Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/QGJR3Vccu32Ay87ssgiHl_D00TM.roa
File: QGJR3Vccu32Ay87ssgiHl_D00TM.roa (raw, json)
Hash identifier: Yl43Vn2xBNtXpdmNBfvJXr6uBgCQZZF2kMKfFhWeJxE=
Subject key identifier: 40:62:51:DD:57:1C:BB:7D:80:CB:CE:EC:B2:08:87:97:F0:F4:D1:33
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 0C779FFC
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/QGJR3Vccu32Ay87ssgiHl_D00TM.roa
Signing time: Sat 01 Jan 2022 00:57:31 +0000
ROA not before: Sat 01 Jan 2022 00:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60481
IP address blocks: 185.78.40.0/22 maxlen: 22
2001:67c:173c::/48 maxlen: 48
2a03:57e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209166332 (0xc779ffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Jan 1 00:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=406251dd571cbb7d80cbceecb2088797f0f4d133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:a8:8b:ef:d8:2c:5f:6c:47:68:f3:02:b5:
d6:a8:b4:86:bf:75:27:e0:02:62:02:08:36:8f:38:
34:52:fe:6f:f9:e6:08:3d:a8:f2:18:bb:2b:9f:1b:
bd:78:fb:2d:3a:76:8d:ff:e0:1a:00:84:68:f0:de:
10:a6:f4:42:5b:af:7c:51:3c:2f:fb:0a:60:9b:ac:
00:ee:92:e7:bb:89:4a:1f:97:97:a4:20:81:d9:34:
7e:b3:19:31:23:47:0f:ae:da:8e:9b:9e:24:a0:76:
75:ad:83:95:d9:f1:fa:db:ef:f7:02:60:4a:69:8c:
17:f7:66:c1:cd:f1:ae:72:57:97:82:78:9a:86:ed:
7a:19:d5:49:b6:6c:ce:32:05:d0:fd:36:87:31:d4:
57:64:f6:b6:c5:c5:f0:3d:d8:bb:55:33:8b:b3:d2:
58:d9:08:85:c5:b8:f4:25:1f:e4:ad:e3:2f:79:70:
2e:4c:50:57:40:85:50:0b:24:9e:6a:18:44:44:4d:
87:0f:96:ea:d6:1f:13:86:af:f3:a1:76:1b:df:07:
e4:67:86:f1:ea:ba:78:c8:4a:d8:0b:dd:47:6d:f8:
a6:83:dd:20:ae:7e:2b:01:40:e0:0d:85:5d:76:95:
9e:75:72:21:78:66:70:d4:57:2c:e4:ce:05:c5:de:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:62:51:DD:57:1C:BB:7D:80:CB:CE:EC:B2:08:87:97:F0:F4:D1:33
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/QGJR3Vccu32Ay87ssgiHl_D00TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.40.0/22
IPv6:
2001:67c:173c::/48
2a03:57e0::/32
Signature Algorithm: sha256WithRSAEncryption
87:dd:42:e5:13:0b:93:7f:db:55:32:3c:ca:88:c4:9f:39:5b:
20:ff:36:37:92:60:49:e6:72:dd:dc:c1:d6:bb:94:51:61:64:
97:f9:27:f9:76:18:74:44:4b:08:67:f6:ee:94:06:87:b2:96:
b6:3d:b2:7f:87:cc:57:0f:60:07:d3:85:ab:af:e6:71:9e:7f:
35:96:38:00:a8:2f:fe:a6:05:4e:30:2f:70:a4:65:35:02:f8:
83:38:97:6c:02:29:9f:ef:12:52:37:95:eb:b2:a4:60:04:2d:
9b:01:dd:53:ae:5e:10:79:6c:10:5a:ae:85:8b:0d:f0:1f:6f:
fb:3b:eb:e7:a5:73:1b:e1:65:ac:c1:02:85:5e:d9:3f:05:9e:
b8:ac:bd:c5:39:87:05:86:a2:fd:1c:ed:23:4f:97:95:2c:5c:
e5:ac:ea:45:0f:6e:c0:0c:fc:b1:87:0b:f1:32:95:2b:ba:da:
5d:b3:a7:48:0b:3c:bc:b7:f3:95:ea:55:68:e1:b9:a3:58:87:
f3:d2:88:85:18:bd:e5:83:ad:36:cd:a5:10:6d:cd:4d:18:9a:
90:02:8e:c6:b5:02:e0:36:99:ba:d8:bd:17:59:5e:46:8b:8c:
48:f9:da:5b:04:58:26:dc:10:96:5d:f9:e5:35:bd:7f:6f:e7:
11:ad:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:54 2025 by rpki-client