Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/q3l5temv8Fy9BGOdX8mU_pqeKJM.roa
File: q3l5temv8Fy9BGOdX8mU_pqeKJM.roa (raw, json)
Hash identifier: tBWtcB7lQJBpcewWxyN+oJgpvFv6nrZED1kYYVdNqTI=
Subject key identifier: AB:79:79:B5:E9:AF:F0:5C:BD:04:63:9D:5F:C9:94:FE:9A:9E:28:93
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01849E92DF0CEB6AC1314BDA2A3FAFE0DA9B
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/q3l5temv8Fy9BGOdX8mU_pqeKJM.roa
Signing time: Tue 22 Nov 2022 09:02:16 +0000
ROA not before: Tue 22 Nov 2022 09:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43732
IP address blocks: 82.119.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:92:df:0c:eb:6a:c1:31:4b:da:2a:3f:af:e0:da:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Nov 22 09:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab7979b5e9aff05cbd04639d5fc994fe9a9e2893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:15:3b:49:9d:b6:48:c6:53:75:3b:69:ae:
a5:2f:88:46:a3:76:73:66:ec:a1:e8:1e:02:30:9a:
7c:c1:7e:9f:5b:d4:f8:cb:ba:80:dd:63:aa:e4:5d:
b8:f1:c6:35:98:b1:d4:51:a9:9e:9c:0e:06:7b:b1:
e1:01:c6:dd:59:7d:b0:56:c0:f8:c6:ed:62:05:3c:
9f:01:74:12:02:b6:ec:a2:a4:ee:00:1e:08:1a:8f:
95:54:f5:78:be:5a:3e:92:bd:3a:3b:63:af:44:b1:
65:a5:58:af:56:ea:d7:76:aa:41:49:e8:a5:6a:41:
11:8a:59:34:71:1d:cf:c3:44:4d:f2:d6:9c:f0:b7:
6a:e5:8a:5f:8e:ba:4c:0d:3b:9a:fd:ac:54:9d:15:
d3:06:59:df:65:01:ec:a5:6a:20:2a:2b:99:9c:28:
7e:55:7d:ce:68:38:26:ec:bf:f0:da:ac:c3:43:70:
6b:94:36:68:cd:8d:2d:3d:45:30:c1:6d:b2:a0:0d:
0d:02:3f:54:2a:b5:2a:bb:9e:ab:46:d1:ba:b8:64:
c4:e3:8b:e3:b5:81:c0:73:a4:2e:a8:1f:4b:05:a2:
67:b1:d1:03:6e:9b:5f:e6:ba:46:c2:d3:a7:1c:89:
2f:c2:37:a2:ff:ef:35:50:ad:10:8b:a5:3d:4d:a0:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:79:B5:E9:AF:F0:5C:BD:04:63:9D:5F:C9:94:FE:9A:9E:28:93
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/q3l5temv8Fy9BGOdX8mU_pqeKJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ee:48:6f:76:c5:6a:3e:64:74:47:58:9a:1d:5e:92:ee:cb:
b5:79:2a:a6:0e:d4:6b:a3:9d:0a:d9:b7:0a:e4:7f:00:92:be:
25:8f:40:c2:4d:8f:56:02:d9:15:cd:21:fe:aa:b5:99:9e:b5:
b1:e5:8d:8d:28:1c:e4:dc:53:2b:6f:83:08:4f:dd:bc:d7:c7:
f1:da:2e:c9:ca:1e:06:e8:0e:60:4c:18:af:83:d2:bc:bc:e7:
7f:c1:5f:fe:8a:ce:28:70:21:2f:8e:0d:43:61:5d:89:6a:dc:
64:d2:fe:a7:01:84:74:da:ee:9a:04:e8:1c:41:83:0e:89:65:
44:d4:2a:0c:47:2b:61:0c:38:ba:33:17:16:01:c1:ec:27:4f:
38:ae:e4:b9:4a:63:dd:13:08:52:f1:ab:91:40:db:e3:88:2d:
d0:24:37:cb:62:32:f9:1c:59:2e:13:9a:41:3e:93:4a:68:d9:
cc:47:f1:73:8c:0b:a6:ae:5b:b2:03:0d:64:2a:4f:78:db:6a:
1f:2f:1e:26:73:e0:59:c9:fc:2b:63:da:3c:09:38:30:a0:75:
9d:ee:db:21:c2:73:4d:05:b8:31:18:96:20:a0:f7:26:ae:da:
04:89:00:04:ae:7a:ea:75:64:7a:22:75:96:ca:44:0a:a2:d9:
e0:3d:36:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSekt8M62rBMUvaKj+v4NqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjIxMTIyMDkwMjE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjc5NzliNWU5YWZmMDVjYmQwNDYzOWQ1ZmM5OTRmZTlhOWUyODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvEVO0mdtkjGU3U7aa6lL4hGo3Zz
Zuyh6B4CMJp8wX6fW9T4y7qA3WOq5F248cY1mLHUUamenA4Ge7HhAcbdWX2wVsD4
xu1iBTyfAXQSArbsoqTuAB4IGo+VVPV4vlo+kr06O2OvRLFlpVivVurXdqpBSeil
akERilk0cR3Pw0RN8tac8Ldq5YpfjrpMDTua/axUnRXTBlnfZQHspWogKiuZnCh+
VX3OaDgm7L/w2qzDQ3BrlDZozY0tPUUwwW2yoA0NAj9UKrUqu56rRtG6uGTE44vj
tYHAc6QuqB9LBaJnsdEDbptf5rpGwtOnHIkvwjei/+81UK0Qi6U9TaBBdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKt5ebXpr/BcvQRjnV/JlP6aniiTMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvcTNsNXRlbXY4Rnk5QkdPZFg4bVVfcHFlS0pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUndOMA0G
CSqGSIb3DQEBCwUAA4IBAQA87khvdsVqPmR0R1iaHV6S7su1eSqmDtRro50K2bcK
5H8Akr4lj0DCTY9WAtkVzSH+qrWZnrWx5Y2NKBzk3FMrb4MIT92818fx2i7Jyh4G
6A5gTBivg9K8vOd/wV/+is4ocCEvjg1DYV2Jatxk0v6nAYR02u6aBOgcQYMOiWVE
1CoMRythDDi6MxcWAcHsJ084ruS5SmPdEwhS8auRQNvjiC3QJDfLYjL5HFkuE5pB
PpNKaNnMR/FzjAumrluyAw1kKk9422ofLx4mc+BZyfwrY9o8CTgwoHWd7tshwnNN
BbgxGJYgoPcmrtoEiQAErnrqdWR6InWWykQKotngPTba
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:17 2025 by rpki-client