Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/RQhWUVXwLZPzMi261w2wqQd_RT8.roa
File: RQhWUVXwLZPzMi261w2wqQd_RT8.roa (raw, json)
Hash identifier: b24Nwao6IV3YIrXT+HQPSNxKlOar++o0ycS8qw7neIE=
Subject key identifier: 45:08:56:51:55:F0:2D:93:F3:32:2D:BA:D7:0D:B0:A9:07:7F:45:3F
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 33DBE6CC
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/RQhWUVXwLZPzMi261w2wqQd_RT8.roa
Signing time: Sat 01 Jan 2022 04:55:31 +0000
ROA not before: Sat 01 Jan 2022 04:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12777
IP address blocks: 193.255.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870049484 (0x33dbe6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4508565155f02d93f3322dbad70db0a9077f453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:3e:70:12:2a:97:e4:c7:b8:a1:b1:d0:dc:
aa:2f:33:5b:af:3c:d0:59:98:db:8b:f3:71:83:b6:
1f:86:21:1e:7e:02:85:3c:20:87:a8:89:91:a1:fe:
97:df:c3:53:e2:e9:e1:ae:33:b8:29:03:f9:e2:6e:
8f:72:bd:9d:18:76:1b:3f:8f:c3:1e:70:8d:2e:cf:
1b:50:4a:a1:e7:af:fe:6b:ec:44:fd:17:42:29:03:
55:25:ff:37:06:5e:af:b3:57:79:24:77:c9:96:1b:
75:52:aa:00:09:5a:a9:86:c5:d1:17:cf:34:2c:ae:
c5:4b:5f:d2:76:02:78:c0:d7:fb:6c:90:db:b3:c1:
a2:28:3c:46:8a:12:e8:83:59:de:4c:ee:2c:28:b8:
d1:33:24:a0:5b:d1:31:e7:81:45:46:8e:6d:4b:65:
9c:7f:ea:cd:86:19:6e:cd:a8:3c:0e:5d:16:dc:2b:
ae:bc:70:fd:6e:c6:f8:10:9a:17:da:4a:34:df:b7:
d9:ec:33:f6:70:28:87:e9:70:81:a1:f0:ef:ad:6b:
f0:61:99:ac:db:15:f5:a1:b8:89:aa:bd:3c:99:e5:
8b:f2:f5:35:82:e4:00:f2:c4:32:23:5c:e5:1a:74:
09:a8:8f:d1:1d:41:90:b9:f5:95:8c:ba:a5:e5:f0:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:56:51:55:F0:2D:93:F3:32:2D:BA:D7:0D:B0:A9:07:7F:45:3F
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/RQhWUVXwLZPzMi261w2wqQd_RT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.44.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:dd:d9:67:7b:5d:78:be:52:1b:7f:95:f8:a7:e9:ee:b3:1f:
94:64:61:9b:0a:1a:44:02:db:d0:8f:ee:d0:c4:8d:a5:bb:03:
74:93:83:1a:d4:e2:b3:d2:83:7b:2b:a2:2f:3e:22:61:ed:cf:
3f:ec:8a:c6:79:94:d9:1a:c5:d6:38:75:9f:86:a4:0c:bf:a3:
55:aa:de:80:9d:11:d1:60:d2:8b:73:c1:98:b1:b2:e3:7e:8d:
92:1c:7c:6d:d1:7f:f0:ac:1b:b5:f3:cb:e4:5e:f1:e0:98:72:
01:cd:52:0b:9d:4f:95:e6:8c:c0:ca:39:26:de:25:77:e0:7e:
37:c0:d6:f3:57:90:1d:aa:c7:7b:7c:1a:c8:97:56:70:3f:08:
56:b8:12:75:76:06:3f:9d:db:d3:1e:68:c8:c9:15:36:a4:74:
22:8d:89:e0:46:cc:1e:99:bc:a0:a1:35:ec:5d:9d:86:53:8f:
1a:87:11:ae:27:fe:26:6c:35:74:ae:5f:7d:3c:bb:ce:8a:50:
f1:3f:c3:09:0e:4a:0f:72:eb:64:38:00:7a:fd:02:0e:dd:5a:
05:ec:0f:e1:8c:d0:e9:98:c0:50:a1:dd:3f:6b:3e:a2:8e:32:
f3:1c:70:41:bd:0b:e2:af:e1:6a:8c:da:9f:01:f3:03:f3:1c:
84:1d:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:03 2025 by rpki-client