Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QUGmbViVSKNZPAz63FU9zcFFT4o.roa
File: QUGmbViVSKNZPAz63FU9zcFFT4o.roa (raw, json)
Hash identifier: QTtT3KG84kNo5vrYN9lkioN/cWtKv+jkUw90cC5mhVo=
Subject key identifier: 41:41:A6:6D:58:95:48:A3:59:3C:0C:FA:DC:55:3D:CD:C1:45:4F:8A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842CE2CAF38A75A6A7F0DA756272DE4D45
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QUGmbViVSKNZPAz63FU9zcFFT4o.roa
Signing time: Mon 31 Oct 2022 07:12:51 +0000
ROA not before: Mon 31 Oct 2022 07:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12396
IP address blocks: 212.109.175.0/24 maxlen: 24
195.191.18.0/23 maxlen: 24
195.49.192.0/21 maxlen: 21
194.247.168.0/23 maxlen: 23
91.219.124.0/22 maxlen: 22
195.8.34.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2c:e2:ca:f3:8a:75:a6:a7:f0:da:75:62:72:de:4d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 07:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4141a66d589548a3593c0cfadc553dcdc1454f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:c0:6e:2d:a8:0a:de:2d:15:8f:83:52:13:
39:1e:1b:e3:03:63:f4:8c:5f:c2:d7:27:31:93:e6:
4d:25:15:bf:70:e0:3c:c1:36:e2:10:19:4e:56:24:
bb:98:7b:d3:48:b9:2c:54:18:cd:d9:eb:0d:52:fe:
43:94:82:a3:8a:6b:f2:0f:ba:74:cc:12:3f:e7:be:
6a:b4:4e:5e:52:e6:c3:ea:13:cf:67:43:c0:ad:ac:
6b:2d:03:0a:07:1a:32:9d:d4:31:d2:c1:32:ad:0c:
85:5e:4c:26:bb:1c:1f:b4:b7:70:7e:36:d9:f9:bc:
fc:7b:3d:4a:9b:e2:9d:71:2d:3b:26:25:cb:15:93:
e8:be:6c:42:16:e9:40:94:c6:56:65:f2:f5:81:01:
46:2c:bb:34:6c:da:5e:2f:6a:4b:c4:0d:f7:a6:30:
97:71:a5:6e:e8:7b:2a:73:09:87:53:dc:e4:e2:57:
9d:bf:85:9a:f4:ab:db:fa:76:e4:25:a4:2f:b8:c5:
b5:a7:b6:c3:f7:60:31:86:f6:6c:d5:a9:71:1d:f8:
5b:80:5a:8b:cf:b5:f4:07:9b:8b:33:59:21:b4:5a:
59:0b:1f:5a:c9:66:de:d7:df:95:9a:e1:08:35:6f:
b2:ec:97:ba:5c:8f:26:e1:e4:16:af:4c:69:ae:82:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:A6:6D:58:95:48:A3:59:3C:0C:FA:DC:55:3D:CD:C1:45:4F:8A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QUGmbViVSKNZPAz63FU9zcFFT4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.124.0/22
194.247.168.0/23
195.8.34.0/23
195.49.192.0/21
195.191.18.0/23
212.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
50:63:e5:fa:a8:c6:c4:41:08:64:53:7f:0b:23:54:1d:34:cc:
c4:02:84:ab:09:ec:04:49:59:17:4e:92:5f:a9:15:05:ed:45:
23:77:72:37:d5:9b:f1:9e:5f:03:20:9f:c2:22:15:4b:55:10:
a5:1c:fa:a4:ed:08:12:3c:15:67:81:f2:32:21:ca:9f:6e:52:
3d:f5:7f:9d:6e:f1:c3:f3:98:4f:f9:e3:3c:97:f8:77:e2:46:
90:87:d6:03:10:0a:97:1e:4a:c1:c6:44:bf:ef:a5:1d:9c:1e:
aa:a6:36:a9:19:7c:0d:17:11:09:cd:06:2c:50:06:1b:97:2a:
99:9c:19:51:fb:41:e7:f8:25:db:93:c0:a7:56:62:62:8d:54:
ab:9b:67:e4:e6:2f:2e:49:6e:3d:a1:63:b7:ab:dd:df:c2:73:
34:ec:7e:25:70:e1:ae:aa:94:f8:c6:b7:16:40:a5:37:fb:3e:
9b:a0:d9:ca:cd:20:39:c9:cc:ae:2e:bc:ef:ef:89:c5:84:42:
14:93:54:e7:5d:a5:81:cb:92:0a:87:c7:a0:99:d7:24:2c:85:
a7:17:7d:b6:e3:c6:46:54:82:c2:72:99:bf:5b:d4:d5:91:c4:
27:2f:63:e6:c3:5b:44:3e:7e:78:69:ae:d1:44:2f:7f:f4:17:
4e:a0:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:35 2025 by rpki-client