Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/QvpRbx3pheWA1RqWiqAFDImOsIw.roa
File: QvpRbx3pheWA1RqWiqAFDImOsIw.roa (raw, json)
Hash identifier: GbR0D4o2MOEMMS1CEMKnVyyz38y5snLFgliJUbmiuow=
Subject key identifier: 42:FA:51:6F:1D:E9:85:E5:80:D5:1A:96:8A:A0:05:0C:89:8E:B0:8C
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01884855D536EFE9F8FBAD75E9D279547BC3
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/QvpRbx3pheWA1RqWiqAFDImOsIw.roa
Signing time: Tue 23 May 2023 11:19:24 +0000
ROA not before: Tue 23 May 2023 11:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 45.13.250.0/24 maxlen: 24
45.13.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:55:d5:36:ef:e9:f8:fb:ad:75:e9:d2:79:54:7b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: May 23 11:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42fa516f1de985e580d51a968aa0050c898eb08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:40:a5:ab:3f:5f:54:80:f8:f6:4c:89:bd:
94:e5:00:b9:26:5b:39:85:b1:21:48:88:1a:55:aa:
52:ba:3b:f0:38:b3:71:a0:bd:45:02:2e:85:b8:79:
ae:3d:bc:1b:fd:54:4e:f8:c4:3c:e0:ab:1b:f7:63:
3f:30:76:1c:88:64:c6:79:02:55:c9:15:72:d2:ec:
c3:8b:75:8b:e4:99:91:b5:30:be:74:8a:f1:07:1d:
24:16:33:ac:80:52:33:75:86:3b:04:8a:e3:81:6d:
cc:ac:b9:15:72:59:0b:6d:f3:0b:2b:db:df:00:be:
bd:b4:42:a5:2e:cb:b2:d4:52:27:74:ce:40:06:0a:
0d:25:44:b6:dd:7e:de:db:1e:20:dd:ca:5c:0e:88:
ae:15:4a:ae:2c:d4:e5:03:7b:7f:9d:1c:a2:f7:9b:
82:db:57:7c:5a:65:54:38:65:9f:6e:b4:d1:0a:4c:
16:2a:77:38:51:44:f6:0f:f8:f1:f1:de:46:d6:64:
0f:d8:92:12:61:9e:06:c0:4e:bf:d2:25:38:a1:ee:
50:f4:fa:66:81:07:b5:10:e8:01:eb:2a:ca:c2:ca:
cd:11:6c:87:2b:63:a3:29:2d:ac:32:36:f3:58:c4:
c9:53:f4:77:af:91:65:15:97:e9:a1:82:5f:21:31:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FA:51:6F:1D:E9:85:E5:80:D5:1A:96:8A:A0:05:0C:89:8E:B0:8C
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/QvpRbx3pheWA1RqWiqAFDImOsIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.250.0/23
Signature Algorithm: sha256WithRSAEncryption
64:89:48:4a:8c:d6:30:1e:f7:83:87:99:41:b2:19:06:66:1b:
91:32:ea:81:dd:85:3f:54:a5:39:f9:c6:2b:70:d1:3b:2a:70:
6f:c6:98:2a:d9:ac:d0:92:a6:1f:5b:ef:02:b9:14:7a:7a:b6:
6b:3c:56:81:f1:9a:0d:a4:61:cc:ef:75:ce:cb:4b:6c:62:25:
4f:4f:ac:c4:ae:46:ab:0f:bf:da:f1:35:a5:52:6e:c5:ee:68:
c7:18:c6:c1:11:3d:1e:bc:7f:05:97:fb:bb:a8:9e:33:2b:3a:
56:85:b8:0b:74:03:0c:40:f5:ef:27:a8:4d:7b:f4:c0:75:49:
88:2b:32:f1:a4:97:cb:d5:9c:05:d2:3d:2d:82:70:a0:38:52:
ce:c1:ff:96:3f:7a:3a:dc:4f:53:b7:36:c0:b2:80:25:bf:ce:
2a:2d:61:e3:dc:fe:95:28:20:95:8f:ea:a0:bb:44:72:f8:6d:
be:b0:1c:25:a4:e1:eb:0b:72:82:08:32:6e:39:24:7e:28:f0:
7b:e8:3b:99:87:57:7a:a1:fe:cf:de:23:96:1c:c0:cd:a8:13:
dd:43:39:0f:d2:ff:f5:f3:f9:d1:b4:c7:88:be:73:b4:01:21:
c7:75:5b:25:7d:e6:52:3a:56:a8:5c:d3:28:8c:7b:7b:a2:b5:
f4:83:9b:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhIVdU27+n4+6116dJ5VHvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw
MGQwNDYwHhcNMjMwNTIzMTExOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmZhNTE2ZjFkZTk4NWU1ODBkNTFhOTY4YWEwMDUwYzg5OGViMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNdApas/X1SA+PZMib2U5QC5Jls5
hbEhSIgaVapSujvwOLNxoL1FAi6FuHmuPbwb/VRO+MQ84Ksb92M/MHYciGTGeQJV
yRVy0uzDi3WL5JmRtTC+dIrxBx0kFjOsgFIzdYY7BIrjgW3MrLkVclkLbfMLK9vf
AL69tEKlLsuy1FIndM5ABgoNJUS23X7e2x4g3cpcDoiuFUquLNTlA3t/nRyi95uC
21d8WmVUOGWfbrTRCkwWKnc4UUT2D/jx8d5G1mQP2JISYZ4GwE6/0iU4oe5Q9Ppm
gQe1EOgB6yrKwsrNEWyHK2OjKS2sMjbzWMTJU/R3r5FlFZfpoYJfITG8TQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEL6UW8d6YXlgNUaloqgBQyJjrCMMB8GA1UdIwQY
MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt
NDRlYTY0NzIxYzllLzEvUXZwUmJ4M3BoZVdBMVJxV2lxQUZESW1Pc0l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll
LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQ36MA0G
CSqGSIb3DQEBCwUAA4IBAQBkiUhKjNYwHveDh5lBshkGZhuRMuqB3YU/VKU5+cYr
cNE7KnBvxpgq2azQkqYfW+8CuRR6erZrPFaB8ZoNpGHM73XOy0tsYiVPT6zErkar
D7/a8TWlUm7F7mjHGMbBET0evH8Fl/u7qJ4zKzpWhbgLdAMMQPXvJ6hNe/TAdUmI
KzLxpJfL1ZwF0j0tgnCgOFLOwf+WP3o63E9TtzbAsoAlv84qLWHj3P6VKCCVj+qg
u0Ry+G2+sBwlpOHrC3KCCDJuOSR+KPB76DuZh1d6of7P3iOWHMDNqBPdQzkP0v/1
8/nRtMeIvnO0ASHHdVslfeZSOlaoXNMojHt7orX0g5sW
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:26 2025 by rpki-client