Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QjNfT1o-ckh2OzKJuF7oqmStoBg.roa
File: QjNfT1o-ckh2OzKJuF7oqmStoBg.roa (raw, json)
Hash identifier: VKGBq5CJjSQRg8a4eO1s40lN6M8QosNTj0oI2eqdR0c=
Subject key identifier: 42:33:5F:4F:5A:3E:72:48:76:3B:32:89:B8:5E:E8:AA:64:AD:A0:18
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188BDEF71677379951F8F18608919A65F0B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QjNfT1o-ckh2OzKJuF7oqmStoBg.roa
Signing time: Thu 15 Jun 2023 07:22:45 +0000
ROA not before: Thu 15 Jun 2023 07:22:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.41.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:ef:71:67:73:79:95:1f:8f:18:60:89:19:a6:5f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 15 07:22:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42335f4f5a3e7248763b3289b85ee8aa64ada018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:ce:ce:fb:a6:65:08:86:2c:e4:a8:23:c1:
bb:fc:af:3b:00:2c:c3:7f:7b:20:6e:39:60:68:50:
47:4f:b4:ba:8c:73:17:38:f8:df:16:5f:b4:89:49:
1f:1e:46:0f:f5:ef:8e:34:79:0d:fd:56:a0:d7:16:
ea:3e:ae:1c:34:50:1c:46:67:59:0f:6c:22:e4:3c:
d9:95:61:27:91:1b:14:ce:55:0a:37:e8:39:1e:18:
94:62:a7:83:73:5a:00:91:4b:ee:9b:fc:71:06:ff:
67:8e:01:41:67:77:13:74:ef:bd:85:4b:38:c3:1a:
e2:13:e9:9a:dd:29:46:12:71:ab:30:0d:da:64:47:
bf:33:51:23:08:d0:16:42:e1:ed:8f:5d:61:c3:6c:
a0:92:60:e9:4b:1c:a1:21:83:e6:4e:b8:39:c6:25:
f2:d5:e4:ba:31:8b:75:6a:b9:ca:55:19:58:74:08:
2f:79:7e:23:c2:c4:c7:e4:fe:42:2c:ab:c0:bb:b8:
67:7c:82:50:55:52:31:1a:88:61:1d:13:bf:14:4b:
5d:83:44:2d:75:af:fe:7d:6f:d1:69:ea:eb:24:a3:
01:bb:d9:f3:00:c4:38:ab:fe:a2:72:a1:f4:57:5a:
85:32:de:b7:cb:29:3f:3b:a3:93:c8:6d:f1:4d:2e:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:5F:4F:5A:3E:72:48:76:3B:32:89:B8:5E:E8:AA:64:AD:A0:18
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QjNfT1o-ckh2OzKJuF7oqmStoBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.69.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e5:ef:87:76:51:b1:76:f3:fa:12:4b:82:88:5f:bd:e0:14:
d5:8a:62:8a:10:b8:df:db:23:60:45:6b:ee:e1:a4:f5:89:1a:
8d:71:e5:20:b7:c2:e7:14:be:23:d7:fa:a4:a5:9d:de:b0:7c:
a8:fb:31:75:98:1f:c8:41:3b:f7:e1:c6:2a:11:3c:91:d0:b5:
c2:5d:e1:6d:63:2a:6e:d0:3c:88:a2:d5:08:43:07:28:d7:87:
cd:a3:4e:fd:00:78:b4:34:8d:30:01:87:5e:6c:a2:8d:3e:e9:
76:98:eb:59:e3:e8:83:67:85:35:60:76:c2:a7:76:97:93:5d:
be:c6:c4:95:be:d1:fd:53:0f:9c:a2:c9:68:1a:23:d0:51:f2:
8b:da:f8:d1:e4:7a:50:00:c9:fb:77:9b:e3:d8:50:73:35:71:
76:67:8e:89:2c:18:f7:5e:9c:75:a8:fd:da:1d:15:94:a0:f8:
15:b5:28:a4:44:a3:ec:f6:c2:d8:6f:24:7c:3f:bf:e1:f9:4f:
aa:1d:fe:b5:d3:7d:99:9d:90:b3:b5:40:84:95:5a:2f:f7:25:
ce:9a:ff:b3:b6:ef:41:21:54:1c:bb:9f:65:6a:6b:87:36:e3:
76:d3:5c:fe:07:17:3b:dc:aa:91:c1:e3:9c:67:89:ee:4c:9a:
69:77:9f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:42 2025 by rpki-client