Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/QnpuPWiG57kvgb-BkQOt_DBk2Ps.roa
File: QnpuPWiG57kvgb-BkQOt_DBk2Ps.roa (raw, json)
Hash identifier: 9IyT6dpEPYARNr9QpdrXz5K0QT+4Qcksnj19XqyHsi0=
Subject key identifier: 42:7A:6E:3D:68:86:E7:B9:2F:81:BF:81:91:03:AD:FC:30:64:D8:FB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018572FA5594886406EDBD6A6AC45A00A00C
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/QnpuPWiG57kvgb-BkQOt_DBk2Ps.roa
Signing time: Mon 02 Jan 2023 14:54:46 +0000
ROA not before: Mon 02 Jan 2023 14:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8827
IP address blocks: 212.80.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:55:94:88:64:06:ed:bd:6a:6a:c4:5a:00:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 14:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=427a6e3d6886e7b92f81bf819103adfc3064d8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:98:1f:6e:66:6a:5b:ac:50:e1:04:df:52:
23:e3:de:fe:29:5e:7f:9e:91:5f:b8:04:4a:45:70:
ac:57:8e:ad:39:a4:4d:15:3e:7e:4e:43:13:0f:21:
56:a9:e0:cb:2e:47:6f:d4:db:b0:9a:36:88:d2:8b:
9e:20:81:31:62:c7:52:ca:39:cc:76:dc:63:1a:4a:
b6:26:03:72:39:1a:f3:8b:0b:5c:2d:8a:93:bb:6b:
c8:54:77:c2:b8:65:14:02:b7:32:b9:bb:df:da:f6:
cd:2d:87:28:ae:b6:ea:48:ed:c6:43:7e:23:1e:f5:
aa:be:7a:3a:8c:11:05:bd:e4:bc:30:a2:cd:66:78:
b1:6d:5d:84:52:34:75:0f:a0:a0:1a:51:ad:aa:3d:
da:38:51:63:c8:6a:59:64:61:12:3f:ec:a2:86:1c:
5d:5c:03:b4:a0:2f:2a:6c:09:5c:85:54:7c:92:ed:
72:77:de:e5:eb:92:48:b2:55:77:d8:30:8e:a6:d4:
98:89:57:4e:e6:46:33:14:0d:64:66:c2:77:b6:9e:
a0:86:ba:93:64:9a:dc:65:4a:32:85:2f:28:04:87:
80:ff:8e:22:2d:d4:a4:e3:6b:1d:49:b3:b1:7d:ea:
e2:08:93:e2:4c:22:4c:5f:60:02:53:dd:c5:13:00:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7A:6E:3D:68:86:E7:B9:2F:81:BF:81:91:03:AD:FC:30:64:D8:FB
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/QnpuPWiG57kvgb-BkQOt_DBk2Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.184.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ff:be:76:36:77:79:b9:50:a7:ea:e4:8f:2a:31:7f:a6:80:
3a:78:ae:38:9e:3b:2a:07:a4:03:5b:c2:42:c9:49:31:1c:44:
7d:2a:5d:14:c1:0c:30:7e:cb:60:bf:c3:45:dd:bf:df:a7:1a:
a7:ac:dd:4c:8b:3e:90:c2:52:5b:5f:a0:fa:c5:1a:17:35:80:
4e:b9:1e:74:c5:97:82:ab:a4:8f:e2:c8:7d:42:30:2a:f4:fa:
09:ef:ed:21:ff:d0:e5:d6:ba:8e:8e:a2:94:63:68:08:0a:fc:
23:35:97:2a:f1:98:19:34:13:25:ab:0f:80:b8:97:4f:88:7c:
9a:bd:ad:65:a0:38:7b:b1:35:6d:56:c1:f1:fb:f5:13:31:2b:
5f:cf:91:df:5f:74:95:69:2c:0d:fc:3d:c2:b2:97:7a:eb:1a:
e7:b7:3c:0a:ef:0c:3d:a0:6c:e5:a4:02:77:0e:fb:66:d4:55:
22:26:b0:19:c8:96:fd:4d:17:51:23:5b:8c:93:10:41:1f:89:
36:d0:48:04:d3:86:b5:ff:f7:65:51:d1:70:b0:e3:ee:49:e8:
26:f2:9d:04:f7:c2:89:15:ca:87:16:9c:55:c7:d6:15:38:21:
fb:0c:92:b4:9b:2a:73:e5:5c:3e:38:c0:dc:64:61:c6:24:4f:
7b:e5:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:17 2025 by rpki-client