Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/qNCtyF17GQf9-aYzDkDoQESRxh8.roa
File: qNCtyF17GQf9-aYzDkDoQESRxh8.roa (raw, json)
Hash identifier: iIlv9gGM4/UaiSoS8o2saASfb32+qRQ7DU7+t/eOjTg=
Subject key identifier: A8:D0:AD:C8:5D:7B:19:07:FD:F9:A6:33:0E:40:E8:40:44:91:C6:1F
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 0A417D97
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/qNCtyF17GQf9-aYzDkDoQESRxh8.roa
Signing time: Sat 01 Jan 2022 15:03:25 +0000
ROA not before: Sat 01 Jan 2022 15:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36040
IP address blocks: 185.225.248.0/24 maxlen: 26
176.126.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172064151 (0xa417d97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 1 15:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8d0adc85d7b1907fdf9a6330e40e8404491c61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:52:5d:dc:a7:65:07:38:ce:c1:69:e7:80:
a9:19:33:ef:75:c2:23:5f:d9:3c:78:0b:ed:39:59:
7a:0d:37:18:c3:73:69:39:f7:aa:8e:7e:a5:5e:6d:
4b:16:98:6b:b8:de:2c:aa:51:36:b9:be:4d:5e:39:
17:47:b1:6e:b6:19:9d:b4:7b:b5:f3:e6:fc:59:eb:
e8:d1:5e:9b:2d:fa:88:ca:be:87:07:6f:c9:1d:6f:
95:00:9b:34:72:46:61:1d:8e:37:98:4c:9d:40:be:
67:32:b6:f3:9f:29:2d:54:21:8d:5a:e7:10:44:90:
64:b3:2c:82:9f:de:45:d2:66:9e:da:40:f8:c3:b2:
b9:1f:7b:f1:dd:b1:67:86:c6:e6:cf:b5:01:6f:46:
d1:7d:5c:4b:63:6c:f6:fa:fe:f2:6d:79:f4:95:94:
ec:b5:d3:92:9d:b3:a2:94:cc:e3:95:c5:1b:4b:50:
4b:aa:f3:d7:1f:bc:6e:af:f7:37:db:5a:d8:8f:af:
a5:62:c7:fb:fa:31:a6:03:04:e7:d3:f7:c6:a8:35:
ee:f2:05:ae:74:bf:82:44:9d:9d:85:cf:eb:88:4e:
e5:27:36:5a:7d:a9:d5:9a:56:a1:c6:2a:3d:5f:99:
78:7c:41:10:66:9e:06:f5:e6:c3:a4:a3:cd:5a:d1:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:AD:C8:5D:7B:19:07:FD:F9:A6:33:0E:40:E8:40:44:91:C6:1F
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/qNCtyF17GQf9-aYzDkDoQESRxh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.58.0/24
185.225.248.0/24
Signature Algorithm: sha256WithRSAEncryption
83:89:94:4a:d0:5d:3e:a2:fa:54:16:72:7a:0d:f0:63:56:64:
58:2c:cb:23:46:82:4d:2b:cc:ba:a1:1b:d5:cc:59:c3:d8:42:
1d:e3:f1:bf:03:23:fe:0f:f8:45:92:5b:4c:79:97:8c:ce:c0:
47:98:42:67:f0:48:29:1d:2f:d3:6f:2f:b2:25:1e:80:b2:92:
41:32:65:c3:ab:d0:26:8b:cf:50:a6:35:d0:3c:8b:70:91:1a:
a6:ae:f2:ab:4e:5c:ac:a2:e9:fd:a7:7b:da:c5:20:69:dc:b8:
59:fe:6d:01:80:f7:18:08:83:6e:87:2e:53:46:0b:c2:f2:9d:
49:3e:a1:64:9f:8c:74:5c:03:0e:13:a2:8b:3f:59:92:bf:93:
71:98:e8:48:46:ff:0f:7c:82:fa:59:a7:91:42:07:cf:10:83:
a8:e2:b3:2b:42:90:c6:4f:b9:f3:e4:7d:50:b5:b1:41:5c:42:
f1:0e:f4:2d:db:c6:5c:61:82:9d:fe:7b:ae:80:4f:0a:bb:03:
30:14:eb:ad:ef:95:72:c9:3f:1a:af:62:ad:3e:41:f4:9e:a3:
5c:91:fa:e5:2f:82:35:e6:35:b8:ed:8e:bf:59:1a:0c:2a:c7:
13:15:2f:55:a9:5f:31:ae:3a:da:75:1a:51:30:73:e4:5e:e1:
f0:cf:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:10 2025 by rpki-client