Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/qMtgT05L04ag6QyUb7Zs24TFOZY.roa
File: qMtgT05L04ag6QyUb7Zs24TFOZY.roa (raw, json)
Hash identifier: lAn3DptaqITvR8ldrOy2NeIGwFSjiNSjXZw0t7pM7YQ=
Subject key identifier: A8:CB:60:4F:4E:4B:D3:86:A0:E9:0C:94:6F:B6:6C:DB:84:C5:39:96
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 1719F42A
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/qMtgT05L04ag6QyUb7Zs24TFOZY.roa
Signing time: Mon 04 Apr 2022 13:48:59 +0000
ROA not before: Mon 04 Apr 2022 13:48:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24641
IP address blocks: 77.240.176.0/20 maxlen: 24
85.132.144.0/20 maxlen: 24
81.19.0.0/20 maxlen: 20
95.129.96.0/21 maxlen: 21
2a02:e98::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387576874 (0x1719f42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Apr 4 13:48:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8cb604f4e4bd386a0e90c946fb66cdb84c53996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:0b:8c:6c:e7:04:9a:2a:0c:ad:47:c0:ae:
df:4e:c9:c5:cd:53:18:42:2b:92:d0:5d:4f:f4:63:
e3:4e:70:91:d8:fe:54:7e:1b:4b:01:ee:0c:1b:14:
62:df:b5:6a:0b:0f:8c:94:18:e8:74:40:5f:85:8e:
58:56:f5:4b:a5:9d:42:67:cb:cb:77:a1:0a:53:54:
20:85:3d:92:32:a4:17:16:1f:4f:1d:88:94:9e:3d:
ae:2e:60:7b:b3:8e:dc:dd:11:3c:e3:a0:5e:99:18:
c5:e8:3c:27:ee:8a:2a:0c:b1:34:94:c9:97:0d:09:
d6:a3:c7:37:e3:cc:0f:d7:78:93:89:48:e4:0c:90:
e4:33:27:b8:e9:a7:3b:0a:04:e3:9c:ac:2d:6b:31:
32:b8:d5:13:19:3e:a9:10:60:7d:e9:93:d7:c5:62:
db:89:d1:4e:4e:82:94:07:d0:5f:03:e3:b2:49:97:
48:17:18:d1:f0:bf:b7:d3:9b:ec:69:f9:35:1c:51:
f8:21:8b:52:1d:27:35:b1:91:bf:7a:63:c8:fd:87:
1d:7f:d5:a2:2e:cc:2b:f6:d8:9a:89:9d:8d:45:d3:
35:16:8a:53:b7:c4:5d:93:ed:d9:f4:c1:f5:ee:18:
17:8c:5a:7b:c4:11:97:d1:38:59:23:77:ea:ff:b7:
a5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CB:60:4F:4E:4B:D3:86:A0:E9:0C:94:6F:B6:6C:DB:84:C5:39:96
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/qMtgT05L04ag6QyUb7Zs24TFOZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.176.0/20
81.19.0.0/20
85.132.144.0/20
95.129.96.0/21
IPv6:
2a02:e98::/32
Signature Algorithm: sha256WithRSAEncryption
5a:7a:0a:06:d4:a9:74:8a:1d:b3:6d:79:05:3d:9f:b8:e4:ca:
24:02:d1:aa:7f:92:17:26:86:37:58:ab:35:d6:4a:cf:53:dc:
07:9e:2c:5b:d9:7a:ce:57:d2:84:7d:1c:ab:b6:ba:c8:d1:c4:
0d:be:31:3e:3f:49:90:34:f7:c3:6c:33:bc:6d:c2:87:01:70:
c6:25:6a:bd:84:64:31:fe:0d:44:00:2a:c2:21:84:39:3f:92:
b8:67:98:eb:b5:71:d9:6b:68:8c:0d:18:dd:3b:34:84:59:79:
80:64:74:ab:9a:66:3d:d7:7f:c4:92:52:2e:f4:92:b0:79:b0:
02:51:ad:2f:64:60:bf:7b:64:f5:b5:2a:ef:c7:bd:96:08:9b:
21:15:56:0d:38:ac:ba:a4:a5:3b:43:34:f3:06:a1:2c:fd:48:
6d:88:d5:86:86:88:9a:e9:42:c8:84:46:b8:ee:dd:83:c6:fe:
a9:15:53:48:f8:62:c0:da:3f:49:cc:03:31:46:54:c8:f7:24:
9d:41:24:96:6a:e9:bc:3f:72:65:18:06:91:55:ac:1c:d8:24:
35:c0:43:0c:f0:12:94:1e:b6:e8:fb:00:e7:54:7d:19:a4:98:
32:69:1f:c7:8d:36:da:ee:06:fc:ca:45:f4:fd:38:c1:72:cc:
28:8d:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:24 2025 by rpki-client