Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/sqrkANxRh4BphAcxKKOlXCC2JZE.roa
File: sqrkANxRh4BphAcxKKOlXCC2JZE.roa (raw, json)
Hash identifier: Zbd3vI84F3VgVJmIOb8Pfn0go3af9TedXR7xAJyA+Yc=
Subject key identifier: B2:AA:E4:00:DC:51:87:80:69:84:07:31:28:A3:A5:5C:20:B6:25:91
Certificate issuer: /CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Certificate serial: 20178810
Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/sqrkANxRh4BphAcxKKOlXCC2JZE.roa
Signing time: Sat 01 Jan 2022 14:05:13 +0000
ROA not before: Sat 01 Jan 2022 14:05:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43568
IP address blocks: 178.250.216.0/21 maxlen: 21
77.247.144.0/20 maxlen: 21
128.0.16.0/21 maxlen: 21
2a02:2470::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538413072 (0x20178810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Validity
Not Before: Jan 1 14:05:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2aae400dc5187806984073128a3a55c20b62591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:2e:84:db:8d:06:c4:4c:1b:a5:bc:73:91:
75:74:11:1f:86:a1:b8:38:9c:49:d8:64:5b:4d:b0:
1d:f5:69:5f:e8:50:d0:6c:08:73:47:72:7a:1a:76:
2c:e4:d7:17:5d:45:c1:98:ae:ab:51:b8:36:80:11:
d7:0f:9b:b9:e5:d1:25:bf:f2:66:27:c0:23:5f:f8:
ac:99:71:08:9f:1d:38:fb:02:a2:57:6b:43:f4:6f:
09:71:a0:f5:de:7a:36:d2:e5:dd:18:89:f8:04:f5:
ec:f3:6b:3c:bb:7d:70:5a:a8:8b:55:28:f8:8a:85:
96:88:6c:c9:ec:2c:50:95:4f:6d:b3:24:11:05:38:
9c:6d:c3:da:bb:6c:b7:75:10:d1:08:71:bc:b0:8f:
64:68:be:22:8d:fa:4b:5a:34:4e:38:83:a3:10:95:
3f:b3:9b:35:34:c8:80:f6:fa:47:b8:e6:6e:df:ea:
e9:1c:21:5a:f4:5b:4b:a6:98:b7:5c:8f:e1:ed:3c:
10:83:d6:3f:a6:97:60:11:e5:c4:02:11:a9:5a:0b:
a9:5a:63:d3:a2:78:9e:1c:36:a7:6a:c8:af:3d:68:
7d:bb:d8:d9:c6:8d:cc:9f:95:4b:be:ed:cf:64:0b:
5d:97:3b:e4:04:44:fe:70:ff:da:aa:d3:fb:d8:f6:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AA:E4:00:DC:51:87:80:69:84:07:31:28:A3:A5:5C:20:B6:25:91
X509v3 Authority Key Identifier:
keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/sqrkANxRh4BphAcxKKOlXCC2JZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.144.0/20
128.0.16.0/21
178.250.216.0/21
IPv6:
2a02:2470::/29
Signature Algorithm: sha256WithRSAEncryption
27:73:08:47:95:97:8a:b4:61:ce:6f:a1:23:f8:86:74:f9:32:
39:76:a1:f5:0b:28:b5:97:98:e9:1f:a5:35:c6:28:37:36:0b:
55:06:26:e1:c1:f1:c6:ff:cf:5b:84:45:43:86:e6:a9:46:4e:
57:c0:d6:35:2c:6a:7d:ac:c9:89:81:08:ad:a6:f2:c6:d0:0c:
18:af:99:38:aa:06:38:30:94:5f:cc:78:b1:15:8d:84:9d:dd:
2c:ce:bd:89:2b:45:28:b5:3d:fb:b7:8d:32:76:ee:81:04:dc:
16:33:a6:3b:5e:e6:cd:00:1a:8e:3e:7b:ed:3f:66:3c:17:a6:
7e:c0:8b:98:5d:32:6c:9f:cf:d4:63:28:52:95:c4:32:02:dd:
23:a2:aa:ca:80:84:d6:c8:c6:93:51:bf:9d:52:ec:19:db:7b:
08:a7:c2:2c:20:4f:cd:86:cd:63:ca:62:c4:02:9f:c6:b8:7e:
6d:2a:8a:a1:00:e9:3c:fe:df:5f:ef:60:e6:8b:54:eb:70:7f:
a6:ee:3d:87:2c:42:9b:8f:ef:33:bb:3b:73:2a:ad:39:22:f2:
ac:b8:83:53:11:55:48:21:aa:91:38:ac:1e:68:c2:10:ec:c7:
9a:f5:af:2d:0e:24:70:3d:cc:c1:d5:ae:59:21:dd:ef:a9:8b:
eb:e3:de:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:29 2025 by rpki-client