Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QKUUoqu1yoSFs0eLG7Hdrq478_k.roa
File: QKUUoqu1yoSFs0eLG7Hdrq478_k.roa (raw, json)
Hash identifier: BM4VBp9chEMbChnw3xvJCnmSWIhF+dEqg5bnzO8BXgI=
Subject key identifier: 40:A5:14:A2:AB:B5:CA:84:85:B3:47:8B:1B:B1:DD:AE:AE:3B:F3:F9
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189C630DF7197776630B5F816A0A9802FAB
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QKUUoqu1yoSFs0eLG7Hdrq478_k.roa
Signing time: Sat 05 Aug 2023 14:53:58 +0000
ROA not before: Sat 05 Aug 2023 14:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.49.0/24 maxlen: 24
5.180.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:30:df:71:97:77:66:30:b5:f8:16:a0:a9:80:2f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 5 14:53:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40a514a2abb5ca8485b3478b1bb1ddaeae3bf3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c3:96:ba:ab:a4:9f:41:f2:65:51:e3:1e:e0:
84:62:54:81:ea:cf:0f:c9:bc:46:7f:21:97:c3:90:
fe:86:25:56:a9:f7:fb:1f:e6:dc:9d:96:a0:79:01:
5a:25:53:be:6c:97:54:dc:ca:2f:6b:46:65:7d:70:
44:8b:c8:a2:74:9d:22:05:76:f7:ff:db:e3:2c:f0:
1a:f1:1e:43:e4:60:9d:b5:4a:80:3d:b3:5c:c3:ec:
1a:2c:f1:6f:62:91:e9:05:2c:18:52:70:0c:8c:f4:
0e:80:83:dd:74:ef:65:a0:66:fc:a1:99:57:34:29:
82:e0:bf:b9:f8:fe:85:2f:cb:16:72:fd:54:c0:1e:
bf:b5:48:58:2a:5f:83:d0:ff:f4:4f:ad:bd:38:c8:
c2:fe:aa:aa:0c:7a:78:13:fd:de:4a:c0:db:16:2f:
2c:41:5c:ff:67:67:a4:d9:0d:a3:59:10:f3:3b:5d:
6d:7c:0d:3a:b6:e4:06:e0:ac:4b:8c:8c:dc:e9:b9:
02:74:03:bf:e9:a8:f9:0d:58:67:1c:a1:09:1f:2f:
69:74:d2:42:71:1a:74:9a:33:73:e7:e0:5e:70:04:
af:b4:24:e3:06:13:ba:24:58:a4:9f:f6:6d:cf:0c:
e7:36:82:f5:f8:bd:d8:88:04:c7:a9:0c:a8:f3:24:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:14:A2:AB:B5:CA:84:85:B3:47:8B:1B:B1:DD:AE:AE:3B:F3:F9
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QKUUoqu1yoSFs0eLG7Hdrq478_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.49.0/24
5.180.82.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f0:2b:d7:8b:ce:3b:aa:1b:e3:10:29:b4:a2:39:c6:3a:57:
9d:60:3b:61:a2:d6:c3:7f:01:3a:b4:bb:e1:2d:9e:8a:db:2e:
9e:b1:45:e6:43:1c:0b:91:c9:a1:28:5f:98:cc:20:83:a4:b2:
25:20:93:88:2c:d6:15:9d:35:57:79:23:33:20:39:70:39:26:
b7:9b:45:07:f1:9b:7d:ad:d8:1f:1c:74:57:16:b2:0d:57:b0:
7e:24:a1:42:13:b8:a3:ed:09:dd:78:0a:5a:be:b1:33:c5:1b:
c2:9b:d9:e4:cc:e7:cb:3c:89:00:7b:23:ae:de:bc:8b:3a:13:
e4:ae:44:21:6f:1a:b9:43:c4:3e:ac:d9:d7:80:45:d4:b2:4b:
66:d9:7b:d1:b4:53:0a:0d:ce:1e:93:8a:91:04:b2:fd:ed:02:
14:53:f1:42:35:b2:62:d0:14:c8:5e:0a:06:04:3b:5b:f9:29:
49:4e:6b:d9:07:84:64:cf:eb:37:92:37:5d:9f:23:91:cd:92:
b5:a0:c5:9e:31:d1:ee:a0:ea:f3:19:33:29:01:50:c9:41:4e:
fc:70:29:cc:91:46:c2:d0:b5:c8:f0:39:9b:05:19:f1:87:d7:
4f:09:cb:6b:28:f2:06:6a:2f:8f:0d:e1:b7:6f:e8:64:3e:92:
f7:83:a7:1c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYnGMN9xl3dmMLX4FqCpgC+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwODA1MTQ1MzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGE1MTRhMmFiYjVjYTg0ODViMzQ3OGIxYmIxZGRhZWFlM2JmM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMOWuqukn0HyZVHjHuCEYlSB6s8P
ybxGfyGXw5D+hiVWqff7H+bcnZageQFaJVO+bJdU3Mova0ZlfXBEi8iidJ0iBXb3
/9vjLPAa8R5D5GCdtUqAPbNcw+waLPFvYpHpBSwYUnAMjPQOgIPddO9loGb8oZlX
NCmC4L+5+P6FL8sWcv1UwB6/tUhYKl+D0P/0T629OMjC/qqqDHp4E/3eSsDbFi8s
QVz/Z2ek2Q2jWRDzO11tfA06tuQG4KxLjIzc6bkCdAO/6aj5DVhnHKEJHy9pdNJC
cRp0mjNz5+BecASvtCTjBhO6JFikn/ZtzwznNoL1+L3YiATHqQyo8yQSSwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEClFKKrtcqEhbNHixux3a6uO/P5MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvUUtVVW9xdTF5b1NGczBlTEc3SGRycTQ3OF9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbQxAwQA
BbRSMA0GCSqGSIb3DQEBCwUAA4IBAQAn8CvXi847qhvjECm0ojnGOledYDthotbD
fwE6tLvhLZ6K2y6esUXmQxwLkcmhKF+YzCCDpLIlIJOILNYVnTVXeSMzIDlwOSa3
m0UH8Zt9rdgfHHRXFrINV7B+JKFCE7ij7QndeApavrEzxRvCm9nkzOfLPIkAeyOu
3ryLOhPkrkQhbxq5Q8Q+rNnXgEXUsktm2XvRtFMKDc4ek4qRBLL97QIUU/FCNbJi
0BTIXgoGBDtb+SlJTmvZB4Rkz+s3kjddnyORzZK1oMWeMdHuoOrzGTMpAVDJQU78
cCnMkUbC0LXI8DmbBRnxh9dPCctrKPIGai+PDeG3b+hkPpL3g6cc
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:30 2025 by rpki-client