Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/tqD-0mFdS42uEDcuhlpP21sTV5A.roa
File: tqD-0mFdS42uEDcuhlpP21sTV5A.roa (raw, json)
Hash identifier: kYi3jsQ7KsjuPlq1XrTLnpm+M3kgffC9m8C+sno+gMU=
Subject key identifier: B6:A0:FE:D2:61:5D:4B:8D:AE:10:37:2E:86:5A:4F:DB:5B:13:57:90
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 0185EFBF452F9DD24F66E712C0873923AE40
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/tqD-0mFdS42uEDcuhlpP21sTV5A.roa
Signing time: Thu 26 Jan 2023 20:22:47 +0000
ROA not before: Thu 26 Jan 2023 20:22:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8747
IP address blocks: 109.235.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:bf:45:2f:9d:d2:4f:66:e7:12:c0:87:39:23:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 26 20:22:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6a0fed2615d4b8dae10372e865a4fdb5b135790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:28:8d:8a:58:ed:0b:b0:bc:a1:ee:e4:70:99:
44:b9:cb:46:ae:c5:f3:95:0f:73:21:1a:79:d2:e9:
72:52:e9:f8:fa:b1:e1:fe:64:0d:8a:d1:b3:40:6c:
bc:f0:c9:c3:65:84:c6:d6:57:98:35:64:09:a9:ca:
f6:6e:79:4f:91:96:54:b8:38:98:60:46:eb:e4:ac:
d9:a9:e4:81:e2:dc:9a:9d:1e:d4:1f:5d:a3:5f:59:
ef:d0:ac:f9:6e:a6:a8:cc:12:b4:63:23:ce:a5:28:
4c:9f:0f:53:be:09:c8:c4:fe:74:57:91:2f:5a:62:
9e:b9:08:15:72:92:1f:5c:bd:f4:01:10:d0:18:0c:
c4:e1:19:d4:94:4d:b0:f2:dd:90:ef:5e:a7:23:0c:
c2:8e:f1:19:b1:80:50:bb:6e:a9:a6:bc:13:71:77:
bd:27:36:8b:5d:27:3c:7c:a7:3d:34:76:55:7d:fa:
ce:48:2a:15:1f:aa:08:ca:b8:11:b0:0c:be:55:24:
64:5d:b9:c3:87:36:c8:90:ed:23:b1:5b:89:30:f5:
50:09:ea:44:d2:f5:46:c5:f7:19:97:0a:fe:01:e1:
6d:e7:ad:f8:c6:e0:2f:5c:5f:d2:55:4d:73:0a:57:
98:95:a2:5d:1e:b5:6a:93:78:2b:cb:83:b1:8f:b4:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:FE:D2:61:5D:4B:8D:AE:10:37:2E:86:5A:4F:DB:5B:13:57:90
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/tqD-0mFdS42uEDcuhlpP21sTV5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.180.0/24
Signature Algorithm: sha256WithRSAEncryption
88:98:b9:cc:ff:3a:ad:15:7d:52:cf:65:4d:42:15:68:13:71:
b5:5d:f5:a4:21:7f:54:2e:b4:34:88:41:3a:27:fb:f7:65:18:
f0:2d:d6:0a:4e:fe:92:99:71:85:a5:78:58:f8:c6:b5:fb:55:
aa:87:11:54:e0:1b:e5:1d:0d:74:50:83:73:33:f6:d0:06:6c:
c7:4a:80:65:74:db:82:08:4f:44:75:2d:e9:e4:b7:81:f3:7b:
26:0f:63:66:e7:2d:2d:69:55:c1:8f:fe:a3:f6:fa:49:e7:a5:
b3:00:8d:10:36:0d:dc:fe:44:3e:ce:30:9f:1e:b6:04:f2:38:
8f:9e:9c:41:60:45:e4:d2:93:5b:41:ee:8b:6a:96:fe:9f:f5:
69:a3:1f:61:ef:31:9a:88:5a:0e:da:99:9c:d4:4f:93:07:94:
f8:99:d3:f4:e6:c1:24:a2:9b:03:08:4f:bf:04:47:e0:9b:7c:
e8:99:b6:7d:a9:9c:7d:8a:a5:2a:81:e2:d9:fd:dd:91:3a:61:
d7:25:92:d7:eb:f7:3b:0a:e3:7a:18:85:be:b0:96:31:73:f6:
d4:fb:c7:be:14:47:d0:2c:8c:99:41:ac:59:61:d8:28:e3:ce:
50:48:09:58:71:30:e7:50:ae:10:6b:23:fc:2a:e3:bc:0a:a2:
21:08:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:14 2025 by rpki-client