Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/QRT9x2XC5REH_W6X5kzdGfwgWMs.roa
File: QRT9x2XC5REH_W6X5kzdGfwgWMs.roa (raw, json)
Hash identifier: sIU0wIYie0ItgrTOsP/OoR7AICFIxAonDMgOMrBx2qU=
Subject key identifier: 41:14:FD:C7:65:C2:E5:11:07:FD:6E:97:E6:4C:DD:19:FC:20:58:CB
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 01856F42B96297EEB72B5730BB11B5A391E2
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/QRT9x2XC5REH_W6X5kzdGfwgWMs.roa
Signing time: Sun 01 Jan 2023 21:35:21 +0000
ROA not before: Sun 01 Jan 2023 21:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 5.134.192.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b9:62:97:ee:b7:2b:57:30:bb:11:b5:a3:91:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 21:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4114fdc765c2e51107fd6e97e64cdd19fc2058cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:b3:83:ed:26:cb:8c:c2:ce:3b:5f:e0:33:
0d:9a:ff:40:e7:33:08:7e:00:9d:b5:c9:fb:24:60:
0a:6a:d4:b4:3b:1c:15:04:a2:68:e4:1a:87:c3:67:
a7:95:82:b6:51:d1:ba:bc:8b:c3:de:ef:c0:f2:89:
71:d2:35:ff:dd:c9:06:91:99:7d:44:22:50:2d:f5:
33:69:ef:be:da:94:d9:fb:c6:d8:c6:5a:e1:01:59:
65:c6:24:17:40:2f:d7:66:84:c9:7d:d6:11:46:ca:
f0:5e:7d:f8:d8:13:24:c1:83:dc:76:77:de:19:3f:
0f:3b:80:b5:0c:60:6c:90:a5:e1:45:58:46:fc:93:
38:58:16:8a:c8:4f:e3:0b:d7:34:37:90:d5:b6:0d:
90:17:41:0f:77:82:6c:71:25:32:9f:d1:74:8b:97:
1d:32:f3:b9:29:b7:d7:4a:0a:e0:a1:5d:83:0c:5f:
ee:8c:4f:3a:3c:19:e7:68:d0:69:31:26:cd:95:b0:
34:7e:6c:74:1e:cf:63:59:d1:5f:ea:08:9b:59:70:
a2:2e:35:3c:c0:58:91:93:7d:43:2f:cd:cc:b8:c1:
b4:44:9e:76:a9:39:63:26:4e:52:c9:1f:58:f2:b1:
84:f1:ba:f4:a9:c6:7d:74:74:1f:79:01:50:43:af:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:FD:C7:65:C2:E5:11:07:FD:6E:97:E6:4C:DD:19:FC:20:58:CB
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/QRT9x2XC5REH_W6X5kzdGfwgWMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
Signature Algorithm: sha256WithRSAEncryption
63:5b:55:0d:e1:9b:c5:9c:6f:5a:39:71:40:5e:13:a2:be:6d:
53:8e:f1:b6:40:ec:8b:c9:cf:ad:a1:8f:53:b7:ef:a0:b6:b2:
a7:d0:2c:ff:a7:3f:07:c9:57:4c:91:01:58:3e:53:fd:ce:e5:
fb:14:5b:01:4a:c2:3b:6f:aa:be:2a:2e:1a:d1:51:9a:1d:f9:
6b:3a:da:b5:d2:dd:bc:82:f3:40:f4:35:05:1e:ac:4e:70:62:
cd:e1:e9:98:d3:0e:ed:f7:d1:b6:61:d2:db:99:d4:27:54:b2:
a9:05:ad:e5:9b:ad:1b:ed:bd:70:93:a1:8d:06:b1:44:17:6d:
33:62:72:9a:82:22:4b:08:e3:6e:82:83:70:06:88:8b:43:42:
d7:53:16:a2:de:91:ad:57:87:c1:66:74:d5:1b:48:33:d6:cd:
e9:a6:03:6d:30:5e:1f:0e:d4:09:84:c8:ac:e8:2f:4d:ba:35:
16:49:92:b3:13:99:22:62:f3:f3:6c:a4:ce:c4:7e:95:03:be:
96:97:64:40:12:67:89:ef:a7:ef:bd:bc:b8:97:6d:a6:50:02:
50:9f:83:8b:98:89:80:ac:92:8b:0e:03:c3:fe:6e:7e:73:da:
d3:46:cb:bd:ef:dc:4c:35:1d:17:74:d2:f0:66:8d:f2:b2:38:
b4:bb:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:47:48 2025 by rpki-client