Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/esEdhwnY6Mc7cXWJoyejGMuJeP8.roa
File: esEdhwnY6Mc7cXWJoyejGMuJeP8.roa (raw, json)
Hash identifier: UktRset73Yz8kDzI8kb437ys1d5Dv5o9aUVZTk4jvVE=
Subject key identifier: 7A:C1:1D:87:09:D8:E8:C7:3B:71:75:89:A3:27:A3:18:CB:89:78:FF
Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Certificate serial: 0DB7A8FA
Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/esEdhwnY6Mc7cXWJoyejGMuJeP8.roa
Signing time: Wed 09 Mar 2022 15:25:15 +0000
ROA not before: Wed 09 Mar 2022 15:25:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202089
IP address blocks: 85.14.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230140154 (0xdb7a8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Validity
Not Before: Mar 9 15:25:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ac11d8709d8e8c73b717589a327a318cb8978ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:05:35:6d:c1:30:09:c8:a0:42:40:01:9e:
20:df:e3:f8:7b:83:04:0f:e0:3b:f8:a0:ac:54:96:
c5:37:49:38:50:5b:a3:68:3a:c8:01:18:28:6f:03:
95:9c:12:f1:46:fa:b8:e4:2c:e2:81:37:6b:62:8b:
59:95:a5:9a:2b:14:54:ee:ed:7d:d4:72:a4:a5:d7:
52:6f:66:ad:46:bf:42:4e:be:59:39:a0:49:79:71:
c7:e2:47:37:8d:60:31:13:a2:05:7c:d9:58:3e:50:
be:e8:c8:cd:21:49:ed:6f:56:dd:b9:dd:86:ad:ab:
8f:89:eb:c9:6d:c9:ae:0b:19:77:30:21:46:9a:5a:
de:f2:a0:5e:50:bd:87:bb:da:2a:52:73:e9:6e:95:
4f:79:53:9a:5a:c7:d3:63:b8:5a:12:83:03:f3:c5:
80:7b:5f:02:55:c3:c1:19:57:11:74:26:0b:a6:34:
dc:83:39:89:11:f1:77:00:38:33:24:a9:e0:dc:dd:
b3:36:db:98:24:78:0c:e5:60:4f:f0:c3:43:5e:c0:
4d:49:34:76:fd:ed:d3:74:12:4a:38:f2:aa:fb:c6:
01:62:0c:78:d1:dc:91:9a:25:e5:b9:cd:6c:40:74:
d5:f8:e1:90:9b:12:32:35:f0:11:0f:d1:6a:9f:5f:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C1:1D:87:09:D8:E8:C7:3B:71:75:89:A3:27:A3:18:CB:89:78:FF
X509v3 Authority Key Identifier:
keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/esEdhwnY6Mc7cXWJoyejGMuJeP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.171.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6b:d3:77:80:f4:2d:8a:f8:f9:c6:b8:00:e8:d5:38:dc:d6:
e4:51:2b:b4:f5:61:57:41:b7:0c:88:0f:b4:ee:35:51:b3:9e:
13:2e:36:e2:1e:a9:cb:76:a0:9a:06:d5:70:97:42:2b:b2:51:
55:93:77:c0:9b:e0:fb:01:1f:5a:54:b6:a0:33:8d:d2:90:08:
4b:14:b4:61:25:e1:9d:29:04:61:52:92:98:96:ae:af:4b:bb:
15:be:95:5a:4e:2c:aa:2e:ab:c6:84:31:cb:02:61:5c:e4:42:
fa:7c:43:7c:93:1d:d1:27:00:d6:24:b5:68:e8:3b:04:c5:df:
b6:e4:16:64:6d:25:96:c3:ae:80:16:bb:e5:6a:df:a4:dc:4a:
d8:ad:66:79:dd:7b:5e:ca:be:86:6b:b4:ae:91:21:bf:5a:e0:
c0:6b:22:61:e2:5f:bb:4b:d3:ed:e1:fb:05:59:0f:80:73:ea:
a0:42:8f:3d:c3:7b:3c:51:3d:79:65:51:c1:a2:01:bd:cb:02:
dd:f2:6e:ba:46:a7:e4:ee:72:6e:18:43:df:34:cc:e2:be:18:
05:b0:31:74:4f:08:77:62:6e:61:c3:e3:f2:d1:ae:bf:b8:75:
8d:a8:2d:01:59:8d:da:e1:78:92:49:fb:e4:cb:6d:a6:a6:2f:
ae:ad:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:48 2025 by rpki-client