Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/QPI_o2PSwHKiyLxGZTg0OpSlnf8.roa
File: QPI_o2PSwHKiyLxGZTg0OpSlnf8.roa (raw, json)
Hash identifier: II3PZfrS+zgJ9wxNUtMRKxLH4K15h9XlJ1pphso6umU=
Subject key identifier: 40:F2:3F:A3:63:D2:C0:72:A2:C8:BC:46:65:38:34:3A:94:A5:9D:FF
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 01891C4DD64B4BB1F45B4F8B6D4D2468E011
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/QPI_o2PSwHKiyLxGZTg0OpSlnf8.roa
Signing time: Mon 03 Jul 2023 15:10:10 +0000
ROA not before: Mon 03 Jul 2023 15:10:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:85c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:4d:d6:4b:4b:b1:f4:5b:4f:8b:6d:4d:24:68:e0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Jul 3 15:10:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40f23fa363d2c072a2c8bc466538343a94a59dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:7a:f9:88:e3:e3:21:a0:72:9e:dd:e1:09:
de:89:79:e4:47:7f:5b:c0:46:f0:64:15:a1:6a:45:
69:22:fa:15:32:90:35:ab:59:51:63:8b:cd:f3:3e:
07:73:73:e7:c9:36:eb:fe:02:db:df:67:b4:a4:8b:
f8:ee:aa:10:e8:5b:1a:ac:25:a2:a3:68:91:b2:a0:
60:4e:2d:4f:16:cc:23:1e:d0:be:5e:30:b6:ee:67:
90:bf:7a:6c:b6:f7:6c:23:71:0f:30:19:57:bf:59:
30:f8:06:71:c3:ea:09:a2:b3:a2:1b:ab:65:1f:4a:
41:a5:58:35:20:86:94:0d:26:48:0e:3d:5a:90:58:
3a:3a:cd:2e:c3:56:64:db:d8:fd:c1:de:56:a3:af:
09:34:cd:82:4d:d3:7e:0b:a9:0a:3a:77:54:b4:da:
40:50:b2:b8:69:94:48:f4:5a:41:9e:45:e1:fd:8e:
23:ea:bd:ed:51:58:af:4a:2d:4e:97:7a:51:52:24:
9e:a5:55:34:48:d1:1e:f4:2d:49:d1:67:3e:92:7c:
2b:bb:8f:7a:a5:44:4c:13:84:f2:88:2a:05:a2:71:
43:bc:67:6d:d0:25:62:b2:ed:7e:9a:05:00:a1:51:
d5:f5:5f:34:08:1e:da:ea:19:21:8c:b5:0e:d1:8e:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F2:3F:A3:63:D2:C0:72:A2:C8:BC:46:65:38:34:3A:94:A5:9D:FF
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/QPI_o2PSwHKiyLxGZTg0OpSlnf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:85c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
8f:4c:ae:03:bc:4b:97:40:d5:18:fc:66:1f:ec:15:55:d2:4b:
a2:db:ea:7b:35:a8:36:b2:96:5f:e5:55:40:3f:7c:04:62:46:
f1:6e:2b:e8:c2:8b:25:32:cc:d8:b5:5e:aa:ff:f9:c0:99:66:
ae:52:fc:97:8c:46:61:37:37:91:f5:d6:6d:55:f1:4f:12:d5:
c9:c4:9c:45:4f:0d:ac:b7:eb:9d:d6:92:91:23:97:61:6e:6b:
9f:8d:29:1b:e9:27:0e:8b:2c:21:17:8f:71:d9:6c:2f:2d:ad:
c9:9e:16:90:15:87:39:cb:54:9e:08:00:a0:e9:8d:c6:b2:26:
48:b8:02:fc:ff:37:44:30:ab:f2:8c:f5:d1:91:15:b6:6d:3e:
c6:9f:1c:de:9d:88:87:ea:75:2f:1d:fb:b9:26:f8:12:ab:b3:
ef:0f:6f:47:fa:ac:b8:ee:e6:80:17:1c:82:aa:83:d7:90:8e:
4e:c4:ca:a9:fa:63:bd:eb:b8:60:1e:47:48:1a:aa:1f:8f:24:
6a:5c:aa:38:be:6f:e6:50:0b:f5:06:96:90:49:7d:ed:e8:75:
45:04:dc:37:dd:36:a2:99:68:cd:46:59:d4:fb:aa:e5:81:fb:
2a:3c:8c:5b:22:20:cc:5c:ab:85:8d:8a:82:28:64:7c:04:25:
05:2c:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:39 2025 by rpki-client