Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/QfTGP8oyiaEMDFHis4XmpS4h000.roa
File: QfTGP8oyiaEMDFHis4XmpS4h000.roa (raw, json)
Hash identifier: u86o656HkRBrGR6hDOwgPBjpql2Sf2NwhPfGkmbrou0=
Subject key identifier: 41:F4:C6:3F:CA:32:89:A1:0C:0C:51:E2:B3:85:E6:A5:2E:21:D3:4D
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01845B2B70F9ED1B47AAE4FB24E48B7BE541
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/QfTGP8oyiaEMDFHis4XmpS4h000.roa
Signing time: Wed 09 Nov 2022 06:54:44 +0000
ROA not before: Wed 09 Nov 2022 06:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.129.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:2b:70:f9:ed:1b:47:aa:e4:fb:24:e4:8b:7b:e5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Nov 9 06:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41f4c63fca3289a10c0c51e2b385e6a52e21d34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:67:90:63:12:02:51:4d:ca:d3:f5:cd:6b:
9b:6a:99:40:1c:97:02:c8:22:eb:9b:72:13:53:32:
b5:03:8d:ff:3c:06:e5:2b:63:7f:87:10:cf:02:23:
31:05:cf:b5:1d:ea:cc:9c:a6:b9:58:1e:30:93:68:
23:31:0e:c5:be:b3:37:0b:68:5e:3c:10:11:94:2b:
7e:b0:16:a4:9a:40:11:1d:f3:08:05:43:5e:5e:39:
2a:d2:41:09:a0:44:74:f9:07:27:64:b7:37:86:fb:
e1:50:4d:c6:26:0b:b9:9b:97:4d:6d:5e:3f:36:ec:
19:bd:40:04:6e:56:db:32:fd:c3:f3:d2:3b:c3:b4:
63:c6:99:16:c5:26:b1:77:6d:5c:3b:8e:e1:db:3a:
96:1c:5e:6e:fa:9b:0a:0c:cf:3a:94:14:b6:3e:c1:
51:e2:f2:94:6c:b2:4f:06:10:e2:77:5f:55:fa:c3:
7b:cd:66:3c:84:9f:0b:fa:88:20:0c:75:ec:df:4d:
3f:ef:18:82:4e:87:24:8e:c4:de:9a:a3:63:8d:17:
a5:36:d4:45:3c:da:ef:c0:20:f9:92:d4:dc:be:f8:
fe:6a:bb:5a:35:10:f0:3a:85:ac:ce:63:b4:d3:4b:
7c:75:d5:07:a9:95:39:00:19:6b:6b:61:85:c0:e1:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:C6:3F:CA:32:89:A1:0C:0C:51:E2:B3:85:E6:A5:2E:21:D3:4D
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/QfTGP8oyiaEMDFHis4XmpS4h000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:73:0f:1c:c5:32:2f:e6:09:f1:3a:a5:51:d8:18:7e:12:ad:
3d:82:8e:a9:11:7a:ea:cf:2f:49:92:35:ec:6a:b9:1c:02:5a:
64:87:90:c8:c1:e6:fb:6a:58:3a:ca:26:ed:ea:b8:30:2e:a6:
bb:b4:08:07:1f:ec:a8:15:e9:58:3c:f0:f5:fe:b7:6c:6f:f6:
80:39:f3:c3:e0:ad:da:c7:dd:4b:06:e8:42:3f:ae:93:a3:a3:
5b:f2:d1:02:9c:e1:c8:a3:67:15:99:e0:a9:21:a2:e1:6c:7b:
df:49:b3:cc:6c:76:97:74:63:49:1a:ae:61:c0:57:e5:84:e6:
69:7b:d1:b3:26:28:27:75:6a:00:ae:84:e0:56:b9:e4:91:4b:
19:99:d2:33:94:f6:22:58:c9:e3:94:51:70:e5:82:d6:71:32:
e9:9a:21:10:ca:9f:08:4f:d8:18:08:f0:70:ac:0a:02:d3:61:
e4:c4:b2:7a:de:63:d9:8b:88:29:be:0b:a6:b4:f4:08:69:27:
51:66:cd:41:6d:cd:90:2b:68:c6:21:d6:89:eb:3a:3d:7d:d2:
9c:49:4a:77:eb:d9:7b:35:66:fc:ca:f0:d4:0b:e1:5b:60:2b:
44:2f:06:ed:70:6f:15:a1:0d:d8:30:42:7e:64:e1:e1:16:59:
11:21:80:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRbK3D57RtHquT7JOSLe+VBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjIxMTA5MDY1NDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWY0YzYzZmNhMzI4OWExMGMwYzUxZTJiMzg1ZTZhNTJlMjFkMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoJnkGMSAlFNytP1zWubaplAHJcC
yCLrm3ITUzK1A43/PAblK2N/hxDPAiMxBc+1HerMnKa5WB4wk2gjMQ7FvrM3C2he
PBARlCt+sBakmkARHfMIBUNeXjkq0kEJoER0+QcnZLc3hvvhUE3GJgu5m5dNbV4/
NuwZvUAEblbbMv3D89I7w7RjxpkWxSaxd21cO47h2zqWHF5u+psKDM86lBS2PsFR
4vKUbLJPBhDid19V+sN7zWY8hJ8L+oggDHXs300/7xiCTockjsTemqNjjRelNtRF
PNrvwCD5ktTcvvj+artaNRDwOoWszmO000t8ddUHqZU5ABlra2GFwOE05QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEH0xj/KMomhDAxR4rOF5qUuIdNNMB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvUWZUR1A4b3lpYUVNREZIaXM0WG1wUzRoMDAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYFcMA0G
CSqGSIb3DQEBCwUAA4IBAQBecw8cxTIv5gnxOqVR2Bh+Eq09go6pEXrqzy9JkjXs
arkcAlpkh5DIweb7alg6yibt6rgwLqa7tAgHH+yoFelYPPD1/rdsb/aAOfPD4K3a
x91LBuhCP66To6Nb8tECnOHIo2cVmeCpIaLhbHvfSbPMbHaXdGNJGq5hwFflhOZp
e9GzJigndWoAroTgVrnkkUsZmdIzlPYiWMnjlFFw5YLWcTLpmiEQyp8IT9gYCPBw
rAoC02HkxLJ63mPZi4gpvgumtPQIaSdRZs1Bbc2QK2jGIdaJ6zo9fdKcSUp369l7
NWb8yvDUC+FbYCtELwbtcG8VoQ3YMEJ+ZOHhFlkRIYAp
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:45 2025 by rpki-client