Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/qXnWfXo5f_cmP9_NFJcnC6PTYzs.roa
File: qXnWfXo5f_cmP9_NFJcnC6PTYzs.roa (raw, json)
Hash identifier: 4XxZAhpzn8LolPQo7jZPZ9dklbn8ALyWj8h9jiV2/eA=
Subject key identifier: A9:79:D6:7D:7A:39:7F:F7:26:3F:DF:CD:14:97:27:0B:A3:D3:63:3B
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 237BB3C0
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/qXnWfXo5f_cmP9_NFJcnC6PTYzs.roa
Signing time: Sat 01 Jan 2022 14:06:06 +0000
ROA not before: Sat 01 Jan 2022 14:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16074
IP address blocks: 62.112.160.0/19 maxlen: 20
62.145.32.0/19 maxlen: 24
62.145.63.0/24 maxlen: 24
62.145.62.0/24 maxlen: 24
217.115.224.0/20 maxlen: 21
192.113.0.0/16 maxlen: 24
2a01:67c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595309504 (0x237bb3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jan 1 14:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a979d67d7a397ff7263fdfcd1497270ba3d3633b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:e7:81:6a:46:1a:9e:9c:34:20:b3:bd:ca:
45:89:59:c8:9c:44:ac:d2:32:d6:fa:e6:6e:97:5e:
70:0d:22:a3:41:b8:b3:8e:f9:1a:9e:43:aa:c1:74:
5a:2f:c8:01:d0:fd:f1:fa:11:c5:84:1f:86:26:07:
b1:c5:43:70:36:dc:13:ff:20:c3:87:41:9e:e8:10:
4e:d8:8f:44:85:e9:65:18:b6:93:eb:7f:ad:04:3c:
f7:0f:13:5a:3e:10:7d:d9:a8:66:08:ce:12:b9:3d:
77:3d:4c:e0:e3:9d:2b:7c:1e:c3:5d:af:b5:4c:34:
3b:a2:22:ff:86:ac:ba:91:75:6b:36:06:22:30:61:
d0:35:57:6c:78:85:71:bd:0c:f1:02:14:47:1f:5b:
04:ca:42:5a:45:8c:b7:da:87:b4:18:bd:aa:a6:5c:
b2:93:39:ec:72:ce:2c:1a:2c:28:f0:74:47:43:f1:
e3:eb:6d:93:34:29:ac:34:7a:e1:46:f4:d6:c6:7a:
80:fc:9f:22:85:8c:38:cd:0c:bb:bf:09:3e:96:c2:
a0:cb:94:34:c8:37:63:d0:94:c6:5e:fe:f7:4f:bc:
8d:0d:12:7c:28:27:81:8c:8c:cd:8b:7c:72:5e:55:
40:91:e4:55:17:52:1a:b5:5d:87:0d:c7:a2:e6:06:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:79:D6:7D:7A:39:7F:F7:26:3F:DF:CD:14:97:27:0B:A3:D3:63:3B
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/qXnWfXo5f_cmP9_NFJcnC6PTYzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.160.0/19
62.145.32.0/19
192.113.0.0/16
217.115.224.0/20
IPv6:
2a01:67c0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:36:d3:13:da:47:e4:93:72:39:2b:1a:52:ef:5f:ff:ee:b3:
8d:dd:e0:68:b0:9e:74:71:ba:87:c6:8b:bb:55:85:d3:a4:be:
36:b4:80:15:c5:0c:f3:48:9a:71:4e:10:01:ff:d4:2d:90:8b:
27:51:82:98:96:e1:28:0b:be:a0:57:27:1d:25:7d:7b:9e:c2:
df:a5:63:4f:c2:73:e3:ac:dc:1a:b1:6d:34:ee:b1:0e:b3:df:
b9:14:65:a1:cd:9e:53:84:20:ec:78:d2:3e:5a:6d:2e:ae:b3:
da:b3:61:ee:b0:05:71:e7:a2:02:d8:26:38:06:af:01:20:e0:
cf:9a:3d:05:0d:06:13:94:2f:92:88:32:e9:db:15:f2:a2:6a:
20:08:01:19:8b:a9:4c:2b:ff:ba:d8:f2:1f:30:8e:e4:89:2a:
24:8d:5a:ee:06:08:bc:f4:38:fb:74:e3:c8:14:75:5a:8e:29:
b0:90:dc:b4:4c:0e:4c:03:e3:a6:b3:58:ad:68:b2:0b:2a:bd:
2a:70:3e:8b:73:91:56:c9:5d:f6:4e:b3:90:85:dd:f4:3c:d2:
7f:73:dc:12:69:d3:87:6e:b2:ed:01:f7:6c:d6:b4:a9:d1:c7:
5e:f2:6d:22:5f:18:e0:31:06:c8:19:f5:53:5f:11:70:77:07:
e2:9f:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:30:19 2025 by rpki-client