Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/QyDho1mjRf-8JjiN5ZawrHaShio.roa
File: QyDho1mjRf-8JjiN5ZawrHaShio.roa (raw, json)
Hash identifier: 7Zdj3/yyFdyqLA+EQGG3ywo5TxIbs+LHAe1ejV85ez4=
Subject key identifier: 43:20:E1:A3:59:A3:45:FF:BC:26:38:8D:E5:96:B0:AC:76:92:86:2A
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 0190B1
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/QyDho1mjRf-8JjiN5ZawrHaShio.roa
Signing time: Thu 09 Jun 2022 08:47:02 +0000
ROA not before: Thu 09 Jun 2022 08:47:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212062
IP address blocks: 195.244.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102577 (0x190b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Jun 9 08:47:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4320e1a359a345ffbc26388de596b0ac7692862a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:ec:bf:7c:3b:0b:5c:8f:7d:7b:32:fd:03:
89:ff:fb:85:d9:71:88:1d:23:f0:89:94:bd:89:1a:
8e:ed:ba:44:8c:ee:a1:2c:ca:ef:7c:90:a6:a4:a8:
e1:73:d6:b9:a2:d6:2f:eb:68:b1:4c:fb:f0:b3:76:
12:1b:b1:5e:9e:bb:86:ac:ad:1b:20:12:9d:e2:09:
82:d1:66:7f:d3:39:89:ef:5c:b0:6b:99:60:dc:e6:
cd:3c:b9:b8:89:ed:c2:1a:cb:f9:c3:46:8c:9a:9d:
c1:19:8e:56:ca:60:09:2a:bd:d4:ba:75:24:9c:e4:
31:96:9a:b1:52:45:93:6c:33:ad:b2:4c:be:2c:01:
f5:a4:f7:42:4e:5d:56:76:ba:e3:a6:bb:fd:f9:86:
e7:24:1a:74:af:a1:e4:06:a0:47:4d:2a:99:ed:a1:
c9:92:e0:1c:90:8a:42:70:ab:09:db:f0:24:6d:b3:
95:db:64:4b:dd:aa:3b:8a:05:7d:22:0f:e4:5a:ed:
b2:50:9c:97:00:85:d8:37:aa:6a:34:44:1f:59:26:
6e:da:91:f8:3c:0c:3b:49:b8:28:88:f6:f7:d2:ae:
85:8e:4c:b0:ac:08:61:18:ed:f5:79:68:95:68:03:
64:c1:fd:a6:bd:08:47:a4:29:05:af:b0:71:92:c3:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:E1:A3:59:A3:45:FF:BC:26:38:8D:E5:96:B0:AC:76:92:86:2A
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/QyDho1mjRf-8JjiN5ZawrHaShio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.12.0/24
Signature Algorithm: sha256WithRSAEncryption
44:03:71:64:5c:41:04:07:f4:c0:9c:ca:4d:9f:a6:30:05:df:
a1:53:39:15:a4:03:01:3a:9e:14:c3:8f:a7:4e:01:5b:9e:5e:
70:be:71:04:5d:3b:d1:b7:63:ac:54:09:1c:33:65:e1:e6:be:
70:18:bf:44:f3:b8:50:ca:cb:a6:16:11:91:a4:25:a8:46:d5:
c9:31:7d:5d:50:1e:a2:ac:c3:94:a9:16:24:7a:17:e5:8f:ba:
93:6b:d3:f5:c2:03:17:32:60:50:26:54:d6:1b:d3:0d:2d:9a:
f0:5c:19:e6:c8:fd:04:89:42:3e:53:d8:ed:df:31:45:62:8f:
f9:9f:3f:fe:85:3f:16:ed:09:b7:23:e5:02:bc:86:3d:71:62:
87:33:73:78:d4:e2:28:e5:f5:3d:7e:dc:4e:ff:fc:62:8e:41:
60:ff:64:e9:52:1e:77:03:82:d3:57:c2:62:2b:8e:4d:7c:82:
3e:a5:2d:1a:6a:80:bb:92:28:f1:2c:74:c5:d3:e9:87:97:30:
a5:bb:4b:46:4b:23:0a:f9:81:08:cc:7e:34:18:e8:60:c4:ba:
b8:2d:7f:74:ff:47:cf:8f:c9:f7:37:a7:d9:26:72:97:7c:9f:
86:e2:e7:8e:4f:41:29:20:90:8b:ca:b9:ea:f6:af:a5:76:64:
d8:68:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:06 2025 by rpki-client