Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/qmqmFRvzbtvUKkBPK9dbKIjQcRk.roa
File: qmqmFRvzbtvUKkBPK9dbKIjQcRk.roa (raw, json)
Hash identifier: RUxx1vS0nGgE5+MFPCf84zNNBr4FHhzsEVYanjx14LI=
Subject key identifier: AA:6A:A6:15:1B:F3:6E:DB:D4:2A:40:4F:2B:D7:5B:28:88:D0:71:19
Certificate issuer: /CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Certificate serial: 01856FD510C996B86AACDEB9BFB752B7CEF2
Authority key identifier: 88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/qmqmFRvzbtvUKkBPK9dbKIjQcRk.roa
Signing time: Mon 02 Jan 2023 00:15:12 +0000
ROA not before: Mon 02 Jan 2023 00:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62214
IP address blocks: 185.112.156.0/22 maxlen: 22
2a02:6080::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:10:c9:96:b8:6a:ac:de:b9:bf:b7:52:b7:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Validity
Not Before: Jan 2 00:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa6aa6151bf36edbd42a404f2bd75b2888d07119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:9f:4b:9c:9d:03:02:46:c0:c8:c3:b5:21:
bb:a1:0d:3d:7b:85:f5:32:46:72:c2:70:45:9e:65:
76:e4:b7:15:44:4c:13:42:15:01:8e:fb:80:38:26:
24:3d:14:b0:37:1d:f1:ea:ba:b5:4b:58:01:12:47:
1c:f4:88:67:cf:4e:ed:ae:e8:bd:a0:16:da:14:f2:
6f:b8:96:cf:f8:95:0a:00:ea:19:3a:be:d8:10:50:
b5:77:61:3d:16:1e:85:40:b6:d6:5d:d9:9c:53:84:
81:dc:3d:72:fa:6f:fa:24:7e:8f:c9:a2:a3:fd:88:
27:98:d9:c9:db:04:8f:09:7c:cc:48:43:81:74:a8:
87:d7:85:ed:11:aa:aa:df:18:74:29:8b:16:66:1a:
e6:12:d8:bd:d2:17:d1:f8:36:56:2d:e7:20:eb:68:
93:e8:5c:5e:4c:69:4e:4b:07:75:e5:d0:c5:ed:8d:
e6:82:fa:7c:1b:1f:ee:d9:b5:0e:16:d0:4f:63:97:
d0:4f:f9:4b:6f:9f:72:44:f3:9e:7e:84:62:06:af:
47:b9:f1:39:3e:09:68:64:be:9e:3f:50:b6:85:d2:
d2:b4:db:b9:04:29:68:eb:aa:36:8d:b8:85:97:09:
8d:ed:07:10:8f:5d:9e:ff:7f:39:d4:29:ae:b3:58:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6A:A6:15:1B:F3:6E:DB:D4:2A:40:4F:2B:D7:5B:28:88:D0:71:19
X509v3 Authority Key Identifier:
keyid:88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/qmqmFRvzbtvUKkBPK9dbKIjQcRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.156.0/22
IPv6:
2a02:6080::/32
Signature Algorithm: sha256WithRSAEncryption
68:f1:f8:a6:a7:29:2c:77:4a:bf:64:d0:5e:fc:70:80:96:b0:
c4:4b:c3:28:c2:1d:e3:78:e5:79:57:53:0a:01:cc:7d:67:b7:
29:12:ab:d2:68:ea:ff:a1:c9:79:9f:0d:50:5e:b8:34:87:da:
bc:1c:f5:39:da:ce:bc:36:9b:03:b0:26:68:63:93:ae:69:b1:
33:45:2c:37:70:c1:5f:4d:4d:7a:1a:81:aa:a1:d2:28:a3:f8:
b3:ff:ce:03:2a:c4:3d:93:83:c0:79:d0:50:fc:e7:06:4c:41:
d5:6e:20:75:fd:c6:cb:2c:c5:a1:8d:42:4c:4c:8f:df:98:7f:
9e:ad:9e:33:21:06:fa:64:db:32:88:45:b8:c4:64:97:f8:48:
37:45:d7:24:9c:86:3f:63:e8:22:b2:52:85:53:b9:c1:67:e6:
e2:dd:24:d4:50:46:9b:99:59:01:c8:8b:26:c3:b7:53:33:aa:
a0:f7:c5:79:02:2d:4e:5c:d9:c7:79:2d:ab:f8:b4:22:c6:d7:
84:d0:84:60:81:ec:7e:66:2b:95:e9:f5:11:e0:0a:4c:ad:b6:
ba:59:30:99:5a:1f:97:aa:12:4a:00:d9:a4:46:50:36:90:06:
16:e8:df:85:4d:98:93:2f:f1:03:53:17:e6:a6:ca:1e:7c:8f:
b3:32:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:23 2025 by rpki-client