Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1qX0BPxp01UjNHbiLifdZ8RMyuU.roa
File: 1qX0BPxp01UjNHbiLifdZ8RMyuU.roa (raw, json)
Hash identifier: ZTibHMM/MlyblLZ3vEpHzw77lgQwevUhBXpeQovBHqs=
Subject key identifier: D6:A5:F4:04:FC:69:D3:55:23:34:76:E2:2E:27:DD:67:C4:4C:CA:E5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0181D8D9831B1610C2ECB6F2EB9138CFAC54
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1qX0BPxp01UjNHbiLifdZ8RMyuU.roa
Signing time: Thu 07 Jul 2022 13:29:02 +0000
ROA not before: Thu 07 Jul 2022 13:29:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6850
IP address blocks: 212.109.173.0/24 maxlen: 24
212.109.174.0/24 maxlen: 24
212.109.169.0/24 maxlen: 24
212.109.170.0/24 maxlen: 24
212.109.171.0/24 maxlen: 24
212.109.172.0/24 maxlen: 24
212.109.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:d9:83:1b:16:10:c2:ec:b6:f2:eb:91:38:cf:ac:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jul 7 13:29:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6a5f404fc69d355233476e22e27dd67c44ccae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:f0:09:f5:b3:ef:62:b8:a0:d2:09:e6:6d:
1d:7a:8f:37:87:ad:e6:30:22:15:67:9f:18:79:fc:
42:25:b4:5e:22:d6:af:3b:9d:d2:bc:6e:bc:6b:06:
b3:9d:09:91:fb:12:64:fb:a4:c5:4e:eb:f6:48:82:
11:28:21:fc:d6:07:5d:47:09:ae:59:d8:9f:3f:b6:
74:49:24:82:a4:9b:62:60:69:8f:65:75:f6:96:4b:
84:d5:23:cb:e7:7d:29:19:c6:f9:dc:f8:9e:84:3c:
70:82:d9:66:bc:b9:50:dc:42:ef:c8:ec:8e:0a:c2:
a1:a8:ba:fe:6c:5b:d5:46:88:bb:8e:bd:4f:86:dd:
0e:eb:b9:13:ae:6d:42:2b:63:e1:93:3b:41:ae:53:
f2:52:1b:84:5e:b9:60:90:23:3b:45:09:f5:a8:be:
17:2e:fd:dd:32:e7:09:24:1f:09:5f:93:3d:b1:3e:
74:35:e7:92:e6:4f:0b:d0:e9:53:83:fb:f5:06:77:
7a:c9:80:b5:0f:65:11:23:71:ab:f5:b3:69:27:70:
e3:35:c5:c3:73:ef:9c:a7:ce:40:70:ea:9b:00:d4:
0e:77:3e:45:ad:31:f5:29:47:32:41:3a:63:8b:03:
ff:19:2c:0e:80:08:e5:5c:58:e6:14:41:cc:e3:a1:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:F4:04:FC:69:D3:55:23:34:76:E2:2E:27:DD:67:C4:4C:CA:E5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1qX0BPxp01UjNHbiLifdZ8RMyuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.109.168.0-212.109.174.255
Signature Algorithm: sha256WithRSAEncryption
3a:18:6d:d4:fd:b0:fb:32:c8:d3:c3:48:34:15:78:c7:50:f3:
4d:24:51:13:86:79:27:a8:09:4e:57:b8:80:4b:04:61:ec:56:
14:71:d7:21:97:0a:06:73:4c:57:38:61:98:6c:93:8e:17:2d:
ed:32:93:df:be:68:97:ad:fc:e5:c7:71:cb:39:53:bb:6c:1a:
3b:52:15:2c:df:b4:bc:91:3f:5d:6b:d8:7d:9b:c3:6d:a5:5a:
d8:04:49:55:c3:2b:71:b1:8c:a7:cc:97:cf:38:c6:f3:0b:db:
a9:01:f9:20:62:33:fa:74:9e:42:3c:e3:95:6a:95:8c:0b:43:
45:4e:16:69:74:6d:a1:2b:4c:9c:da:35:c1:44:b4:df:ce:22:
e8:53:45:d0:33:9c:f9:97:07:e2:ee:ec:66:ac:b4:55:e4:05:
61:59:0c:97:63:48:3c:8c:dc:78:f6:1d:fc:2f:fa:0f:7a:7d:
03:29:04:06:f0:e0:cf:ec:69:69:f0:d4:08:af:e5:e9:b9:f1:
3b:a8:5c:ab:4c:c3:29:ba:54:bb:2a:91:15:2e:f0:4a:85:91:
39:6a:37:cc:95:cc:f4:73:65:28:3f:fe:99:c0:a6:61:65:4d:
ec:b7:b4:d7:01:f9:34:c3:b5:cf:4c:1e:44:92:76:58:09:61:
79:1f:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:07 2025 by rpki-client