Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9rC-deu-OaPIUpgcxvFnIINqG9o.roa
File: 9rC-deu-OaPIUpgcxvFnIINqG9o.roa (raw, json)
Hash identifier: yFa+84r64DxN39zQbmetbLTOCrLgLXbLYdNuAgHp0zw=
Subject key identifier: F6:B0:BE:75:EB:BE:39:A3:C8:52:98:1C:C6:F1:67:20:83:6A:1B:DA
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 018287838D61628A7010389E7CFDD9C59CF6
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9rC-deu-OaPIUpgcxvFnIINqG9o.roa
Signing time: Wed 10 Aug 2022 11:28:41 +0000
ROA not before: Wed 10 Aug 2022 11:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 85.239.149.0/24 maxlen: 24
85.239.148.0/24 maxlen: 24
85.239.150.0/24 maxlen: 24
85.239.151.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
185.95.156.0/24 maxlen: 24
185.95.159.0/24 maxlen: 24
185.95.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:83:8d:61:62:8a:70:10:38:9e:7c:fd:d9:c5:9c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 10 11:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6b0be75ebbe39a3c852981cc6f16720836a1bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:a0:9e:c2:d8:62:d5:d6:f4:5c:a3:e3:b3:
54:6d:c5:98:92:69:83:8b:c0:38:85:2b:03:9d:ac:
8d:c1:80:07:b3:8d:fa:c4:0f:52:17:d9:a9:56:ef:
d9:f9:1c:93:c4:cf:ff:6c:d0:ff:3f:47:00:ba:dc:
de:01:52:92:5c:55:81:26:07:22:4a:f0:94:a5:6e:
ee:04:7a:0b:09:a0:23:9c:e4:5a:3e:ba:40:ff:8b:
ef:3d:5d:73:21:da:33:8e:24:ee:df:96:64:0d:06:
a4:75:3c:61:00:d5:78:61:19:76:48:89:ef:a5:cf:
49:4d:e3:ce:52:89:c1:ac:d9:6c:e6:2e:3d:ed:cc:
24:9f:cd:2e:0b:58:04:34:95:e4:5a:6f:3f:37:69:
2d:ba:ce:2b:67:2d:80:2c:95:16:ee:38:9f:34:7d:
5f:5b:c5:2b:7b:40:1c:d6:75:e8:b7:67:e2:ce:e0:
44:a3:4d:93:b0:5e:d3:fb:f0:00:11:33:92:f1:3e:
9a:61:15:9c:ba:f5:4f:f7:91:a1:02:c8:3b:51:d3:
0c:1b:82:1d:3a:49:6b:27:28:35:18:b9:90:73:4f:
ac:ae:0c:3e:dc:9b:3b:d2:b3:23:85:e2:fe:59:f9:
94:85:71:ae:11:5b:0c:0c:a1:6a:a0:ff:75:b7:29:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B0:BE:75:EB:BE:39:A3:C8:52:98:1C:C6:F1:67:20:83:6A:1B:DA
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9rC-deu-OaPIUpgcxvFnIINqG9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/22
185.95.156.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:5c:8f:5a:ce:2f:86:ae:87:ca:23:ec:48:e4:d3:24:aa:d7:
34:d4:a3:41:29:eb:95:ab:a5:0d:2b:3a:cc:d4:46:fc:8e:f7:
b6:18:0d:25:ff:df:d3:47:26:ec:01:4c:2a:c8:f8:33:28:a9:
72:3b:b5:c8:3d:98:80:28:e5:51:43:92:8b:81:97:b9:42:e3:
bc:1d:02:42:25:29:3f:5f:3f:73:b0:e3:dc:46:52:e6:ec:dd:
9d:3b:21:11:2c:ee:f1:d2:6f:62:5c:cb:97:4d:3d:09:83:e9:
42:d6:35:09:33:80:dd:4c:43:32:c0:11:59:5c:22:a3:39:09:
78:fb:0b:de:99:f0:60:7a:ed:4c:b2:5e:2f:c1:40:8f:8a:48:
9c:db:5c:d5:37:dc:35:4a:1f:64:11:11:39:78:6c:d7:cd:3c:
05:52:a1:3d:6a:4d:62:28:0f:63:08:ca:1a:00:ca:e6:a5:2a:
e2:88:e4:34:64:a0:60:47:95:c9:b2:a9:49:76:97:48:fb:97:
ea:b9:1b:b3:0a:5e:32:d6:82:0b:1f:c2:ac:c3:d8:f4:df:d1:
d7:46:8a:67:73:c8:53:2f:ce:a8:0a:50:7f:08:58:be:64:10:
94:d1:01:be:ca:09:1b:be:8a:d6:39:e5:87:94:17:4a:82:a6:
07:54:a8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:13 2025 by rpki-client