Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/GS1QaeVCuxlmBMdMkCD_Qk5odrI.roa
File: GS1QaeVCuxlmBMdMkCD_Qk5odrI.roa (raw, json)
Hash identifier: TyIltIbWhZQMSrIOz4X7qNsJzbeKczqfWRzNbaFlf3U=
Subject key identifier: 19:2D:50:69:E5:42:BB:19:66:04:C7:4C:90:20:FF:42:4E:68:76:B2
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01857316010BB72A931962F18EE3E67D4034
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/GS1QaeVCuxlmBMdMkCD_Qk5odrI.roa
Signing time: Mon 02 Jan 2023 15:24:59 +0000
ROA not before: Mon 02 Jan 2023 15:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206796
IP address blocks: 85.14.46.0/24 maxlen: 24
185.92.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:16:01:0b:b7:2a:93:19:62:f1:8e:e3:e6:7d:40:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 15:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=192d5069e542bb196604c74c9020ff424e6876b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:a2:43:68:d3:ec:18:42:42:31:88:30:30:
a6:36:0a:5e:e0:02:29:ed:d1:83:e6:44:f5:ec:b8:
3f:b5:ba:61:c2:70:46:ab:2a:54:7f:d8:2f:8e:d1:
4f:b1:23:aa:c3:54:c6:7c:ef:ef:20:85:93:2c:73:
eb:e1:1a:de:47:87:29:10:07:12:2b:a9:33:11:0b:
2d:94:ce:78:30:48:17:fd:e7:34:96:22:c9:e5:01:
a9:92:81:a7:8e:07:c7:5e:af:79:f6:d6:0c:05:56:
ae:75:e7:04:c2:f1:84:5b:7a:b8:e3:93:98:93:ce:
2e:11:eb:8f:7b:e4:99:6e:39:5d:35:40:86:d7:e4:
5c:ce:ff:66:ad:8f:09:aa:5e:56:ce:7c:3d:45:5b:
cd:e0:38:35:ab:23:b1:4f:6a:d5:5d:5c:2e:8f:0c:
fb:9a:e9:da:ef:f7:e5:a6:dd:da:b6:87:a9:62:d9:
e3:cf:18:52:e9:c6:2f:2a:0a:92:6c:85:bb:a8:9a:
70:a2:9d:b3:43:8e:c4:e8:16:a6:17:26:ed:f4:19:
e8:bb:13:09:da:07:8e:21:7b:e2:8b:60:1a:ee:97:
a9:b4:76:5e:e2:aa:73:b0:17:7f:5d:a2:76:b2:d9:
a6:53:ae:06:8e:ef:c6:80:c9:b4:5c:b0:29:ce:29:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2D:50:69:E5:42:BB:19:66:04:C7:4C:90:20:FF:42:4E:68:76:B2
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/GS1QaeVCuxlmBMdMkCD_Qk5odrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.46.0/24
185.92.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:17:e6:64:2f:83:33:9f:ad:42:7d:45:29:4b:5b:6e:3c:f8:
84:50:5f:90:78:99:ae:a9:0a:90:1c:59:a4:ef:c3:6b:fe:13:
ff:ff:cb:eb:41:8e:c5:05:cd:ef:1c:84:db:25:52:0b:ac:5d:
53:b0:e2:8f:82:8b:47:39:c4:86:67:8f:cc:44:60:4b:05:d5:
7c:66:ff:c9:96:de:f8:94:0c:4e:48:55:41:c8:2e:ef:ff:cc:
59:62:df:6c:26:aa:b0:78:ee:61:ac:f1:22:9f:52:1e:ff:a5:
b7:f8:5c:6d:aa:49:9b:2a:dc:5c:dd:a3:ac:03:03:dd:88:79:
10:51:0d:b5:81:c0:15:fd:03:51:ee:40:ce:f1:86:d5:eb:52:
46:16:ba:bf:dc:32:76:b8:74:97:c5:7d:4b:a9:7c:b4:6b:e8:
7b:f6:b6:2d:f9:4a:25:aa:20:b9:d5:5c:e8:f4:26:76:b9:14:
ed:51:eb:77:cb:22:e8:40:fc:96:35:7d:c7:66:c8:59:cf:49:
63:65:13:73:69:1d:8d:8e:2f:d0:dc:5a:4a:cf:e0:9e:b3:4f:
66:b9:42:12:c8:4a:2b:2b:50:01:f2:19:1c:2e:58:af:c9:4b:
19:d0:d9:5b:f3:4c:c9:de:13:7c:47:a6:d4:83:b6:e6:7d:b6:
5b:0d:31:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:54:04 2025 by rpki-client