Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/QV9gPtJ53uRnL0jHLnLJfXNyl3k.roa
File: QV9gPtJ53uRnL0jHLnLJfXNyl3k.roa (raw, json)
Hash identifier: YQbQ/Gh4VVUq8r6AbBDs7O+Q6B1Ny+vNZr7ko6HEo5U=
Subject key identifier: 41:5F:60:3E:D2:79:DE:E4:67:2F:48:C7:2E:72:C9:7D:73:72:97:79
Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial: 0BC1A306
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/QV9gPtJ53uRnL0jHLnLJfXNyl3k.roa
Signing time: Sat 01 Jan 2022 03:53:52 +0000
ROA not before: Sat 01 Jan 2022 03:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63268
IP address blocks: 193.201.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197239558 (0xbc1a306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Validity
Not Before: Jan 1 03:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=415f603ed279dee4672f48c72e72c97d73729779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:64:e2:10:0e:fb:ba:98:b6:db:f0:68:11:
a9:e4:da:49:cf:59:c6:a9:35:9c:2a:5c:da:df:f1:
b3:19:1f:f7:f8:ec:37:cb:f9:40:fe:2d:72:b7:3a:
d1:5e:e3:a1:99:8e:73:e7:e1:da:6f:88:47:55:85:
39:6a:b2:9a:09:94:16:24:13:71:c8:db:4f:66:86:
4a:ef:c7:a3:eb:61:ad:b5:0c:99:0f:58:e4:c6:70:
0b:14:d4:fd:b8:76:09:9d:0e:43:bf:4d:04:a0:de:
93:cc:74:d4:d4:bc:86:23:47:79:d6:95:47:3f:d0:
a3:17:22:ae:d1:ed:f5:7f:a2:55:b7:91:f3:11:d5:
40:64:58:9d:b1:43:08:0e:30:7c:6c:6a:a2:b0:bc:
25:f5:14:bf:c1:a8:cc:6f:4f:a7:6f:e6:c7:35:d8:
4c:6c:c2:e2:c3:04:3c:8c:fe:a2:a4:42:fa:ad:34:
20:29:14:d9:dc:0e:80:a3:da:e3:8b:85:f2:88:55:
9b:59:0d:99:95:d4:11:2f:3a:72:d8:6a:6b:f6:f6:
10:1c:5c:da:76:50:aa:30:e0:e8:ea:6e:7a:f6:04:
59:eb:16:a0:0b:fa:8e:1d:c1:65:d1:9d:f3:30:cc:
15:44:61:20:c4:e3:30:9a:dd:fe:44:7d:db:22:6e:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:60:3E:D2:79:DE:E4:67:2F:48:C7:2E:72:C9:7D:73:72:97:79
X509v3 Authority Key Identifier:
keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/QV9gPtJ53uRnL0jHLnLJfXNyl3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:c5:d3:bb:ac:1f:52:37:28:99:d3:9a:4a:93:8d:41:ae:03:
2f:1d:60:c2:5e:90:9f:f9:a1:73:38:20:b5:93:13:67:49:2d:
d8:60:fa:4d:b9:13:cb:5d:b2:4e:d1:40:7c:2f:5e:f4:79:85:
9c:9f:11:9c:1f:13:0e:be:42:94:08:22:f8:c7:9c:60:0a:5f:
2b:ec:c3:26:c5:4f:8f:3d:8e:76:7c:a7:86:6e:54:ce:02:5e:
04:72:73:f5:af:6b:24:3b:ed:23:7f:ba:62:f2:1b:5e:c8:f0:
7f:9c:11:79:36:a5:73:31:0e:a1:4b:7a:31:77:7c:ff:2a:27:
e4:e0:d2:8c:82:60:a2:0d:69:a5:b3:66:6d:fe:16:c6:71:f1:
0f:a7:4e:08:c3:45:ea:64:65:0d:d5:a6:9a:80:c5:95:47:c2:
b3:19:ae:5a:fa:73:1f:9a:c2:aa:20:7a:86:fd:50:59:3f:ba:
56:a9:ec:dd:6b:4f:2f:d1:f0:b0:2b:d8:30:98:fc:ee:fa:df:
00:f1:53:3a:3c:11:e4:35:67:26:01:a9:03:73:41:5f:05:fe:
21:4b:06:06:17:b1:d7:df:c0:9f:a2:45:ad:28:48:27:0c:c4:
6c:e2:ad:ae:0b:5b:b4:05:02:cb:0d:8b:3e:fd:9c:38:f1:15:
7e:36:6d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:59 2025 by rpki-client