Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/QZpBqUZ3lZRx3AmUIj_SayS8B9s.roa
File: QZpBqUZ3lZRx3AmUIj_SayS8B9s.roa (raw, json)
Hash identifier: QiRZJLQ5fdTqQmrQK2tlHvdHghfJECliJ408EpYaeIo=
Subject key identifier: 41:9A:41:A9:46:77:95:94:71:DC:09:94:22:3F:D2:6B:24:BC:07:DB
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 0B344F0A
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/QZpBqUZ3lZRx3AmUIj_SayS8B9s.roa
Signing time: Sat 01 Jan 2022 04:03:44 +0000
ROA not before: Sat 01 Jan 2022 04:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198188
IP address blocks: 185.220.17.0/24 maxlen: 24
185.220.16.0/24 maxlen: 24
185.220.18.0/24 maxlen: 24
185.220.19.0/24 maxlen: 24
31.186.104.0/24 maxlen: 24
31.186.105.0/24 maxlen: 24
31.186.108.0/24 maxlen: 24
31.186.109.0/24 maxlen: 24
31.186.106.0/24 maxlen: 24
31.186.107.0/24 maxlen: 24
31.186.111.0/24 maxlen: 24
31.186.110.0/24 maxlen: 24
2a0b:ea40::/32 maxlen: 32
2a0b:ea41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187977482 (0xb344f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Jan 1 04:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=419a41a94677959471dc0994223fd26b24bc07db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:9c:e3:03:e8:ec:b7:0f:53:42:56:72:9d:
b9:b1:26:ad:f8:74:11:e0:00:a4:5e:e6:10:cb:39:
ca:2b:b8:9f:d6:11:5a:94:f6:38:55:ea:ba:76:cb:
45:6f:fa:09:00:2f:fc:49:52:9e:26:bf:7f:58:41:
7a:71:f7:e5:19:32:6d:53:0f:f8:e3:a9:d9:47:50:
3e:a6:a1:c3:91:f9:f5:d2:9e:43:bd:d9:f3:5c:3f:
1c:60:56:50:f8:56:39:a4:a0:0b:98:c8:e3:32:67:
52:ae:8b:02:93:33:4a:37:0e:2d:71:5f:95:ad:51:
b2:22:6a:11:08:77:56:5e:18:41:92:1d:be:41:33:
4e:04:23:78:21:12:59:ca:14:4b:33:74:4f:de:d5:
bc:5e:3c:4f:f3:a4:d4:7a:bd:0c:7b:72:da:f8:b4:
8e:4b:9e:e6:92:ad:a8:f6:80:27:8b:f9:fc:db:cf:
6a:a1:60:79:ba:39:42:f5:ee:f0:5a:2b:60:2f:07:
39:19:c3:0b:4c:35:7d:71:ed:62:4b:ab:9f:15:74:
c5:17:80:8b:87:95:77:51:2f:35:fe:de:05:fe:00:
d7:7a:88:8d:8c:d2:8e:7b:7d:93:91:73:c0:bf:9a:
a0:07:01:73:b2:71:ae:0e:38:d9:7f:63:2d:d8:cf:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:41:A9:46:77:95:94:71:DC:09:94:22:3F:D2:6B:24:BC:07:DB
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/QZpBqUZ3lZRx3AmUIj_SayS8B9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.104.0/21
185.220.16.0/22
IPv6:
2a0b:ea40::/31
Signature Algorithm: sha256WithRSAEncryption
55:09:37:92:da:c7:8c:9c:3d:bc:3f:34:12:15:7c:3e:22:e9:
54:a3:72:79:b4:b0:bf:72:e8:f9:62:72:cb:3d:4b:af:9a:fe:
8f:e2:14:79:af:a3:23:56:f7:ad:14:b4:44:d7:00:99:af:55:
5f:39:72:cc:0f:9e:9f:d1:a8:1b:43:f7:96:5d:0b:b6:86:8e:
35:c0:68:bd:e9:bd:7d:e7:ff:00:39:1f:c4:8e:9f:55:e4:ec:
57:fc:02:57:59:52:c8:63:b3:1c:fa:53:5c:2b:77:d6:2e:9b:
e6:f8:31:32:6b:fa:6b:72:d0:ac:56:cb:0f:85:9a:e6:fb:f6:
aa:e7:9f:23:27:79:ff:81:d0:54:a2:12:ce:f0:f4:44:8c:a1:
42:c5:7b:2a:ef:21:63:9e:0b:1f:87:4f:75:e8:ef:db:99:84:
39:c6:cd:ca:56:93:79:ca:98:08:5a:28:0a:c5:61:fd:41:a3:
df:27:a6:7c:8a:0f:1c:30:38:58:56:83:eb:48:43:ba:ac:7e:
3a:b2:39:28:fe:e1:2f:23:9a:b7:6f:05:de:04:93:5c:6e:3d:
e9:e5:24:d8:4b:41:ab:69:d6:be:82:af:58:4d:59:d4:ac:a6:
cd:a7:92:fd:79:a7:87:1c:83:a3:0d:2a:96:d2:04:1d:db:05:
3e:89:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:45 2025 by rpki-client