Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/QSrzNMCRIU3YUDqjMkZs6Vp7ZFw.roa
File: QSrzNMCRIU3YUDqjMkZs6Vp7ZFw.roa (raw, json)
Hash identifier: 73dekHPkdcgf1E3IcT7owWOUae/byMZ1EmdVJpNNF4o=
Subject key identifier: 41:2A:F3:34:C0:91:21:4D:D8:50:3A:A3:32:46:6C:E9:5A:7B:64:5C
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 01845CB0881F8FAE7AB372999975A6F170E6
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/QSrzNMCRIU3YUDqjMkZs6Vp7ZFw.roa
Signing time: Wed 09 Nov 2022 13:59:43 +0000
ROA not before: Wed 09 Nov 2022 13:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3262
IP address blocks: 185.219.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:b0:88:1f:8f:ae:7a:b3:72:99:99:75:a6:f1:70:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Nov 9 13:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=412af334c091214dd8503aa332466ce95a7b645c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:91:e2:cb:cb:66:91:c0:de:8b:d1:20:1d:
11:73:e7:8f:9e:1c:87:3e:ba:3f:5b:3a:2f:37:2c:
fc:75:4d:09:8c:ae:43:93:6e:5f:48:64:df:5d:5e:
82:a5:75:a2:65:e9:a5:91:27:3e:7a:9f:7e:5e:01:
8c:ad:3a:54:3e:89:75:a2:43:8d:e4:bb:e2:14:15:
3b:cd:93:0a:96:ca:47:e6:6c:06:1f:59:2c:2c:ef:
5e:f1:4f:8a:e5:a4:cf:48:3c:17:78:05:55:05:ca:
c8:b1:49:27:b1:01:09:55:51:cf:c4:59:4f:28:1d:
60:1d:a1:ff:1a:c2:22:1b:6f:9f:33:f0:94:b5:ba:
0c:49:d5:89:27:1f:a6:99:e7:a8:3a:2c:92:e4:6f:
9f:af:1f:83:aa:63:66:ea:4c:1e:68:bf:c5:39:00:
63:0c:54:30:19:6c:5e:53:96:6b:0b:38:ef:89:00:
5c:14:15:9d:17:8f:bc:09:13:c3:9f:9c:cc:48:fa:
6a:a9:e4:dc:61:10:f2:74:48:0e:19:3a:39:b6:f3:
6a:27:49:b8:25:03:53:5d:cf:c9:b8:ab:f7:bb:ff:
c7:ac:0f:8e:8b:49:3e:2b:42:09:35:cf:04:d3:ba:
bf:7e:d7:92:55:0f:0c:f8:cd:98:2b:b7:9a:ec:ab:
24:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2A:F3:34:C0:91:21:4D:D8:50:3A:A3:32:46:6C:E9:5A:7B:64:5C
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/QSrzNMCRIU3YUDqjMkZs6Vp7ZFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.217.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6b:4b:80:95:d7:e1:30:10:c1:c8:22:1f:bc:93:ca:7f:b8:
47:64:be:4a:6e:8f:8e:ce:bb:94:af:24:5d:39:02:6b:ad:8d:
30:41:9b:b6:68:d5:4e:c0:71:fa:f9:71:29:5c:4d:0d:04:c0:
82:16:f5:48:d1:cc:d0:47:00:25:24:28:43:ca:61:fc:30:dd:
05:23:6f:ae:26:4e:09:fb:22:69:b9:4d:b2:42:a3:3a:ed:06:
6e:bc:20:68:65:80:7f:36:b8:44:7f:63:bd:f8:15:64:54:53:
3b:c9:4b:02:45:2e:67:4c:71:d0:d5:71:55:1f:2b:0a:a8:6e:
83:b4:b4:df:31:0a:ed:27:75:c5:c2:db:c5:9c:c0:70:61:a5:
f4:9b:e8:98:9e:80:cd:91:4a:1c:0b:30:51:b3:cd:f7:94:25:
5a:13:7c:6e:13:77:12:53:d5:ec:4f:87:0b:7e:78:19:6c:85:
06:31:71:16:fd:b7:1b:02:ac:4f:6c:81:7b:ad:03:fa:a7:fe:
10:a1:c3:93:5c:c9:2c:05:93:c4:02:73:41:97:97:4d:6d:a7:
ec:d6:03:5a:cd:b9:da:e9:5d:97:4e:e0:f4:85:1f:da:5c:e4:
9b:41:b7:0d:f4:a6:f4:cc:a2:ba:26:6c:15:86:97:44:cd:da:
33:a0:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:17 2025 by rpki-client