Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/qr74tzW72Fm0Fz1zRDVcyVcq_q4.roa
File: qr74tzW72Fm0Fz1zRDVcyVcq_q4.roa (raw, json)
Hash identifier: QQMdgEEuyQdbiC2mwG7QEZTDMBLI2wuBK8efm1rbZ70=
Subject key identifier: AA:BE:F8:B7:35:BB:D8:59:B4:17:3D:73:44:35:5C:C9:57:2A:FE:AE
Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial: 08975560
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/qr74tzW72Fm0Fz1zRDVcyVcq_q4.roa
Signing time: Sat 01 Jan 2022 05:00:43 +0000
ROA not before: Sat 01 Jan 2022 05:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8447
IP address blocks: 91.230.142.0/24 maxlen: 24
2001:67c:238c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144135520 (0x8975560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Validity
Not Before: Jan 1 05:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aabef8b735bbd859b4173d7344355cc9572afeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:96:8e:14:d7:1f:8c:80:c9:d9:e2:4d:ee:
dd:37:b6:88:4f:ff:86:c1:78:f1:db:5f:89:40:0d:
dd:52:15:3b:9c:8e:ba:20:a5:7c:21:a8:bf:51:ae:
c2:44:e9:02:5c:0a:a2:8a:41:78:33:c1:3e:73:0c:
88:d5:6b:dd:f4:53:a5:63:d4:4f:f6:f6:03:12:0c:
03:61:49:d9:9b:6d:69:52:92:3b:d9:cd:8f:9f:e8:
cd:94:49:5b:12:a5:85:eb:b5:1f:cc:eb:56:23:1d:
a9:83:7c:5d:56:9d:ce:7f:f9:2b:20:3c:d8:3d:14:
ed:20:bb:cd:91:c5:40:86:6d:16:3b:b1:18:5c:19:
2b:af:a5:50:db:a7:7e:82:9f:e2:be:8f:4f:a2:83:
ca:bf:30:20:be:33:f3:15:f3:fc:78:1e:d5:96:94:
7f:e3:21:1b:2d:dd:41:d0:1d:82:74:1c:a0:7d:1e:
ac:7e:0d:76:25:15:6d:fa:82:f1:25:f0:7a:cb:d9:
99:ef:29:17:a8:78:c1:af:82:3e:81:95:41:fa:51:
65:a6:50:27:ce:a8:13:d4:8c:6d:78:c5:1a:48:c3:
35:f9:65:e1:3e:fe:58:a7:a7:b3:0d:a4:5e:6a:ff:
34:79:7d:2e:22:69:28:39:68:79:8e:e0:7b:19:9b:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:F8:B7:35:BB:D8:59:B4:17:3D:73:44:35:5C:C9:57:2A:FE:AE
X509v3 Authority Key Identifier:
keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/qr74tzW72Fm0Fz1zRDVcyVcq_q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.142.0/24
IPv6:
2001:67c:238c::/48
Signature Algorithm: sha256WithRSAEncryption
80:2c:8c:f2:a5:c1:1a:5d:ab:4c:44:9b:1f:d2:9a:4b:7f:8f:
81:72:55:b8:fe:5d:f5:40:34:6b:e2:6b:30:21:fd:6f:77:d2:
f6:8a:67:37:24:7b:15:f6:0d:fc:ae:4c:bf:b0:48:e9:19:96:
ab:a2:9e:28:10:f3:69:9a:64:98:e6:4c:44:30:63:48:ed:d6:
97:dc:ed:24:8f:f2:2b:0d:61:cc:f9:b1:2a:30:8f:29:6a:b0:
22:c8:f2:fc:0e:9c:d3:00:bc:c5:8d:c9:c1:79:ed:4a:bf:0f:
04:aa:d0:a9:b8:d0:a2:3e:a3:4d:c1:f1:b3:5a:ae:8f:54:b0:
ca:98:42:25:c6:05:77:c0:88:4b:7e:37:06:7f:08:56:51:09:
90:7c:14:93:26:98:b8:51:2f:5b:7f:f5:9a:91:e8:c7:ef:ea:
a2:cb:f2:62:21:d4:aa:ac:ba:ec:ea:e7:17:c4:09:0a:e3:01:
10:ca:e0:94:21:b9:66:72:57:dd:fb:6e:19:03:f2:9b:ec:8e:
bc:a1:d4:30:49:25:2a:f2:4f:2b:44:3e:d8:e8:1f:33:08:04:
ff:1c:4e:cb:8d:4a:40:05:1d:00:58:24:37:44:73:e2:36:88:
53:64:e2:02:cb:fd:d7:ff:2b:fd:c4:11:f9:d3:c2:9d:4f:4d:
2f:4c:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:17 2025 by rpki-client