Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/QTCpODaauOa6dPSiA3pY5Blee7c.roa
File: QTCpODaauOa6dPSiA3pY5Blee7c.roa (raw, json)
Hash identifier: EfEAEh9zj5+lRvt214+9iN2WGUlUwJJoWwEE9W7Wgvg=
Subject key identifier: 41:30:A9:38:36:9A:B8:E6:BA:74:F4:A2:03:7A:58:E4:19:5E:7B:B7
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 0186E547676403588787C88E234C2A90F820
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/QTCpODaauOa6dPSiA3pY5Blee7c.roa
Signing time: Wed 15 Mar 2023 12:38:27 +0000
ROA not before: Wed 15 Mar 2023 12:38:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50986
IP address blocks: 193.34.202.0/24 maxlen: 24
31.170.24.0/24 maxlen: 24
31.170.24.0/21 maxlen: 21
185.27.96.0/22 maxlen: 22
178.236.64.0/22 maxlen: 22
178.236.64.0/20 maxlen: 20
2a02:1610::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:47:67:64:03:58:87:87:c8:8e:23:4c:2a:90:f8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Mar 15 12:38:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4130a938369ab8e6ba74f4a2037a58e4195e7bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:eb:68:73:57:ea:16:6a:ce:6f:f7:26:5e:
45:38:12:87:13:81:92:32:4c:66:26:bd:f7:73:8c:
58:39:9d:0c:26:7b:d0:2b:fb:15:22:ce:c0:58:3e:
18:d4:c9:dc:98:b5:ca:45:43:ad:98:ce:16:5e:05:
7a:1d:16:58:8d:9f:d6:d3:93:24:78:3e:bf:da:97:
4a:13:98:c1:2b:16:6e:7d:36:21:3f:e4:34:ca:54:
72:d3:11:10:ae:f8:bc:7c:42:83:ae:43:a9:16:c6:
c6:ba:22:df:22:23:72:6f:20:d0:5b:25:9c:4c:c3:
56:5b:5d:4f:cf:be:21:3c:b8:68:6e:09:af:74:95:
db:20:45:bd:d9:86:da:25:8a:d0:3a:5e:f0:ab:40:
6f:4e:27:4d:f1:2d:7d:9a:8b:75:da:ab:ba:de:39:
4c:57:18:9b:a5:a0:8e:c8:a5:5d:56:38:78:31:89:
d9:52:02:1b:00:09:92:34:c7:a8:2b:db:31:24:9a:
95:6a:75:12:57:3a:84:8f:89:7e:9b:44:8c:3b:ac:
fb:04:40:35:6a:f7:32:59:c2:cb:f1:78:31:67:df:
6b:9a:b2:c5:27:28:67:32:2c:42:5a:7a:32:87:63:
35:b7:74:b4:4a:3c:8f:50:ad:d8:56:a2:59:75:42:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:30:A9:38:36:9A:B8:E6:BA:74:F4:A2:03:7A:58:E4:19:5E:7B:B7
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/QTCpODaauOa6dPSiA3pY5Blee7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.24.0/21
178.236.64.0/20
185.27.96.0/22
193.34.202.0/24
IPv6:
2a02:1610::/32
Signature Algorithm: sha256WithRSAEncryption
38:a8:33:a8:a4:99:dd:c0:98:40:dd:6c:ef:58:82:88:56:be:
c9:6f:42:45:6a:f6:ab:79:fd:9c:3c:af:b1:58:9a:b9:f6:cf:
6a:e8:d4:c0:8e:27:71:dc:f0:43:f3:04:d2:a2:22:79:24:3b:
7e:95:22:45:95:f4:bb:80:ec:de:e9:af:d1:af:7e:b6:5e:24:
cd:bb:62:b1:1b:04:58:15:67:63:75:84:d5:c8:08:d0:e5:3c:
29:e1:9f:1d:7b:4e:d1:cd:28:c4:b0:02:cb:51:5a:b5:9c:4c:
4a:69:0d:6f:f3:04:44:9c:ce:c8:35:1b:85:c1:d1:56:9a:ff:
ab:69:69:af:28:00:e6:2c:00:53:2c:51:40:d6:c4:de:b9:ea:
a2:34:e6:81:ad:9d:59:83:fb:3d:e1:d7:28:f0:b5:ba:ea:3b:
27:6c:24:80:bc:5c:55:8f:d1:24:2e:63:d2:18:92:6b:66:aa:
8d:79:da:fd:a3:1f:e0:e1:fd:bc:a2:73:e2:76:1d:7f:b7:c6:
cc:d9:af:b0:9f:72:77:9e:a7:28:51:9b:41:37:15:da:ba:8c:
5b:9c:05:b7:60:dc:0f:09:1f:0c:48:81:8b:d1:4f:0f:39:39:
cf:79:bb:e8:92:14:94:bb:75:bd:45:5e:09:df:d0:18:80:6c:
92:46:85:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:03:13 2025 by rpki-client