Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/2QqDxi_T0r8ydgef2En__uDmSBg.roa
File: 2QqDxi_T0r8ydgef2En__uDmSBg.roa (raw, json)
Hash identifier: OlVrh+ff4crn2eAbNiQhlrQ2qVjYmkY1kHmTryLIsIo=
Subject key identifier: D9:0A:83:C6:2F:D3:D2:BF:32:76:07:9F:D8:49:FF:FE:E0:E6:48:18
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 018570306EEA6ED082BF312B9DB10B36BD79
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/2QqDxi_T0r8ydgef2En__uDmSBg.roa
Signing time: Mon 02 Jan 2023 01:55:00 +0000
ROA not before: Mon 02 Jan 2023 01:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33387
IP address blocks: 185.190.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6e:ea:6e:d0:82:bf:31:2b:9d:b1:0b:36:bd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Jan 2 01:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d90a83c62fd3d2bf3276079fd849fffee0e64818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:7e:55:6a:4a:6c:3b:ae:5c:e2:2d:02:ef:
b6:58:b6:96:40:b9:45:eb:c5:2f:2e:45:2f:19:b1:
c6:b5:88:c6:5a:e4:56:b6:93:dc:74:f3:bb:38:bc:
6d:ba:b1:9c:a0:87:4b:ca:76:cf:2a:ee:1e:f8:35:
46:84:bc:e0:cc:f7:8e:e4:25:8a:b4:3a:2e:98:3c:
1a:dd:3f:28:8b:ea:58:3c:2f:df:90:4d:7d:31:9a:
c1:e6:7f:15:32:cc:c9:62:8e:64:c9:5a:d0:f1:d3:
ba:4b:c1:bb:8d:c8:17:f4:cc:79:e7:83:0c:c5:1c:
09:d3:64:c7:92:9b:1f:cf:dd:28:99:e3:eb:76:62:
7e:21:27:e4:01:ec:c6:0a:b6:23:98:0e:5c:a9:15:
c9:8d:2e:f5:c9:c4:13:73:77:fe:39:56:2e:63:53:
5f:3b:ba:b8:0e:64:c4:23:bc:e6:5c:21:79:f8:b2:
6d:3f:ef:bd:3c:b7:99:ae:35:67:ae:34:83:7e:2c:
60:7a:b6:2c:8f:27:2b:76:57:da:08:5f:2c:04:e7:
22:8c:58:da:fa:36:40:15:d7:9b:a7:8c:7a:be:8d:
fa:25:7b:1e:37:e7:be:88:cb:84:92:c4:ae:bb:4f:
ce:73:20:2c:ce:35:2f:9e:9c:2f:e6:11:25:67:c8:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0A:83:C6:2F:D3:D2:BF:32:76:07:9F:D8:49:FF:FE:E0:E6:48:18
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/2QqDxi_T0r8ydgef2En__uDmSBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.18.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:a3:52:1b:f9:08:e4:f0:63:1b:6b:2f:c0:b5:7a:e5:87:cc:
d8:31:ea:00:01:c1:0f:03:55:c3:96:cc:ca:c7:36:2c:b2:fc:
7f:cb:82:4d:6f:75:f1:80:d4:04:55:8b:8a:71:56:ac:9b:64:
e7:aa:a0:79:da:1e:28:96:38:d0:53:39:0f:76:c2:f2:57:ca:
36:f7:bd:42:75:53:ac:b0:46:ef:79:d8:1b:dd:17:e4:dd:98:
1b:24:4e:11:3f:c5:09:03:1a:c2:6d:f6:6e:d5:35:9e:74:bd:
06:78:d7:d1:e2:88:ab:43:bb:87:7c:3a:11:26:61:a6:fc:36:
81:ad:72:3f:59:65:dc:7a:49:a2:5b:fd:39:7b:16:c7:05:4a:
b4:e8:6e:f0:1c:28:d3:20:59:88:44:11:c4:ab:84:81:8d:a4:
d9:2c:7e:2f:a0:46:89:05:51:a1:0c:46:a4:d4:9b:8b:7b:8b:
ab:a1:f2:b6:d7:c4:04:e0:d1:41:4d:46:0e:2a:11:d7:8b:9d:
06:f1:76:f1:35:f6:50:2b:89:4c:50:de:93:03:24:ed:16:79:
8b:76:af:ab:f0:ba:5a:f8:fd:3e:22:d3:ae:c1:26:81:00:60:
23:48:f3:4d:d0:16:e7:22:15:03:7c:03:60:5c:55:ba:ce:24:
dc:ba:7a:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwMG7qbtCCvzErnbELNr15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0M2I1MzIyYjhlYTM4YTdhMDQ0ZGNiMDY3MWE3NWRiYTEw
NDNkN2UwHhcNMjMwMTAyMDE1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTBhODNjNjJmZDNkMmJmMzI3NjA3OWZkODQ5ZmZmZWUwZTY0ODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi29+VWpKbDuuXOItAu+2WLaWQLlF
68UvLkUvGbHGtYjGWuRWtpPcdPO7OLxturGcoIdLynbPKu4e+DVGhLzgzPeO5CWK
tDoumDwa3T8oi+pYPC/fkE19MZrB5n8VMszJYo5kyVrQ8dO6S8G7jcgX9Mx554MM
xRwJ02THkpsfz90omePrdmJ+ISfkAezGCrYjmA5cqRXJjS71ycQTc3f+OVYuY1Nf
O7q4DmTEI7zmXCF5+LJtP++9PLeZrjVnrjSDfixgerYsjycrdlfaCF8sBOcijFja
+jZAFdebp4x6vo36JXseN+e+iMuEksSuu0/OcyAszjUvnpwv5hElZ8gptQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNkKg8Yv09K/MnYHn9hJ//7g5kgYMB8GA1UdIwQY
MBaAFKQ7UyK46jinoETcsGcadduhBD1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAt
NzFlOTViMDRiM2VjLzEvMlFxRHhpX1Qwcjh5ZGdlZjJFbl9fdURtU0JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAtNzFlOTViMDRiM2Vj
LzEvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub4SMA0G
CSqGSIb3DQEBCwUAA4IBAQDSo1Ib+Qjk8GMbay/AtXrlh8zYMeoAAcEPA1XDlszK
xzYssvx/y4JNb3XxgNQEVYuKcVasm2TnqqB52h4oljjQUzkPdsLyV8o2971CdVOs
sEbvedgb3Rfk3ZgbJE4RP8UJAxrCbfZu1TWedL0GeNfR4oirQ7uHfDoRJmGm/DaB
rXI/WWXcekmiW/05exbHBUq06G7wHCjTIFmIRBHEq4SBjaTZLH4voEaJBVGhDEak
1JuLe4urofK218QE4NFBTUYOKhHXi50G8XbxNfZQK4lMUN6TAyTtFnmLdq+r8Lpa
+P0+ItOuwSaBAGAjSPNN0BbnIhUDfANgXFW6ziTcunpN
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:29 2025 by rpki-client