Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qyj2QD6ddN59MkhMamCLXyyYXKM.roa
File: qyj2QD6ddN59MkhMamCLXyyYXKM.roa (raw, json)
Hash identifier: JMIfVFq6eidcYAXg26bpxZcQIorbAbrYS3PFGhwOxoI=
Subject key identifier: AB:28:F6:40:3E:9D:74:DE:7D:32:48:4C:6A:60:8B:5F:2C:98:5C:A3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAF04A76B205069A4E7F6926DBC873
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qyj2QD6ddN59MkhMamCLXyyYXKM.roa
Signing time: Sun 01 Jan 2023 14:44:54 +0000
ROA not before: Sun 01 Jan 2023 14:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32613
IP address blocks: 45.118.248.0/24 maxlen: 24
2a0f:e8c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f0:4a:76:b2:05:06:9a:4e:7f:69:26:db:c8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab28f6403e9d74de7d32484c6a608b5f2c985ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:d5:92:d0:7b:2e:13:5c:de:4b:f1:d2:1a:
f9:6b:47:1b:8c:13:6d:f7:8e:a1:8d:63:8d:24:24:
ad:43:77:51:bc:0c:c2:a4:af:c5:77:e9:fb:c2:fe:
2e:2f:49:85:a9:40:b6:7f:b5:8b:b8:99:66:9c:2e:
f5:3b:9c:00:3f:5f:46:f9:a1:a5:a3:05:99:ac:82:
24:08:b3:32:fe:21:a3:c6:66:ea:e2:ae:92:a9:2e:
1a:c7:8f:7c:8b:44:fa:a5:8c:4d:3c:46:59:f2:fe:
62:b1:1e:80:66:ca:de:f0:33:34:69:1e:09:43:ee:
7a:1b:02:e0:5e:93:ee:f1:e3:29:10:41:ff:15:ab:
9b:d2:ac:5f:f9:75:a8:a9:d1:45:6b:5a:55:74:ac:
87:dd:c4:30:b5:27:e2:4b:ad:04:60:23:a5:31:c7:
84:72:b3:6b:3f:52:b3:43:45:de:80:ad:21:60:3e:
70:3e:95:6a:0b:48:8d:2e:1b:4f:b1:d7:9a:c8:09:
d5:38:2b:e0:98:0b:ef:ef:9a:60:5f:00:c1:e4:ed:
ad:3d:6c:9c:cb:d8:21:65:d1:11:1a:fe:27:9d:d5:
0f:e9:70:26:1f:79:3e:8c:af:f2:26:bc:43:5b:97:
3d:c7:9e:d3:51:b7:8c:3c:68:1c:84:20:46:3a:93:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:F6:40:3E:9D:74:DE:7D:32:48:4C:6A:60:8B:5F:2C:98:5C:A3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qyj2QD6ddN59MkhMamCLXyyYXKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.118.248.0/24
IPv6:
2a0f:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
60:04:29:38:93:ac:ad:1b:5f:eb:ed:10:03:d2:1f:82:5b:4b:
36:bc:47:72:93:7e:70:fd:66:cb:5c:37:f7:5f:b3:7f:6f:47:
be:5b:5b:b2:fe:70:e4:19:4e:83:9d:78:2a:89:61:80:75:00:
33:50:dd:a4:00:be:f3:5a:e3:43:a2:21:92:42:74:72:4d:f9:
1e:62:4f:5e:7a:d0:ad:0a:18:ed:24:04:c5:7e:db:52:96:04:
4a:52:cd:a9:d3:3d:c4:56:75:31:47:9d:0b:3a:8e:28:6c:50:
87:52:31:5e:7d:e1:6a:60:5e:ce:f9:f1:96:d2:5e:ea:ae:c9:
61:24:1b:3e:e2:cd:b6:f5:2a:02:54:45:58:c4:af:bb:ff:b1:
0d:db:f2:69:b1:4e:9e:0d:2e:fd:13:ca:95:3e:7c:c1:77:08:
25:ed:09:06:99:be:0f:0f:62:34:f3:89:2e:86:0d:d6:d4:45:
00:18:37:90:f3:df:0f:45:8a:b1:ee:eb:e3:d9:30:3b:4c:73:
89:99:8a:d4:48:93:d2:de:90:95:ac:cc:5d:12:5f:0c:2f:2d:
8b:44:63:d0:af:f3:a9:c8:a7:d9:b4:58:73:ba:bd:54:cd:c8:
c7:c0:a4:64:02:06:0e:47:1f:20:a3:c4:23:69:44:d8:13:d4:
25:44:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:17:31 2025 by rpki-client