Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/qiGzRaiXlmnFcmW7cuNLElX_cXI.roa
File: qiGzRaiXlmnFcmW7cuNLElX_cXI.roa (raw, json)
Hash identifier: KYLI7fw5BofHBJBX48WaDYDlvig+Uj9dscM7WsN6Z90=
Subject key identifier: AA:21:B3:45:A8:97:96:69:C5:72:65:BB:72:E3:4B:12:55:FF:71:72
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 01856F024C5BCFF38097D3323D484AA9C66A
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/qiGzRaiXlmnFcmW7cuNLElX_cXI.roa
Signing time: Sun 01 Jan 2023 20:24:59 +0000
ROA not before: Sun 01 Jan 2023 20:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.34.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4c:5b:cf:f3:80:97:d3:32:3d:48:4a:a9:c6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 1 20:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa21b345a8979669c57265bb72e34b1255ff7172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4f:95:68:62:39:29:1d:6c:8e:3b:b6:df:bf:
8f:94:b7:15:9b:28:e2:59:dd:48:aa:63:f1:b9:54:
1c:6d:f5:01:7d:a6:70:cd:07:36:58:08:bf:14:65:
99:5c:3d:a9:57:98:8a:aa:24:06:a1:b1:19:45:60:
05:0f:d0:b9:bd:56:72:29:2b:83:fa:cb:be:7f:2a:
cc:d9:d3:db:66:c0:79:2e:0a:19:eb:3f:9a:5d:3a:
ea:89:51:db:d3:13:3a:04:c2:a1:ed:69:fb:48:14:
f4:20:64:12:bb:4b:dc:70:4f:fe:67:b6:18:eb:db:
77:89:ed:eb:7d:1a:f3:d5:04:1a:0f:3d:28:82:98:
ae:40:38:4f:5e:88:37:ce:b8:8e:ba:25:eb:fc:54:
bf:a7:c1:c5:c7:35:d6:bb:42:cd:62:fb:27:9e:a9:
20:62:a8:ff:b6:4f:3b:c1:bb:5d:29:26:cf:95:6d:
4c:f1:68:cb:00:fe:d4:f9:4d:39:6d:1d:19:9f:6b:
67:6b:e6:67:21:4b:f2:39:d4:3a:e7:aa:c0:72:a4:
0c:b1:07:fe:ec:1e:bf:26:6d:79:56:73:b1:3a:d2:
3c:90:f7:06:1c:36:72:a2:d2:18:89:0b:90:e3:5c:
a5:1b:e9:d7:7b:83:a1:a1:31:88:63:38:52:e8:49:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:21:B3:45:A8:97:96:69:C5:72:65:BB:72:E3:4B:12:55:FF:71:72
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/qiGzRaiXlmnFcmW7cuNLElX_cXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.56.0/22
Signature Algorithm: sha256WithRSAEncryption
19:35:17:f6:5b:a3:ff:ff:bb:2f:0c:c4:ef:0d:32:b1:97:e8:
e4:fa:9b:a5:b1:91:c6:2e:d1:fb:28:f3:7d:85:12:c2:44:8b:
3b:c8:3a:9c:ef:e8:42:fa:cb:4f:d8:24:03:c6:be:b2:71:77:
7c:d1:3e:75:b5:e1:03:20:dc:f9:b2:0a:44:6c:bc:20:3c:b7:
00:09:13:e3:d9:9d:7a:00:c6:86:30:12:cb:95:38:2e:cc:21:
1b:da:8c:81:ba:e6:f9:2c:41:d9:79:13:fb:5c:03:3a:86:59:
b6:bd:bd:16:08:f5:27:49:b0:b5:0c:94:aa:2c:d4:26:c1:8b:
2e:b2:dd:55:40:39:85:db:ef:31:8e:cb:75:6f:d7:87:64:11:
0d:cb:b4:8b:3c:05:15:21:d3:a1:fe:11:d6:e8:e6:d0:1c:80:
ff:0d:d1:d6:af:9a:5f:c6:f5:d1:33:85:12:2b:0b:ba:24:19:
e0:de:37:21:1f:e8:fe:fa:20:ec:22:ca:71:58:58:c4:72:e3:
0e:82:54:7d:f1:ea:f0:32:14:67:aa:79:98:9f:26:79:ee:f3:
d0:bb:1b:9d:db:2f:01:81:11:0c:b1:9b:15:8b:0b:20:a9:56:
c5:7f:e5:0b:18:0e:9e:ae:22:9f:f4:77:3f:f9:6c:b1:f0:ea:
e5:da:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:30:30 2025 by rpki-client