Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/Qi-hQAIb2JirOp3rMGfLGeLxFCA.roa
File: Qi-hQAIb2JirOp3rMGfLGeLxFCA.roa (raw, json)
Hash identifier: 2FTgzCflK0elb/ej4du0Ie3/YYRq9WMknjp0JK0WE8A=
Subject key identifier: 42:2F:A1:40:02:1B:D8:98:AB:3A:9D:EB:30:67:CB:19:E2:F1:14:20
Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial: 01863AF898DDBD387309BDCE903A0A52A336
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/Qi-hQAIb2JirOp3rMGfLGeLxFCA.roa
Signing time: Fri 10 Feb 2023 10:56:55 +0000
ROA not before: Fri 10 Feb 2023 10:56:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213320
IP address blocks: 2a13:8a00::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:f8:98:dd:bd:38:73:09:bd:ce:90:3a:0a:52:a3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Validity
Not Before: Feb 10 10:56:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=422fa140021bd898ab3a9deb3067cb19e2f11420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:33:b4:38:a7:61:a0:ce:fa:71:4a:20:3b:4b:
af:49:ea:7c:65:88:5d:ea:98:fc:dd:ba:20:67:96:
9f:79:fb:42:96:ca:8b:f1:ed:52:03:9c:66:72:c8:
51:f4:f5:58:c1:a1:85:35:a5:e2:95:55:10:c8:51:
8a:8f:72:e1:5d:bc:57:d6:9e:bb:a7:a8:34:ff:a4:
ca:fd:a4:a8:68:7b:ef:e1:88:8e:a8:9c:1e:3b:5f:
86:e7:59:bb:79:42:03:e3:be:e5:c2:96:39:dc:da:
f4:5a:9b:95:b2:f8:ce:ce:cd:9a:77:95:db:81:a0:
05:62:9d:82:13:81:0a:60:dd:86:c5:f9:28:c8:7b:
60:66:a9:04:8f:46:24:6c:09:2f:47:59:25:0e:be:
db:d5:db:b3:24:27:30:ed:cc:0e:f3:57:d0:f8:99:
08:a5:13:50:f0:1a:66:21:46:f8:66:cc:4d:10:6e:
5a:43:8d:37:24:a1:3c:f3:2b:25:46:24:8f:9c:d0:
84:6a:86:62:82:32:8c:7f:14:61:f6:5f:83:4a:3f:
9a:11:35:30:c8:5e:75:8b:bb:c9:a8:ce:6f:86:39:
21:fe:83:da:35:f8:1a:8e:ab:93:81:58:42:1c:1b:
c4:8a:06:d5:6e:d9:a9:2e:c9:0e:98:53:44:ef:6a:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:A1:40:02:1B:D8:98:AB:3A:9D:EB:30:67:CB:19:E2:F1:14:20
X509v3 Authority Key Identifier:
keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/Qi-hQAIb2JirOp3rMGfLGeLxFCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
47:f6:23:9a:a6:1e:fe:d9:1f:66:7d:f2:b8:a6:1d:41:93:bb:
fc:3c:98:0b:81:2e:47:82:0d:e7:9a:c7:07:09:8e:2a:b3:b8:
b1:6f:46:4c:55:66:45:32:a8:c0:6b:94:72:86:e3:5e:e1:4c:
58:df:89:a5:8b:92:7f:bd:22:6b:df:7b:20:0d:87:e5:23:07:
cd:54:a1:28:1e:c3:96:86:2b:99:09:2c:91:f8:e1:4a:14:21:
5b:54:14:da:bc:41:9c:c0:19:ac:4e:e5:35:f2:82:22:a1:ec:
24:67:01:09:b3:9d:54:9c:cd:ee:0b:10:c2:19:5e:90:39:1e:
d5:dc:92:d3:30:c8:3f:8c:dc:af:a3:df:72:00:2f:6a:dd:6c:
b7:50:f5:70:e8:f2:49:c6:c8:c6:61:36:f4:96:a9:d3:44:28:
77:24:03:88:bb:ea:3e:a6:d3:a5:43:63:dc:ae:4b:15:85:9a:
89:50:4d:b4:86:56:7e:11:bd:c4:5e:40:5a:1d:71:ba:a3:89:
f7:6a:dd:b6:6d:a8:f1:24:53:92:88:90:50:85:a5:ad:39:9a:
ea:fb:36:53:b5:5c:6d:1e:4e:c3:2b:f0:03:dc:54:f0:b2:27:
81:22:30:08:d5:93:cf:37:94:1c:28:85:9a:1f:bb:84:e6:4e:
05:21:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:30:30 2025 by rpki-client