Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/qxeSmNt-RTkSoKM1bzeNL3bBZBU.roa
File: qxeSmNt-RTkSoKM1bzeNL3bBZBU.roa (raw, json)
Hash identifier: QU7jjfABDv3S+hkMz4kkWe3WGbGdAIIrDwD0zq68ZPg=
Subject key identifier: AB:17:92:98:DB:7E:45:39:12:A0:A3:35:6F:37:8D:2F:76:C1:64:15
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 01856F14CD6934B2944B8EF335526F169D7E
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/qxeSmNt-RTkSoKM1bzeNL3bBZBU.roa
Signing time: Sun 01 Jan 2023 20:45:12 +0000
ROA not before: Sun 01 Jan 2023 20:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39146
IP address blocks: 194.26.79.0/24 maxlen: 24
194.26.76.0/24 maxlen: 24
194.26.77.0/24 maxlen: 24
194.26.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:cd:69:34:b2:94:4b:8e:f3:35:52:6f:16:9d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Jan 1 20:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab179298db7e453912a0a3356f378d2f76c16415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:11:5f:fd:c1:6c:ba:84:bd:a9:9d:7d:09:
8c:ee:a1:d9:03:08:72:36:4f:99:01:27:08:02:fa:
e3:f6:2d:7e:36:a9:08:08:99:53:3d:16:13:74:47:
43:c9:f7:43:11:cb:49:82:24:b0:87:95:d8:c8:22:
c0:ee:0e:c1:be:7c:15:d8:df:6b:d1:00:cd:1a:43:
84:ba:97:3e:c7:dc:70:57:9e:de:9d:e0:b0:55:45:
0d:08:b1:0e:59:e5:55:31:28:62:c2:48:cc:91:b5:
d1:76:ed:29:68:2b:eb:65:b3:f3:a1:89:3d:2b:50:
3d:5a:60:ed:08:a1:63:12:bb:68:26:6e:18:98:2f:
82:f5:7c:68:c7:c3:86:6d:b0:24:41:00:5a:fc:db:
79:4d:13:6b:06:bd:d4:88:c8:b2:e2:31:a4:07:b6:
3c:df:04:ef:3a:26:62:2a:11:f9:6e:fa:80:73:e1:
b3:24:99:1f:23:68:0b:e8:c9:93:c2:ab:a0:9a:a5:
17:8d:d8:ca:59:3a:ec:ee:ef:7f:6e:72:ea:c2:09:
f2:57:e0:5b:2c:9a:31:18:e4:7d:f0:9a:db:f3:20:
bf:9e:e0:eb:58:a7:5c:94:d3:1b:75:c9:ca:33:30:
2b:a4:8d:82:72:c2:f1:53:74:3e:0c:65:79:70:fe:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:17:92:98:DB:7E:45:39:12:A0:A3:35:6F:37:8D:2F:76:C1:64:15
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/qxeSmNt-RTkSoKM1bzeNL3bBZBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.76.0/22
Signature Algorithm: sha256WithRSAEncryption
37:9e:a2:48:ea:5e:c7:20:59:65:09:d1:1f:44:03:82:9a:d3:
7a:bc:5f:74:3e:0d:5a:00:03:3e:b1:03:b3:22:bb:b2:12:8b:
dc:8e:c2:8d:a2:b7:8d:e9:09:35:43:cd:45:2a:23:f9:5b:64:
b6:9e:b4:1a:8f:3d:99:bd:06:6f:22:a8:19:f2:18:d5:e0:42:
a0:df:11:fc:91:05:b0:88:46:4c:d7:39:dd:97:11:f4:11:c7:
28:bc:26:4f:d0:c6:f2:22:53:d1:3d:65:b4:06:73:82:c5:cc:
f2:51:ef:92:f7:0e:d1:14:cb:83:c9:c6:73:32:5f:1b:ba:d5:
1e:4f:84:20:f4:6c:c0:d4:2c:67:34:8e:91:61:48:0f:f3:1c:
97:99:c0:ad:56:a5:cf:24:8c:31:4b:0b:83:97:b3:f4:46:32:
45:ba:cf:c4:77:29:56:07:83:4a:1e:87:9f:b0:e9:0a:5b:2d:
c1:57:db:c9:48:b0:a6:a7:26:7b:cc:b2:13:cc:7a:97:bf:d6:
f1:41:d8:aa:22:a6:7d:03:11:d2:e5:a7:2c:77:d3:bf:45:77:
1c:9e:3d:96:2a:23:37:fe:81:54:b5:3e:71:63:22:c8:c4:a6:
47:f5:6e:eb:be:9a:ef:19:87:0d:5c:26:95:24:91:de:da:1a:
d1:1d:22:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:41:26 2025 by rpki-client