Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/qdMi7R9DeT1sk31lH_P2X5wKBpQ.roa
File: qdMi7R9DeT1sk31lH_P2X5wKBpQ.roa (raw, json)
Hash identifier: N0YHsdN/1yMUrohqZAz149aP4H7jqaKP/zc0higPo6o=
Subject key identifier: A9:D3:22:ED:1F:43:79:3D:6C:93:7D:65:1F:F3:F6:5F:9C:0A:06:94
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018921B707D521F75D098F546FD9D35EDD54
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/qdMi7R9DeT1sk31lH_P2X5wKBpQ.roa
Signing time: Tue 04 Jul 2023 16:23:10 +0000
ROA not before: Tue 04 Jul 2023 16:23:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52067
IP address blocks: 185.191.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:b7:07:d5:21:f7:5d:09:8f:54:6f:d9:d3:5e:dd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 4 16:23:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9d322ed1f43793d6c937d651ff3f65f9c0a0694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:a3:7d:e6:e3:e4:c2:d1:1e:04:a4:0f:d8:
c2:42:41:a7:31:c7:b5:70:a8:77:9b:52:42:fb:9d:
4e:b7:af:d8:35:c6:87:f7:18:5d:07:d1:8c:b8:92:
b4:2b:3e:fa:4e:5c:93:f9:37:e0:db:b3:d6:76:2e:
29:6b:4a:59:14:4b:65:9d:77:b4:90:02:6f:a1:54:
93:81:3b:ac:a9:22:7e:1d:7c:28:b6:19:22:64:06:
20:63:da:c0:7e:d4:c9:03:69:58:cb:f2:56:c9:1d:
4b:3f:f6:ff:7a:ba:90:13:fd:6f:57:2a:a3:ae:10:
2e:90:10:39:b2:6a:58:74:a8:a5:d2:b4:ee:74:21:
01:57:c5:9f:f4:0d:fd:06:e8:d5:52:a5:31:f6:04:
b3:a6:b4:d7:46:c4:bd:af:b8:d9:80:09:10:a5:df:
e9:a4:ef:dc:d5:6b:01:26:82:91:ee:45:50:b2:5a:
da:9a:fe:d2:d1:f5:7e:56:3e:15:7d:94:4c:81:c7:
de:82:50:9d:e6:f0:48:45:1c:59:c4:f9:3e:a6:ae:
db:ec:b2:1d:fd:ee:5e:5a:f5:41:ca:f3:9e:b1:76:
21:8b:de:4e:16:e3:80:7b:b8:0c:02:e7:dd:62:46:
5f:c1:d3:07:1d:f6:b5:40:2f:5c:95:0b:6e:a8:ec:
91:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D3:22:ED:1F:43:79:3D:6C:93:7D:65:1F:F3:F6:5F:9C:0A:06:94
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/qdMi7R9DeT1sk31lH_P2X5wKBpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.141.0/24
Signature Algorithm: sha256WithRSAEncryption
28:71:d3:56:6d:62:e7:c4:02:25:24:7b:df:2f:5b:80:c3:18:
07:1d:8d:d2:86:90:e5:c2:af:41:d7:80:ab:1e:09:24:60:46:
ca:9f:b8:b7:00:e5:c0:15:26:e1:5f:89:82:a9:98:fc:c1:97:
7a:49:54:dc:e7:f1:33:70:e7:8d:e1:77:6d:f4:d3:fc:93:1a:
86:b2:89:2b:13:a5:68:4a:6e:cf:33:90:31:02:99:87:9c:3d:
ed:ec:12:40:16:12:7e:ea:cb:62:c5:d5:33:15:0e:af:5c:86:
37:3a:c1:04:15:e8:17:e9:a0:63:4a:5b:80:43:2c:06:96:6c:
08:5c:c4:64:06:f1:45:28:54:78:cb:f8:27:99:e1:f7:2f:76:
9f:d4:a8:32:8f:f4:f1:db:6e:4a:59:54:61:01:eb:07:c2:b5:
aa:38:76:96:6d:2a:32:ff:ad:98:4c:7e:57:99:7c:ca:05:69:
6d:2f:a1:35:ef:e5:b2:2b:0b:9b:b7:60:68:51:cd:9a:17:06:
ca:16:ee:5a:2c:44:48:8c:0d:50:75:46:0f:8c:fb:47:c5:ce:
51:d4:c3:f8:35:68:a3:d6:cf:97:c9:ea:f5:f1:a2:ce:25:9d:
8c:6f:cc:dc:d3:87:2b:c4:28:b7:f7:6d:48:d6:a4:f1:f4:26:
03:6e:0f:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkhtwfVIfddCY9Ub9nTXt1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjMwNzA0MTYyMzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWQzMjJlZDFmNDM3OTNkNmM5MzdkNjUxZmYzZjY1ZjljMGEwNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiujfebj5MLRHgSkD9jCQkGnMce1
cKh3m1JC+51Ot6/YNcaH9xhdB9GMuJK0Kz76TlyT+Tfg27PWdi4pa0pZFEtlnXe0
kAJvoVSTgTusqSJ+HXwothkiZAYgY9rAftTJA2lYy/JWyR1LP/b/erqQE/1vVyqj
rhAukBA5smpYdKil0rTudCEBV8Wf9A39BujVUqUx9gSzprTXRsS9r7jZgAkQpd/p
pO/c1WsBJoKR7kVQslramv7S0fV+Vj4VfZRMgcfeglCd5vBIRRxZxPk+pq7b7LId
/e5eWvVByvOesXYhi95OFuOAe7gMAufdYkZfwdMHHfa1QC9clQtuqOyRDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKnTIu0fQ3k9bJN9ZR/z9l+cCgaUMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvcWRNaTdSOURlVDFzazMxbEhfUDJYNXdLQnBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub+NMA0G
CSqGSIb3DQEBCwUAA4IBAQAocdNWbWLnxAIlJHvfL1uAwxgHHY3ShpDlwq9B14Cr
HgkkYEbKn7i3AOXAFSbhX4mCqZj8wZd6SVTc5/EzcOeN4Xdt9NP8kxqGsokrE6Vo
Sm7PM5AxApmHnD3t7BJAFhJ+6stixdUzFQ6vXIY3OsEEFegX6aBjSluAQywGlmwI
XMRkBvFFKFR4y/gnmeH3L3af1Kgyj/Tx225KWVRhAesHwrWqOHaWbSoy/62YTH5X
mXzKBWltL6E17+WyKwubt2BoUc2aFwbKFu5aLERIjA1QdUYPjPtHxc5R1MP4NWij
1s+Xyer18aLOJZ2Mb8zc04crxCi3921I1qTx9CYDbg8G
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:22 2025 by rpki-client