Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/qv0WRlDNqL2Wb7TzaMRfjwTB9eg.roa
File: qv0WRlDNqL2Wb7TzaMRfjwTB9eg.roa (raw, json)
Hash identifier: eHBZrKWAxADVkqydoBTr+cQcZ4uQkjBETOfHwNAKWkw=
Subject key identifier: AA:FD:16:46:50:CD:A8:BD:96:6F:B4:F3:68:C4:5F:8F:04:C1:F5:E8
Certificate issuer: /CN=90ccd913a99bafd893e07ba968a67434e3df5420
Certificate serial: 01856D53E00C1A8B84F8552A955DB6A1354F
Authority key identifier: 90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/qv0WRlDNqL2Wb7TzaMRfjwTB9eg.roa
Signing time: Sun 01 Jan 2023 12:34:51 +0000
ROA not before: Sun 01 Jan 2023 12:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51348
IP address blocks: 195.226.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:e0:0c:1a:8b:84:f8:55:2a:95:5d:b6:a1:35:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ccd913a99bafd893e07ba968a67434e3df5420
Validity
Not Before: Jan 1 12:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aafd164650cda8bd966fb4f368c45f8f04c1f5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:3e:7a:1a:51:bf:8d:96:63:b4:9e:c1:80:
ac:18:a0:d3:d5:d1:52:6b:eb:3e:bf:e9:ca:0a:70:
ce:6f:a5:40:1a:76:a3:55:41:2c:38:d1:0b:78:a8:
8f:67:0a:1d:46:bd:b4:e0:f5:ee:a2:b2:ec:f8:e7:
35:f3:06:26:33:fb:7d:8b:42:1c:10:eb:8b:49:ce:
2e:c7:8c:3e:87:49:8c:c9:64:31:66:4f:d2:5c:eb:
8b:67:df:9f:f2:fb:0c:b4:1e:3a:43:80:89:d7:ba:
3c:0b:84:10:94:30:49:8c:51:ee:4c:a0:d8:33:00:
2a:a1:78:59:ae:63:07:48:3f:e5:18:a2:2f:81:bf:
ba:a8:54:9f:64:aa:65:9f:fc:46:0b:ab:f8:e5:67:
4f:16:e6:c9:75:0b:87:a4:dd:a9:ec:b0:57:6f:8a:
78:16:4d:27:28:0a:24:b2:30:6c:36:71:63:e1:88:
70:be:85:d2:e7:3f:cb:6c:4f:23:d7:0c:e2:e2:33:
84:5a:e1:55:6e:c5:07:ee:95:fb:09:e8:be:1f:4f:
67:70:71:36:7c:f4:e0:10:1f:b5:3c:6a:2b:3c:94:
b4:63:17:4f:ce:8c:75:97:5c:9e:08:08:c3:c4:f5:
40:aa:39:53:e8:77:ba:f4:2c:5e:80:81:28:5c:cf:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FD:16:46:50:CD:A8:BD:96:6F:B4:F3:68:C4:5F:8F:04:C1:F5:E8
X509v3 Authority Key Identifier:
keyid:90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/qv0WRlDNqL2Wb7TzaMRfjwTB9eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.209.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a9:14:98:b6:07:74:41:0d:45:e8:1c:49:cb:f0:3f:2d:64:
64:64:ce:64:bf:6b:d5:e3:7f:6a:2f:02:54:c6:df:df:30:4c:
71:d0:a1:69:32:ab:17:d1:84:1f:d0:d4:65:4b:00:44:03:f8:
1c:e4:73:81:1b:28:24:02:49:30:51:b3:2c:1b:46:02:63:a9:
ab:2c:0c:39:97:32:c2:b9:23:31:0f:1d:16:1e:61:39:26:86:
67:ba:57:3e:a0:b7:6c:be:dd:ad:9e:59:32:c5:27:c3:84:e8:
3a:e1:3f:cd:88:82:ce:b7:8e:83:cc:81:c1:37:9d:82:53:01:
55:fd:47:81:75:4b:8f:d6:17:fa:b7:88:f7:a9:be:ab:b9:55:
2f:3c:86:8d:95:ca:34:61:32:84:78:59:dd:da:c2:13:d7:9b:
7b:9e:ef:51:60:62:97:93:83:a2:26:fe:5c:07:ec:27:ad:7a:
76:fc:c9:32:2c:1f:86:d7:fb:52:14:fa:39:a5:e0:77:69:bb:
d2:ee:a8:a7:33:f4:2f:62:bc:4f:a7:52:8c:33:b7:83:07:ae:
a1:14:6a:c7:03:82:e7:9e:04:e0:36:d1:5d:07:7b:06:98:ae:
69:c8:fa:c1:84:a0:85:03:c8:5a:3a:c9:4b:38:2e:73:c8:84:
a9:51:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:16:13 2025 by rpki-client