Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/k_pEd4gyrT2r0e6PvwgnzPlGd2s.roa
File: k_pEd4gyrT2r0e6PvwgnzPlGd2s.roa (raw, json)
Hash identifier: lTr6geBH9aM6/Zs9LxDB93jSTHylOfItesKS8CAXJMU=
Subject key identifier: 93:FA:44:77:88:32:AD:3D:AB:D1:EE:8F:BF:08:27:CC:F9:46:77:6B
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F0241ED5E846CC85A23D6390D80A8B2
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/k_pEd4gyrT2r0e6PvwgnzPlGd2s.roa
Signing time: Sun 01 Jan 2023 20:24:56 +0000
ROA not before: Sun 01 Jan 2023 20:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43615
IP address blocks: 85.254.44.0/24 maxlen: 24
85.254.86.0/23 maxlen: 23
2a02:610:fffe::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:41:ed:5e:84:6c:c8:5a:23:d6:39:0d:80:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93fa44778832ad3dabd1ee8fbf0827ccf946776b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:20:24:d7:24:ad:03:4c:9c:86:9d:b1:76:
56:99:22:4b:61:61:bc:77:b4:3f:0f:bf:6f:4d:67:
f8:e8:ef:b2:c9:0b:9d:00:dc:30:2c:59:a5:85:58:
66:87:d0:50:d7:63:14:93:d6:75:ec:1c:1e:33:9a:
b5:99:d1:ea:ef:42:5a:5f:e9:ff:6e:df:12:71:d6:
83:ef:bf:11:fe:37:25:94:13:4f:de:ff:0b:85:7e:
dc:fd:2c:7f:51:95:c1:5a:64:0c:8b:2b:6f:0e:d4:
3f:80:6b:fd:ac:8f:91:0a:00:1b:84:ee:cc:59:79:
e3:bd:82:cb:f7:c2:f9:de:06:10:d4:07:2a:49:a6:
06:e1:f8:61:70:7f:c6:0e:ae:32:d0:3d:4f:3c:47:
2d:5f:56:e9:e1:c5:c7:03:34:da:83:8a:bf:e8:fa:
81:0a:53:0c:10:0d:38:4d:a2:0e:86:60:c9:4c:68:
07:fe:96:a0:0f:dc:38:0e:0e:ce:28:07:b9:47:cf:
ae:f2:99:68:72:40:45:df:46:fc:0f:1c:ce:f2:2a:
8d:ed:f5:7a:ba:4f:6f:99:3b:85:e7:6f:dd:03:17:
62:ee:38:51:29:c1:7d:c6:bd:6d:91:fd:56:6e:86:
97:99:ce:76:c4:eb:0e:d5:eb:fb:5d:70:9b:a0:da:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FA:44:77:88:32:AD:3D:AB:D1:EE:8F:BF:08:27:CC:F9:46:77:6B
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/k_pEd4gyrT2r0e6PvwgnzPlGd2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.44.0/24
85.254.86.0/23
IPv6:
2a02:610:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
61:be:bb:a4:c5:4d:71:96:8a:e1:7e:d2:ba:89:d1:6d:bc:ab:
0d:76:c7:42:77:07:f2:f3:c9:69:97:b0:aa:16:ef:ae:38:7c:
7a:07:fd:23:2f:0e:7b:24:fd:00:e6:47:3e:d8:1a:a7:79:c3:
0a:39:c3:40:52:c2:f4:e8:08:50:d0:91:e8:3a:27:ec:ab:10:
d2:ea:c9:9d:ad:27:71:1c:0d:38:38:66:2a:b8:51:ff:ae:53:
46:38:ee:2d:25:7c:ef:01:63:4c:d5:60:10:11:de:8c:8b:0d:
be:90:8e:39:54:73:80:db:b3:26:cf:f7:da:eb:86:e5:53:92:
2a:cc:b2:58:4f:1c:93:7e:39:6c:00:e2:cb:fc:2e:3a:57:b3:
d9:c4:74:9b:bb:d7:43:39:f7:2f:45:6a:db:58:6b:29:f2:ea:
41:27:55:ba:ce:2c:07:52:4a:5b:8e:50:3d:f8:75:76:31:31:
19:98:68:fc:b9:e0:71:24:bc:a1:53:b2:96:b4:92:ab:a2:42:
09:53:f0:a1:f7:38:20:b5:9b:60:9f:61:c4:d3:8c:09:51:1c:
9e:98:54:54:b7:f9:56:ab:59:ca:d0:a4:92:32:9c:de:7a:79:
7a:9e:58:03:43:ca:2e:9e:46:b3:f1:b2:a7:f8:6d:ad:10:3d:
12:1a:0c:b6
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVvAkHtXoRsyFoj1jkNgKiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjMwMTAxMjAyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2ZhNDQ3Nzg4MzJhZDNkYWJkMWVlOGZiZjA4MjdjY2Y5NDY3NzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1UgJNckrQNMnIadsXZWmSJLYWG8
d7Q/D79vTWf46O+yyQudANwwLFmlhVhmh9BQ12MUk9Z17BweM5q1mdHq70JaX+n/
bt8ScdaD778R/jcllBNP3v8LhX7c/Sx/UZXBWmQMiytvDtQ/gGv9rI+RCgAbhO7M
WXnjvYLL98L53gYQ1AcqSaYG4fhhcH/GDq4y0D1PPEctX1bp4cXHAzTag4q/6PqB
ClMMEA04TaIOhmDJTGgH/pagD9w4Dg7OKAe5R8+u8plockBF30b8DxzO8iqN7fV6
uk9vmTuF52/dAxdi7jhRKcF9xr1tkf1WboaXmc52xOsO1ev7XXCboNqXKQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFJP6RHeIMq09q9Huj78IJ8z5RndrMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEva19wRWQ0Z3lyVDJyMGU2UHZ3Z256UGxHZDJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAVf4sAwQB
Vf5WMA8EAgACMAkDBwAqAgYQ//4wDQYJKoZIhvcNAQELBQADggEBAGG+u6TFTXGW
iuF+0rqJ0W28qw12x0J3B/LzyWmXsKoW7644fHoH/SMvDnsk/QDmRz7YGqd5wwo5
w0BSwvToCFDQkeg6J+yrENLqyZ2tJ3EcDTg4Ziq4Uf+uU0Y47i0lfO8BY0zVYBAR
3oyLDb6QjjlUc4DbsybP99rrhuVTkirMslhPHJN+OWwA4sv8LjpXs9nEdJu710M5
9y9FattYayny6kEnVbrOLAdSSluOUD34dXYxMRmYaPy54HEkvKFTspa0kquiQglT
8KH3OCC1m2CfYcTTjAlRHJ6YVFS3+VarWcrQpJIynN56eXqeWANDyi6eRrPxsqf4
ba0QPRIaDLY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:06 2025 by rpki-client