Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/qrGssP38f_BxVGw0_NLUI340R-Q.roa
File: qrGssP38f_BxVGw0_NLUI340R-Q.roa (raw, json)
Hash identifier: 2Zsfy8G8Np3YDbjjgFazGIiDa4DzgHlnPKnFLDA+bMc=
Subject key identifier: AA:B1:AC:B0:FD:FC:7F:F0:71:54:6C:34:FC:D2:D4:23:7E:34:47:E4
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 018AB6746A61B892232E76F48A00B23D6419
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/qrGssP38f_BxVGw0_NLUI340R-Q.roa
Signing time: Thu 21 Sep 2023 06:36:37 +0000
ROA not before: Thu 21 Sep 2023 06:36:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.229.147.0/24 maxlen: 24
2a0d:d600::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:74:6a:61:b8:92:23:2e:76:f4:8a:00:b2:3d:64:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Sep 21 06:36:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aab1acb0fdfc7ff071546c34fcd2d4237e3447e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:a7:91:b8:7b:58:31:8f:df:d2:38:48:02:
90:5c:f5:c4:da:77:f0:36:ea:58:f0:ab:54:a9:e5:
47:81:f7:c8:c8:97:99:a4:c6:1b:de:0b:33:71:ff:
bb:9c:c1:54:05:12:77:3b:5c:c8:93:20:cd:58:b2:
75:0c:22:af:18:37:09:66:1f:66:51:7b:88:2a:87:
cd:d7:9f:9d:af:ee:b1:1b:2c:f2:86:e8:3b:e0:8e:
97:c9:c0:0d:50:09:88:ef:1c:6a:dc:7a:eb:b9:89:
dd:bf:98:0b:f6:ad:c2:3b:1d:fa:64:47:3b:1c:cb:
e6:f6:c2:09:3e:9c:f0:72:5b:56:2a:2d:62:76:e3:
a4:23:a4:8c:2a:33:42:19:d5:94:e5:4c:98:a1:ac:
37:16:28:b1:02:06:eb:0a:a6:81:c1:64:f0:6a:f4:
e9:da:f8:75:1a:49:a4:4b:8c:ac:f9:6b:2a:4e:ba:
d4:6a:60:5e:18:70:ac:6a:20:14:51:46:48:80:b2:
e3:3a:30:25:79:d1:e3:fc:c8:43:4e:11:34:e9:d4:
dc:a8:38:ef:a0:4b:3c:42:35:f6:79:df:a4:a5:02:
22:b1:5c:97:83:64:5f:ab:10:bc:9f:7f:3b:a2:89:
8a:48:30:4d:a5:b5:2e:74:29:68:19:87:b4:1e:ce:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:AC:B0:FD:FC:7F:F0:71:54:6C:34:FC:D2:D4:23:7E:34:47:E4
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/qrGssP38f_BxVGw0_NLUI340R-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.147.0/24
IPv6:
2a0d:d600::/32
Signature Algorithm: sha256WithRSAEncryption
39:3b:e5:79:c3:0a:09:df:bd:f3:44:f4:ad:06:b8:3b:5c:31:
6d:2d:bf:78:b6:d3:de:87:65:70:1a:8d:fd:32:98:6d:6c:af:
d6:66:4e:bf:49:4a:f1:7d:cc:6f:68:aa:f7:c6:89:9a:70:b5:
f2:f0:40:35:74:e6:b1:63:01:d7:dc:c0:11:64:04:f8:a1:df:
bf:fa:3e:39:81:f1:a5:2c:75:b6:10:57:90:2a:ef:91:46:72:
eb:4b:39:42:4d:e5:c0:85:0a:82:c2:4e:09:cb:50:53:f1:35:
e2:e0:8e:66:3b:b1:1a:72:05:ba:d5:00:2c:1b:12:13:92:f0:
29:2c:f8:dc:20:c9:6a:0e:4a:18:96:2d:6e:87:32:96:a2:c2:
fa:d4:05:07:86:76:bd:a8:ac:02:e0:20:3b:19:12:ed:cd:e5:
1a:78:8d:6e:0f:01:f4:0c:36:a0:5f:19:93:4d:ee:4e:fa:c2:
b0:f5:8d:0c:c5:c4:66:74:1c:46:77:28:91:70:fb:7b:dc:57:
99:06:e2:ad:71:b2:c3:f8:c5:1d:41:f1:33:be:c3:b3:48:5f:
bd:47:89:dd:0e:6f:d1:79:4b:da:c5:a0:aa:61:f0:09:70:54:
2d:87:6b:9f:67:93:02:b6:80:42:ca:9c:6a:2f:21:c8:02:dd:
0e:95:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:07:43 2025 by rpki-client