Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/q0CUysX9pWpfbC-7jT0Kn8IdqO8.roa
File: q0CUysX9pWpfbC-7jT0Kn8IdqO8.roa (raw, json)
Hash identifier: /VrvmDhM/KmZ5+co3M8rDpeYjwR+5dNFycbKQ4AtaKY=
Subject key identifier: AB:40:94:CA:C5:FD:A5:6A:5F:6C:2F:BB:8D:3D:0A:9F:C2:1D:A8:EF
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0189BA4827B27E540130461C4980DD0E7F1B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/q0CUysX9pWpfbC-7jT0Kn8IdqO8.roa
Signing time: Thu 03 Aug 2023 07:23:58 +0000
ROA not before: Thu 03 Aug 2023 07:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 62.60.146.0/23 maxlen: 24
213.176.120.0/23 maxlen: 24
62.60.184.0/22 maxlen: 24
213.176.126.0/23 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:48:27:b2:7e:54:01:30:46:1c:49:80:dd:0e:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 3 07:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab4094cac5fda56a5f6c2fbb8d3d0a9fc21da8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:d1:89:c7:d7:dc:11:0d:45:18:25:dc:ca:
8e:66:4d:fa:eb:53:c3:3d:fd:ec:60:f1:8d:5c:aa:
88:ef:41:20:0f:47:65:2a:75:ff:51:ce:ee:df:a1:
17:0d:46:70:9f:ab:8c:ee:8c:0c:73:58:87:63:59:
07:ec:0d:a0:b2:63:b7:3d:fe:a6:5d:04:d2:31:9a:
03:2c:89:d1:06:86:84:c4:35:23:85:bc:bb:b8:3a:
0f:e9:ae:83:81:f1:f8:62:55:10:18:a0:41:56:a6:
2f:fb:4e:fa:2b:34:b8:40:b5:1a:95:c9:b3:f3:bd:
60:4e:8f:be:25:a3:8e:5a:64:08:9e:68:60:24:80:
ef:0b:1b:dc:f9:73:49:5b:60:2a:44:ec:b0:48:e9:
11:e8:28:88:27:49:19:d9:42:90:87:b2:14:9b:8e:
d2:e0:55:cf:84:30:03:a9:44:06:24:b3:fb:33:26:
1a:00:70:79:7c:46:24:ad:59:b1:09:7e:bd:3d:bf:
74:c1:f0:0d:9c:c9:3f:b4:4f:a8:1e:42:94:fa:39:
b2:81:84:b5:8c:41:75:80:80:b0:b9:23:ce:67:3a:
95:81:d9:6d:f3:2a:13:3b:94:20:f8:b8:07:10:ac:
2b:dc:75:9c:bc:ee:5f:e7:f0:17:e3:ee:19:8a:b2:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:40:94:CA:C5:FD:A5:6A:5F:6C:2F:BB:8D:3D:0A:9F:C2:1D:A8:EF
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/q0CUysX9pWpfbC-7jT0Kn8IdqO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0/23
62.60.184.0-62.60.199.255
213.176.120.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
61:f4:28:b9:93:e9:e9:6d:a2:79:66:71:75:53:34:4e:5e:fa:
7d:22:07:a4:5e:44:02:6f:95:26:90:ac:ef:3d:1b:cb:85:39:
b8:e1:86:0f:53:c4:4a:cb:c9:fc:f6:8c:47:48:da:b7:1b:c7:
25:81:e2:50:8c:7c:1f:23:aa:3f:24:25:45:98:7d:69:07:65:
b5:fe:b2:e4:ca:83:66:4a:b6:bc:df:ff:00:d9:20:f4:fb:a7:
51:2e:e9:fd:c6:f1:31:e0:75:f6:98:18:ea:fd:97:19:e0:b2:
fc:bc:0f:7b:d7:72:8f:ba:68:31:b3:45:71:a8:c8:95:2e:5b:
4d:94:1e:23:23:8c:77:02:db:7d:22:e7:96:69:8a:84:a7:c2:
cb:9a:cd:7a:d9:e8:fb:db:70:c0:2f:43:91:ae:f0:e8:a4:45:
af:ce:b1:89:b4:4b:d0:04:34:9e:87:fa:ac:e0:32:03:91:8a:
4a:dc:b2:9b:34:46:0d:a7:b2:41:db:a9:17:72:6d:e1:b1:04:
60:5f:05:d7:30:06:c1:cd:66:98:7b:64:58:8b:b7:e7:86:87:
8e:17:31:b4:cf:d8:ea:cf:43:2b:a1:db:37:fb:5c:a4:79:c4:
74:97:c7:05:7b:d5:1d:db:f1:69:25:28:4d:ec:fd:e1:58:16:
9b:61:11:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:50:24 2025 by rpki-client