Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/qom3GURNdiP0KYsYCWhUwXIgCEM.roa
File: qom3GURNdiP0KYsYCWhUwXIgCEM.roa (raw, json)
Hash identifier: nF1mQCN1pwocXsekpdnZzXfshgZg9/S8v5cuBAnU/DY=
Subject key identifier: AA:89:B7:19:44:4D:76:23:F4:29:8B:18:09:68:54:C1:72:20:08:43
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018571D7BFC8FA94943FCFA9EEA0F08F5BEE
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/qom3GURNdiP0KYsYCWhUwXIgCEM.roa
Signing time: Mon 02 Jan 2023 09:37:22 +0000
ROA not before: Mon 02 Jan 2023 09:37:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47886
IP address blocks: 185.52.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:bf:c8:fa:94:94:3f:cf:a9:ee:a0:f0:8f:5b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 09:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa89b719444d7623f4298b18096854c172200843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:04:2f:70:51:a3:0b:76:b6:df:63:87:25:
7d:da:41:5e:72:89:f8:cc:ea:32:d4:48:d1:7a:49:
ee:05:03:9a:3b:b1:11:56:d6:f1:e9:01:f9:69:2d:
48:c3:94:a0:f0:a6:08:da:4d:e2:c3:52:c3:54:7e:
7a:4c:a9:4f:8e:1f:bf:f4:42:4d:6f:b0:6d:75:40:
a5:d0:85:06:1a:fb:7b:d3:f7:29:e2:91:00:c0:58:
ec:fe:21:83:8e:20:d5:0e:3f:de:f1:1f:98:57:78:
df:db:91:52:87:c7:94:b8:73:ce:09:71:eb:1a:30:
43:0d:63:2d:46:c6:a2:a3:19:12:d5:0b:5e:72:3f:
e2:b0:36:10:8f:92:96:d4:8b:29:27:6b:93:d5:97:
99:7b:82:28:2d:92:68:84:34:5b:d6:50:89:91:b1:
e3:fb:f3:29:a9:82:36:6f:5a:f6:56:27:86:45:de:
da:82:75:bd:93:3b:6f:d2:64:d0:2f:53:e1:e6:e1:
5c:57:f5:22:55:ae:1c:78:6b:1f:1e:2f:32:4c:75:
92:44:a4:81:60:f5:3c:67:c6:f3:7c:99:f5:de:45:
95:dc:94:72:d1:b1:0f:32:37:d6:09:14:90:37:cb:
c9:4e:d1:f2:d9:2b:9c:6f:ac:cc:21:b7:ef:c1:d6:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:89:B7:19:44:4D:76:23:F4:29:8B:18:09:68:54:C1:72:20:08:43
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/qom3GURNdiP0KYsYCWhUwXIgCEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.4.0/22
Signature Algorithm: sha256WithRSAEncryption
13:02:1b:48:6b:00:c8:b9:81:d4:54:d0:a3:f1:18:68:f8:c8:
d5:23:d2:b0:8f:64:b8:38:98:8f:16:85:d7:c6:ea:57:68:58:
41:c5:d2:21:43:92:96:a2:a7:f0:95:fb:2c:18:6d:20:56:81:
5c:10:e5:d0:33:f5:e6:fe:5e:64:b0:8d:82:a6:ae:d6:75:56:
27:81:f6:20:39:17:55:e2:42:4e:71:c7:75:e5:77:99:b7:d1:
a6:2f:60:ed:65:63:70:d1:97:80:06:96:00:8c:5c:51:92:2b:
76:7e:7c:10:7f:cb:8f:bb:ec:d7:79:c4:14:1c:f3:10:c9:24:
b9:81:cc:3b:44:a7:9c:60:6e:8e:55:42:35:e6:90:7f:70:a3:
77:c7:c2:52:dd:12:6f:4a:bd:eb:40:01:eb:54:90:7e:77:16:
fe:35:1b:33:f3:8f:b5:4d:f2:30:6f:8f:b1:bc:9e:6e:3c:27:
d0:19:ea:df:fb:a0:2b:fe:0d:88:d1:f1:35:77:61:80:d9:06:
cd:89:40:a9:58:29:c1:8a:80:4c:bb:bb:fd:92:0f:c1:c4:22:
1a:f4:71:af:d0:90:d9:77:cc:ff:7c:46:5f:38:e5:83:47:f6:
69:2c:28:8d:28:f2:c7:7e:91:e5:e4:c1:a0:a5:5a:53:5c:79:
c5:ef:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:09 2025 by rpki-client