Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/Q_bARaCK2_9aG-8XjG4FFnd96R8.roa
File: Q_bARaCK2_9aG-8XjG4FFnd96R8.roa (raw, json)
Hash identifier: Tr9NAI+vv/xJUxcR53Nzbpu8Xv4dlXzAEjHVVykwbAg=
Subject key identifier: 43:F6:C0:45:A0:8A:DB:FF:5A:1B:EF:17:8C:6E:05:16:77:7D:E9:1F
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 01856EEFD50BBF579DDD75058D9CE6B4BA85
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/Q_bARaCK2_9aG-8XjG4FFnd96R8.roa
Signing time: Sun 01 Jan 2023 20:04:49 +0000
ROA not before: Sun 01 Jan 2023 20:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 185.12.32.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:d5:0b:bf:57:9d:dd:75:05:8d:9c:e6:b4:ba:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Jan 1 20:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43f6c045a08adbff5a1bef178c6e0516777de91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:09:7f:a3:0a:62:15:c6:f5:8d:77:ce:a4:
f9:5a:a0:f3:f1:6c:7c:66:24:36:3b:b4:66:a0:68:
f8:30:0f:11:e9:6f:59:8e:c5:f8:57:52:5a:1e:64:
f4:22:fc:d3:b9:cb:8c:82:79:66:ce:a1:c6:01:85:
ac:a4:2a:78:98:a0:49:df:b5:df:f9:72:ff:a3:3f:
1e:c4:38:60:3f:85:3a:30:a8:c3:05:65:e0:13:68:
69:5e:1b:99:a6:a3:6c:5e:71:52:91:2e:fc:1d:55:
00:da:03:af:fd:b3:18:f3:f6:e4:1a:2a:22:4e:d2:
af:55:d5:40:0c:ba:69:e2:12:f2:aa:59:f6:82:23:
75:ca:1c:e8:e1:46:e1:b2:e3:4a:b5:ab:62:94:e7:
75:7e:5f:fd:4b:06:22:ef:69:05:7d:2b:0c:79:7f:
dd:eb:8a:3e:90:e8:d7:5e:ca:3b:f9:ab:f0:a1:a7:
30:3a:b2:fe:c6:72:b9:08:ec:06:85:0c:71:d0:d9:
b1:61:17:da:54:5c:bb:af:55:40:5a:e9:38:96:0b:
73:7b:92:2e:c6:55:12:46:a6:8f:c3:37:cc:0e:67:
19:6b:fc:2e:e0:b9:32:e5:67:97:b1:bc:53:e0:e9:
40:20:c9:29:a0:d8:50:27:86:e8:ca:34:9c:46:71:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F6:C0:45:A0:8A:DB:FF:5A:1B:EF:17:8C:6E:05:16:77:7D:E9:1F
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/Q_bARaCK2_9aG-8XjG4FFnd96R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.32.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:27:05:75:91:3e:2d:67:c0:4c:6a:81:ce:ac:aa:3d:36:86:
f2:26:49:7f:72:df:79:84:b9:d5:2f:49:59:e3:1f:63:b8:fd:
ba:2a:e2:e2:a3:ff:13:37:b4:72:0a:5e:aa:d7:13:f1:63:ce:
f6:75:47:80:e1:03:bd:75:4f:3b:f3:2c:b8:93:65:d2:56:2f:
aa:70:bc:82:71:12:fb:89:da:46:ad:c5:36:aa:65:f2:76:fd:
cd:55:00:ab:e4:54:31:ff:77:da:07:b1:36:a8:33:34:60:c7:
55:fa:60:b5:e1:e5:40:fe:47:0e:15:82:bb:bf:f5:c2:b2:e7:
82:9f:f8:9e:1c:b5:7f:50:95:33:ea:8c:26:61:75:32:81:0b:
fe:a6:c1:02:a5:02:56:37:8f:42:12:f0:1b:9a:ff:f1:a7:71:
6e:87:5f:93:bb:90:e7:90:c4:92:cc:ff:ca:87:6d:7e:20:d1:
09:c6:27:08:97:d1:8d:d7:15:b3:2a:34:e5:d4:1e:46:9a:0f:
2a:b8:2f:9d:aa:ae:cd:fd:62:75:c1:61:ad:83:ef:1c:bb:e2:
d6:71:ee:86:62:7d:8e:47:93:2f:01:cc:0b:88:92:78:cc:7d:
cf:4a:f6:70:55:d1:9d:e1:90:18:66:f7:95:6f:6a:c0:dc:36:
65:fc:b7:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu79ULv1ed3XUFjZzmtLqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2
YzExNWIwHhcNMjMwMTAxMjAwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2Y2YzA0NWEwOGFkYmZmNWExYmVmMTc4YzZlMDUxNjc3N2RlOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhQJf6MKYhXG9Y13zqT5WqDz8Wx8
ZiQ2O7RmoGj4MA8R6W9ZjsX4V1JaHmT0IvzTucuMgnlmzqHGAYWspCp4mKBJ37Xf
+XL/oz8exDhgP4U6MKjDBWXgE2hpXhuZpqNsXnFSkS78HVUA2gOv/bMY8/bkGioi
TtKvVdVADLpp4hLyqln2giN1yhzo4UbhsuNKtatilOd1fl/9SwYi72kFfSsMeX/d
64o+kOjXXso7+avwoacwOrL+xnK5COwGhQxx0NmxYRfaVFy7r1VAWuk4lgtze5Iu
xlUSRqaPwzfMDmcZa/wu4Lky5WeXsbxT4OlAIMkpoNhQJ4boyjScRnF2EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEP2wEWgitv/WhvvF4xuBRZ3fekfMB8GA1UdIwQY
MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt
NjcyODBjOGJiYWI4LzEvUV9iQVJhQ0syXzlhRy04WGpHNEZGbmQ5NlI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4
LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQwgMA0G
CSqGSIb3DQEBCwUAA4IBAQCpJwV1kT4tZ8BMaoHOrKo9NobyJkl/ct95hLnVL0lZ
4x9juP26KuLio/8TN7RyCl6q1xPxY872dUeA4QO9dU878yy4k2XSVi+qcLyCcRL7
idpGrcU2qmXydv3NVQCr5FQx/3faB7E2qDM0YMdV+mC14eVA/kcOFYK7v/XCsueC
n/ieHLV/UJUz6owmYXUygQv+psECpQJWN49CEvAbmv/xp3Fuh1+Tu5DnkMSSzP/K
h21+INEJxicIl9GN1xWzKjTl1B5Gmg8quC+dqq7N/WJ1wWGtg+8cu+LWce6GYn2O
R5MvAcwLiJJ4zH3PSvZwVdGd4ZAYZveVb2rA3DZl/Lch
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:51 2025 by rpki-client