94:a2:00:73:ab:b5:44:15:77:1e:1c:31:2e:af:2c:9e:67:84:
4b:07:d7:ea:25:9e:79:29:24:50:4a:50:b1:c6:5e:88:ef:5b:
07:36:3a:33:2d:d8:ae:6d:02:c0:1c:b7:25:a9:ef:b9:b2:48:
43:c7:d0:22:c3:ed:e1:52:af:82:6d:74:3c:90:d4:51:8c:26:
2c:33:d4:1d:11:34:5f:df:0f:08:9c:5e:82:ef:8b:c0:d6:bc:
db:fd:37:20:35:6e:a7:ce:ed:32:42:c0:ed:4b:54:e2:c1:eb:
b6:6c:cc:2a:7e:f4:d7:6f:c2:b0:5e:73:e5:38:cb:35:c8:5f:
4d:39:b4:19:df:2a:ed:b6:d8:30:fe:a6:8d:6d:76:78:24:72:
6e:02:c2:94:6c:63:9d:fb:95:ce:c1:2b:48:51:9e:78:5c:3c:
e8:c9:ef:3b:e8:b0:f2:0c:f2:20:bb:ff:36:dc:31:63:ac:df:
b6:e5:50:e9:10:6f:87:fb:b5:57:9b:bf:46:88:12:14:c7:c7:
f2:f6:d1:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFe04Cd9mE9Bj0K97vvsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOTc5ZTIwZmZlZDlmODlkMDdjZWE1OGM0YzQxMDY4MTlj
ZTY2MmQwHhcNMjMwMTAyMTUyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzFhODkyMGNjZGIyMmI2NWY3NDQ4NzFkNTc5OGFkYmJhOWZjYjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0i7rnN/IwXHPrB47jmF+MR8EwTV
l+y4NSNLevjRzDiaAnwkn9ttMWxMDGYlZBDN9t+UYk+QtaQJ4canFxYjd77AGM3Y
VRkbpSRuV3j/ZYx/Tl+rjl+kbc+VeyxLxhNcO6E/SbjM1xla/9RTJwCF+xNS+fHe
lLBj7lR9LZPaYgXOV6op41X1M+GUE2ie6V+qGMQdVFAlLHfl8fj1VVXVfHnzOCe+
QyxfB/UmgZEW3adRllWQSwSDpdDSZXFuSa3k5Y2KFTXZ5qevKmY++ojb92dgAl13
A5VEtaotmc7rAuhHWXHpRWyiAIH7cuo9MCivWNzPWB8j/4lMkSj5MWcMHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEMaiSDM2yK2X3RIcdV5itu6n8tLMB8GA1UdIwQY
MBaAFMCXniD/7Z+J0HzqWMTEEGgZzmYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0plZUlQX3RuNG5RZk9wWXhNUVFhQm5PWmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81MGEzNTItNmRhMS00OGUyLTliODMt
NWQ0YzlmZWM3Y2UzLzEvUXhxSklNemJJclpmZEVoeDFYbUsyN3FmeTBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny81MGEzNTItNmRhMS00OGUyLTliODMtNWQ0YzlmZWM3Y2Uz
LzEvd0plZUlQX3RuNG5RZk9wWXhNUVFhQm5PWmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQ0wMA0G
CSqGSIb3DQEBCwUAA4IBAQAkk4L+bKHaI4V1VaDk1BY313dtpHD94/YtE8PGBgyG
yqY/qOQXHJpZKzp+Ljw0VwdV1pon/xyUogBzq7VEFXceHDEuryyeZ4RLB9fqJZ55
KSRQSlCxxl6I71sHNjozLdiubQLAHLclqe+5skhDx9Aiw+3hUq+CbXQ8kNRRjCYs
M9QdETRf3w8InF6C74vA1rzb/TcgNW6nzu0yQsDtS1Tiweu2bMwqfvTXb8KwXnPl
OMs1yF9NObQZ3yrtttgw/qaNbXZ4JHJuAsKUbGOd+5XOwStIUZ54XDzoye876LDy
DPIgu/823DFjrN+25VDpEG+H+7VXm79GiBIUx8fy9tGl
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:40 2025 by rpki-client