Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/fqOPAI7yFsihGVyRzs1sWHXaFdE.roa
File: fqOPAI7yFsihGVyRzs1sWHXaFdE.roa (raw, json)
Hash identifier: +Ljl0t/gPjsDJCFYaP41mqKT1pfZPbTDNKW/w4vAHX4=
Subject key identifier: 7E:A3:8F:00:8E:F2:16:C8:A1:19:5C:91:CE:CD:6C:58:75:DA:15:D1
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 2B77
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/fqOPAI7yFsihGVyRzs1sWHXaFdE.roa
Signing time: Tue 15 Mar 2022 18:36:56 +0000
ROA not before: Tue 15 Mar 2022 18:36:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34620
IP address blocks: 85.255.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11127 (0x2b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Mar 15 18:36:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ea38f008ef216c8a1195c91cecd6c5875da15d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:18:6d:26:df:ac:ff:12:d2:a5:0d:71:13:
fd:ca:50:93:fd:63:f2:b3:cf:83:d1:a1:d1:33:6a:
07:ad:db:a5:78:83:ae:68:3a:e0:a8:fd:7f:16:95:
94:a1:20:7f:52:07:02:6f:b4:8d:b0:96:24:12:db:
29:66:dd:a6:8e:d5:98:59:b1:db:81:3b:7f:a6:7d:
28:cf:47:4b:7c:d3:76:d7:97:bc:ed:b9:e7:c9:84:
bd:bb:c1:08:58:3d:3e:4e:ea:2c:b9:25:f6:0b:d9:
38:c2:3e:0b:a4:1f:fc:8b:92:e7:fa:81:76:e8:97:
b1:87:6c:42:0d:59:b1:3f:89:61:7d:a9:1c:a2:37:
d6:1f:46:55:37:47:56:60:a9:6a:e6:65:73:69:41:
06:99:15:04:1d:8a:cd:41:08:ad:91:2f:72:ed:6d:
8e:0b:f5:46:26:ec:37:e9:4c:6b:1f:7f:7c:d2:28:
b7:0d:70:38:3d:11:f0:45:ce:19:d6:84:01:78:39:
f7:bb:d0:4d:e9:7e:58:ef:bb:53:16:f3:77:cb:d6:
b7:b1:eb:a7:ea:c4:aa:23:4a:9c:0d:95:e1:0d:72:
3f:c2:1c:5d:c3:7c:77:f2:3b:2a:8f:be:08:43:10:
c0:51:86:b4:0c:54:68:0a:96:bf:c6:42:aa:0b:01:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A3:8F:00:8E:F2:16:C8:A1:19:5C:91:CE:CD:6C:58:75:DA:15:D1
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/fqOPAI7yFsihGVyRzs1sWHXaFdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.64.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:9a:40:76:26:bf:70:10:5c:06:ce:51:a4:43:95:77:35:8a:
94:78:b9:50:65:44:d6:71:4c:b4:0f:07:5a:18:6f:97:a1:3a:
c8:c3:1c:71:11:34:b4:79:02:61:00:cb:8c:9c:02:b5:32:ab:
66:47:a4:5c:87:95:8b:d5:ad:b6:d2:0b:48:91:22:57:04:5e:
fb:0a:01:4b:37:34:d3:33:9f:0c:18:33:76:5a:f0:5e:12:52:
df:2f:c9:01:1d:5c:3c:7a:0f:1b:a8:ca:82:42:2e:3f:ce:1e:
f9:ee:d4:5e:aa:40:23:43:b8:3c:c4:8f:01:ed:1c:c0:bd:bf:
5b:ca:d2:14:93:32:bb:3a:37:8e:8f:2b:62:6b:55:e3:90:5e:
10:f5:24:1b:05:30:96:56:99:d8:3f:11:58:d2:a5:32:08:00:
c2:94:39:06:b8:eb:13:0c:ca:dd:9a:98:32:67:a0:49:42:e3:
0b:96:a4:ee:50:ad:f7:69:c5:34:ed:9a:8f:f4:8e:a0:ef:ab:
ed:d3:a6:98:72:77:47:03:f0:cc:d1:a9:2d:9c:e4:26:7c:a8:
5c:6b:52:4f:a8:42:16:62:a8:fa:0f:5d:cf:95:4d:db:7f:11:
37:f1:d9:96:85:d9:ac:f0:cf:ff:3c:f4:a6:81:bb:6d:73:d9:
1b:3f:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:57 2025 by rpki-client