Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/qCGWSW5ZgX6AwUzDC7k71ZKzAdQ.roa
File: qCGWSW5ZgX6AwUzDC7k71ZKzAdQ.roa (raw, json)
Hash identifier: u1D3SLBxPW155hptojlA5/nNRcJ2g2nmzF9eEsUu6lE=
Subject key identifier: A8:21:96:49:6E:59:81:7E:80:C1:4C:C3:0B:B9:3B:D5:92:B3:01:D4
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 018AB71B0A2142D59D688D98CAE860213873
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/qCGWSW5ZgX6AwUzDC7k71ZKzAdQ.roa
Signing time: Thu 21 Sep 2023 09:38:37 +0000
ROA not before: Thu 21 Sep 2023 09:38:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50464
IP address blocks: 195.191.77.77/32 maxlen: 32
195.191.76.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:1b:0a:21:42:d5:9d:68:8d:98:ca:e8:60:21:38:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Sep 21 09:38:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a82196496e59817e80c14cc30bb93bd592b301d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:80:d3:db:dd:8d:af:d6:c7:13:5b:75:f5:8f:
87:20:f9:f8:c2:10:8d:da:a4:2f:2a:38:50:82:dc:
45:a7:68:73:6c:53:96:8e:16:fe:a8:0f:35:50:3f:
3e:b3:c3:fa:22:92:f4:29:27:81:09:95:23:04:fc:
9a:18:85:0f:53:c6:fd:8a:14:d7:93:86:4e:3c:e7:
a5:eb:b8:e1:2a:ba:86:e1:5e:ba:a8:55:ee:44:ba:
d4:7b:06:5d:6d:c9:de:35:04:85:fb:b6:2a:f9:30:
b9:50:34:f6:32:54:54:5c:17:a2:51:a7:b5:ab:bb:
65:1a:f3:4d:b6:02:a7:49:6b:b0:aa:d5:63:d4:fe:
c5:4c:a8:3c:cb:32:96:49:09:95:81:99:9e:6b:de:
86:6e:dd:e7:37:48:32:5c:ba:71:19:05:f7:ee:0e:
3c:71:42:16:09:81:8d:09:20:86:4d:5c:35:37:7b:
aa:61:52:a7:28:10:2c:dd:bb:8b:7f:b2:6d:b3:7b:
55:f5:5e:ad:44:72:b7:5b:26:61:e2:e2:01:93:63:
e2:ef:22:34:6f:77:e6:11:57:88:a9:14:e0:5c:88:
c7:e4:a5:46:25:8f:f1:bf:78:75:3e:ea:57:cf:f5:
8e:46:e0:39:11:43:8b:48:33:8e:98:9a:f9:ed:88:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:21:96:49:6E:59:81:7E:80:C1:4C:C3:0B:B9:3B:D5:92:B3:01:D4
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/qCGWSW5ZgX6AwUzDC7k71ZKzAdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.76.0/23
Signature Algorithm: sha256WithRSAEncryption
27:3f:81:26:50:9c:2b:0b:20:e5:8f:3f:06:ea:a7:b2:a5:42:
3d:89:74:dc:e0:e2:e5:b5:01:e3:81:f0:da:60:2b:22:52:aa:
a4:47:bb:7e:c3:a6:0f:ff:63:d7:8c:2b:44:89:ee:38:86:ef:
65:c4:da:1e:f5:5d:c2:d7:3c:6a:af:e7:d0:2c:95:dc:67:30:
26:ba:c3:0c:1b:8c:73:53:f3:28:2b:7e:b4:2d:79:b4:c0:5b:
07:32:f5:10:c2:d6:b0:9e:b6:32:6a:a2:4d:fe:8d:0f:1d:35:
a2:60:a2:64:2b:0f:70:86:61:8e:5a:8f:71:59:87:62:8f:a2:
9a:02:da:3b:db:ff:ca:62:00:9c:bd:93:7e:68:78:81:b5:00:
1e:67:4b:ce:fc:f5:5a:73:62:5b:40:8d:73:19:3e:c0:51:13:
ac:35:f5:a9:4e:fd:be:05:1a:17:86:1c:20:fd:38:70:aa:37:
71:fd:55:09:74:29:25:78:34:d9:6f:3d:e7:d9:57:b0:65:57:
25:b6:2b:8b:12:c9:f4:70:e7:97:11:0e:dd:a7:90:55:6e:00:
05:90:92:3f:39:52:07:10:3f:13:96:3f:c7:df:d8:c3:b0:57:
09:eb:23:9a:ba:a8:c0:70:3e:81:a3:f0:3d:a5:86:9d:26:17:
b3:0b:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:52 2025 by rpki-client