Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/qt_fKSNvPF5nyH0as06dacZsqp8.roa
File: qt_fKSNvPF5nyH0as06dacZsqp8.roa (raw, json)
Hash identifier: HywZ6gZ8KDHppvJUzZW+NBLRa5G9ynEFz9gUCmconKY=
Subject key identifier: AA:DF:DF:29:23:6F:3C:5E:67:C8:7D:1A:B3:4E:9D:69:C6:6C:AA:9F
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 16032100
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/qt_fKSNvPF5nyH0as06dacZsqp8.roa
Signing time: Fri 08 Apr 2022 13:45:40 +0000
ROA not before: Fri 08 Apr 2022 13:45:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201211
IP address blocks: 185.73.16.0/22 maxlen: 22
193.178.118.0/24 maxlen: 24
185.82.24.0/22 maxlen: 22
2a05:3e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369303808 (0x16032100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: Apr 8 13:45:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aadfdf29236f3c5e67c87d1ab34e9d69c66caa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:6f:8d:5d:37:1e:35:6b:7e:b8:dc:25:23:
cb:c2:f3:9e:17:9f:48:3c:de:63:75:56:84:81:cc:
8e:b4:25:f6:6b:07:db:2b:82:2a:86:fe:13:09:8e:
ed:5a:54:84:16:10:f5:c0:e4:e2:44:a8:e0:f9:18:
e9:f3:ff:ca:c0:86:07:13:7d:0b:18:ec:ae:28:f2:
35:bf:1d:01:7b:91:bc:3e:c3:bb:de:37:c9:25:51:
d9:bf:e8:2c:46:12:19:45:34:59:b0:f3:ac:89:34:
ba:6a:04:8b:51:9b:95:65:bc:16:f4:af:44:a1:a8:
95:25:00:10:ae:7a:67:07:71:5d:20:a1:5e:67:89:
e8:43:23:de:f0:5a:a8:69:51:41:35:2e:3e:09:73:
32:39:95:09:09:6c:ef:f0:93:5f:a7:c6:d7:f0:97:
84:2d:0c:15:e4:d2:86:7d:9e:b5:47:9e:a9:eb:0e:
cc:02:8d:5d:58:18:0e:4e:af:2a:98:8e:08:00:5c:
6d:c6:19:68:af:de:d5:2e:b0:c1:14:e8:2a:e2:cb:
fe:24:03:ea:b9:0f:9f:c4:2d:f1:0b:97:0d:fc:fa:
00:8e:ac:a6:fd:15:30:bb:59:6c:d8:cf:98:26:3d:
e5:bb:d3:73:f1:03:c7:41:f0:61:12:aa:77:6a:13:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DF:DF:29:23:6F:3C:5E:67:C8:7D:1A:B3:4E:9D:69:C6:6C:AA:9F
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/qt_fKSNvPF5nyH0as06dacZsqp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.16.0/22
185.82.24.0/22
193.178.118.0/24
IPv6:
2a05:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
46:a9:cb:1f:b1:c7:08:d9:1e:2e:bf:23:24:62:c1:d1:0d:6b:
b8:9d:51:bc:13:e0:06:b5:83:4b:e6:83:20:7a:6e:2e:92:a9:
92:c9:f8:34:74:8d:2e:bc:39:e9:6b:80:70:97:fe:c7:73:da:
63:1f:6c:fa:d3:b1:9a:fc:f6:d1:ce:25:70:b3:29:74:20:d8:
1b:f0:63:bc:b6:e4:93:bf:9c:79:80:bd:c5:f4:7c:d5:f8:dc:
d2:32:86:5e:07:30:c7:30:c3:f8:d1:1e:ca:8c:93:a2:1a:78:
1f:54:76:58:43:b1:8a:1d:e7:3e:c5:b7:a8:32:55:e9:40:4c:
b4:f5:84:65:ba:6d:67:18:76:9e:24:3c:5d:10:17:be:d2:38:
b9:d9:64:74:50:d9:ec:8a:e7:46:d3:73:fa:d0:1c:34:51:60:
ba:0c:80:fe:52:56:99:af:9e:8d:d8:13:ad:fa:ea:92:c0:c7:
b5:74:f8:d5:81:ed:07:32:ce:f8:84:69:94:58:a0:50:23:5e:
59:14:01:df:8e:f5:70:53:98:58:ff:c7:d7:32:97:86:88:c0:
84:bb:43:db:e4:19:14:75:48:5f:96:b6:b3:b4:1f:9a:1e:38:
3e:cc:10:aa:dd:56:6a:0f:78:55:ee:19:73:ac:8b:4a:8d:2f:
80:55:5e:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:16 2025 by rpki-client