Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/Q5r-L2J8IVg0h9UkOzKUyZnB7WE.roa
File: Q5r-L2J8IVg0h9UkOzKUyZnB7WE.roa (raw, json)
Hash identifier: 2bfgC870z0goqS6Bn5uw6FotR/ZIAX5SGoAkLe+Rlfc=
Subject key identifier: 43:9A:FE:2F:62:7C:21:58:34:87:D5:24:3B:32:94:C9:99:C1:ED:61
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 018571833539AA6413AF735BBB676C48E7E2
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/Q5r-L2J8IVg0h9UkOzKUyZnB7WE.roa
Signing time: Mon 02 Jan 2023 08:05:02 +0000
ROA not before: Mon 02 Jan 2023 08:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8278
IP address blocks: 147.27.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:35:39:aa:64:13:af:73:5b:bb:67:6c:48:e7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Jan 2 08:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=439afe2f627c21583487d5243b3294c999c1ed61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:b0:7e:33:b7:74:53:4a:52:b3:fb:47:a7:
57:3c:e6:e8:c4:12:36:d0:6c:9a:e2:c2:bd:b9:cb:
ab:ad:29:b4:ec:28:de:d6:8b:1e:5d:77:0c:f4:77:
a1:32:2e:cb:d6:5b:ca:00:a6:50:16:a5:ff:10:e5:
16:60:50:66:6f:bf:79:f2:b7:72:8a:ef:fc:7f:3a:
bd:68:9d:be:c4:e9:ab:0a:64:16:d0:89:22:49:5e:
d6:2b:cb:6a:da:57:87:97:db:af:33:b6:88:bc:8b:
3b:e4:1b:a3:e8:bc:c7:fc:b9:94:e2:d7:4c:87:31:
2f:81:14:5e:6c:13:8b:ae:78:b1:92:f5:85:8d:a8:
07:32:1e:e1:c5:1c:0d:4c:d5:e1:fe:d4:f2:5c:e1:
29:3d:35:de:62:96:fa:0f:17:08:47:69:cc:ae:46:
2f:f3:e9:6b:f8:ef:44:55:21:68:f1:e6:2c:6c:fd:
e4:c9:c4:6a:b2:ce:5e:a7:05:5e:76:f4:92:50:c0:
58:96:e8:a6:33:5f:ba:80:a0:1d:a3:59:34:6a:b8:
35:8a:22:f5:05:6f:60:7c:a8:8a:de:2e:5b:1f:9c:
76:31:1f:73:b7:33:96:dd:17:8e:90:df:51:18:dd:
d7:af:95:21:bb:ad:24:3f:35:e8:c1:45:17:71:be:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:FE:2F:62:7C:21:58:34:87:D5:24:3B:32:94:C9:99:C1:ED:61
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/Q5r-L2J8IVg0h9UkOzKUyZnB7WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:8d:71:1c:0e:13:dc:4d:de:a7:89:c5:b8:91:dc:60:d2:c4:
ef:18:b3:40:b6:b3:ff:62:ed:52:d4:39:b2:97:4a:07:4b:a7:
97:92:06:a4:16:53:40:18:d4:98:d3:04:79:43:9a:af:2d:42:
01:5c:d2:94:56:7a:0c:98:e5:e1:f0:fc:c7:64:e3:f9:e8:61:
a5:d3:c3:77:93:7d:9c:44:d5:f3:71:e8:15:5b:c7:d6:48:06:
39:23:e4:7c:94:dd:55:50:74:02:cb:2a:b0:7d:e4:95:42:2a:
1d:a8:2a:e6:50:1f:53:15:ab:ce:f1:c7:45:56:ae:e7:39:86:
3c:83:dd:26:c2:6f:68:56:49:62:9b:f3:93:df:53:cf:34:9e:
16:4f:df:e8:b5:d5:33:66:1c:76:a3:60:f1:9f:60:7f:7e:a8:
ee:4d:fb:a8:c8:29:63:2e:37:d9:06:89:2c:e2:1c:0b:05:b4:
ab:95:54:7a:2d:06:9b:d6:f5:20:ff:4d:a2:04:ec:f1:fc:a9:
84:34:00:b1:15:b3:3e:bf:b9:47:95:b9:f1:0e:b5:3b:e6:07:
f4:94:29:9d:31:ca:b4:dc:9c:67:c0:eb:a0:c1:c8:06:42:4d:
01:52:f9:15:25:0b:2f:b4:0f:63:c7:3f:ec:1e:2f:77:d0:a1:
19:3c:72:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:07:08 2025 by rpki-client