Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/Q2IP68Ur5ILYyx17nhBMkXHsAOk.roa
File: Q2IP68Ur5ILYyx17nhBMkXHsAOk.roa (raw, json)
Hash identifier: bqBdmyEphzwx+TREa6P/R4EbJ6xPzDrE1Fd+bio+0FA=
Subject key identifier: 43:62:0F:EB:C5:2B:E4:82:D8:CB:1D:7B:9E:10:4C:91:71:EC:00:E9
Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial: 1B24A8B7
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/Q2IP68Ur5ILYyx17nhBMkXHsAOk.roa
Signing time: Sat 01 Jan 2022 01:01:18 +0000
ROA not before: Sat 01 Jan 2022 01:01:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49605
IP address blocks: 185.87.240.0/22 maxlen: 22
217.112.96.0/20 maxlen: 20
31.13.136.0/21 maxlen: 21
185.8.148.0/22 maxlen: 22
2a05:c6c0::/29 maxlen: 29
2a02:e50::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455387319 (0x1b24a8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Validity
Not Before: Jan 1 01:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43620febc52be482d8cb1d7b9e104c9171ec00e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:04:f2:fc:97:63:bd:2a:45:64:8f:45:85:
01:f9:da:39:9e:a5:b5:b6:92:9a:31:34:a8:9a:0b:
c4:73:49:ec:60:6c:c4:ec:f4:58:cf:58:fd:4d:09:
09:5a:6f:d3:dc:17:1f:5f:f6:05:27:51:a3:d4:99:
8f:11:c6:4a:55:b7:20:3e:3b:25:70:71:a7:30:18:
3c:0f:a2:d5:40:44:75:df:4d:fa:2e:8c:5d:dc:81:
67:dd:75:57:aa:d6:05:6b:b7:9d:65:18:c1:bb:da:
0b:e6:04:19:37:4e:35:d8:88:ec:67:dc:bb:85:08:
b9:69:11:89:75:7b:d1:f5:86:66:8f:bf:01:9f:60:
b8:3b:c6:87:fa:fa:6e:f0:7a:18:39:8e:b1:5e:ec:
cd:dd:02:0b:d9:ec:b8:f0:ec:65:d7:61:37:03:6e:
fc:b3:ac:19:7d:d5:c3:bc:cf:9a:85:81:69:85:f0:
d1:bf:11:a1:2e:1c:1a:78:1e:04:c0:90:46:6b:c0:
fb:a1:dd:6d:a7:f7:ac:39:6b:c4:bf:e4:fa:c0:70:
92:8f:b7:ff:5e:1b:1c:80:d7:55:8e:ef:93:80:b7:
b4:47:ab:13:66:2e:8e:7e:51:3f:a5:a6:ac:f7:8c:
ec:34:38:76:7d:e1:33:b8:69:75:a2:06:08:c4:62:
16:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:62:0F:EB:C5:2B:E4:82:D8:CB:1D:7B:9E:10:4C:91:71:EC:00:E9
X509v3 Authority Key Identifier:
keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/Q2IP68Ur5ILYyx17nhBMkXHsAOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.136.0/21
185.8.148.0/22
185.87.240.0/22
217.112.96.0/20
IPv6:
2a02:e50::/32
2a05:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:4b:b2:c8:88:f8:a0:b4:17:14:94:dd:bf:cb:7e:d7:98:ac:
e7:28:33:c8:4d:0d:4f:26:0e:f0:60:f8:73:23:71:e9:31:ed:
03:89:13:db:10:86:5f:a7:81:cc:48:a6:ae:9a:11:8a:29:9a:
61:75:76:20:5c:3f:ae:9b:77:aa:77:3a:a2:2a:8d:d9:cd:eb:
df:96:ff:38:43:9a:7e:18:2f:8e:62:7d:46:22:f5:d0:df:60:
c1:b1:a0:cc:20:6c:d6:db:7a:98:e1:67:1b:23:6c:7b:75:15:
b5:ea:9c:4f:a6:4a:4d:29:60:12:1b:27:1e:7e:dc:95:9b:e3:
75:64:ff:b7:6d:7b:6b:54:e5:66:73:87:e3:81:a3:c8:ca:79:
33:ea:93:c8:8d:16:91:61:dc:4c:71:2f:6c:80:59:59:e3:2b:
d1:0c:05:3b:29:da:1c:f8:50:62:f0:45:2d:35:cf:fc:67:a8:
76:9d:e0:26:ce:b4:19:14:5c:c5:9d:6a:63:cd:57:0e:52:9f:
11:64:a1:d6:9a:5f:af:7e:a0:0e:4e:26:e3:ef:4c:ae:3b:2f:
50:ac:ee:ac:55:5e:2d:2e:46:57:0b:b7:81:86:96:1a:bc:87:
86:9c:9e:5f:8e:5f:72:df:6a:28:bb:ba:d0:f2:db:7c:84:51:
ea:f4:40:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:27 2025 by rpki-client