Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/rA20x5arVCSByZ4IwxMUnUg2YcQ.roa
File: rA20x5arVCSByZ4IwxMUnUg2YcQ.roa (raw, json)
Hash identifier: DSw3zXwKr1jp9/QVJ7ibjlBtqakRDuplBOBVMZihDf8=
Subject key identifier: AC:0D:B4:C7:96:AB:54:24:81:C9:9E:08:C3:13:14:9D:48:36:61:C4
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 0186EA7E3DBE3E714D04AF9AA2EFD93B9925
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/rA20x5arVCSByZ4IwxMUnUg2YcQ.roa
Signing time: Thu 16 Mar 2023 12:56:27 +0000
ROA not before: Thu 16 Mar 2023 12:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6810
IP address blocks: 85.130.192.0/18 maxlen: 24
85.130.128.0/18 maxlen: 24
31.168.36.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:7e:3d:be:3e:71:4d:04:af:9a:a2:ef:d9:3b:99:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Mar 16 12:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac0db4c796ab542481c99e08c313149d483661c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:8b:0b:14:b3:54:fd:a4:ad:58:ff:49:95:
a6:0a:cd:a6:b6:27:0a:db:7a:c8:77:0d:8a:11:ed:
bd:71:0a:a6:e2:01:53:70:ce:58:e5:ef:0f:55:5e:
0b:b4:d2:6a:5f:d1:92:6d:1a:06:7e:09:d5:5e:90:
9d:94:dc:04:f4:3e:6c:13:1f:18:b1:e2:83:1d:14:
55:ef:db:82:b7:cf:3d:6e:5c:e6:27:85:3a:d2:44:
c8:91:01:a5:4e:55:50:06:92:70:82:e7:d5:18:56:
d3:61:2d:80:f2:af:7e:e5:33:ba:c7:eb:bc:03:4a:
89:18:c9:91:0d:41:8a:9e:33:d8:6e:d9:ab:a3:bc:
df:d8:c4:53:96:38:bd:16:31:dd:8f:93:3e:b0:8c:
8d:88:71:14:7f:0e:13:bb:3f:64:1c:7f:45:6f:c3:
50:19:4a:e3:5b:81:1e:58:80:c9:81:a4:7e:78:fb:
dc:65:15:77:74:46:a6:c5:05:3e:3e:87:87:47:0d:
54:19:97:6c:28:66:dd:66:b2:09:b1:a9:40:93:f5:
67:06:a7:6e:f9:d2:23:b3:e9:52:ee:f1:78:15:0a:
59:a0:24:15:4d:8c:af:dd:53:a9:88:7a:c7:73:f4:
4e:86:a4:87:40:b5:e8:08:9e:e6:18:57:0b:09:6a:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:B4:C7:96:AB:54:24:81:C9:9E:08:C3:13:14:9D:48:36:61:C4
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/rA20x5arVCSByZ4IwxMUnUg2YcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.168.36.0/23
85.130.128.0/17
Signature Algorithm: sha256WithRSAEncryption
19:1b:5e:8c:67:1b:74:f6:7f:0f:32:e4:1f:2d:19:fe:41:2b:
dc:29:bb:d3:04:51:01:eb:f2:3d:9e:d9:71:25:56:23:72:87:
49:cd:73:e0:52:a7:74:40:5d:fc:42:55:8a:bd:a0:24:6a:6b:
3d:c7:49:2d:7b:3f:89:6b:eb:80:f9:1f:20:47:07:3e:79:c9:
73:dc:21:5e:95:3c:b7:df:df:e6:9e:eb:35:55:de:44:87:cb:
70:b1:de:cc:42:60:a6:a8:83:91:d7:a1:46:9d:1e:41:3e:ac:
2a:49:1b:5a:57:54:85:36:4e:84:fc:6c:48:22:09:7e:96:24:
56:f4:dd:0d:c6:67:4c:db:98:9d:26:42:5d:40:cd:89:9a:b1:
7b:77:13:36:7e:d9:c2:27:c7:af:7b:06:c4:6a:86:a8:1d:44:
60:d1:b4:f6:b9:98:f3:65:b4:8c:96:97:3b:81:6b:06:77:3f:
e0:9a:a4:e6:51:d5:38:c5:3e:70:fb:dd:43:98:d2:be:3f:08:
b6:b7:a9:01:a4:18:2c:3e:e8:0d:26:ce:65:57:d9:ed:17:4a:
32:f1:e9:e4:25:9e:24:45:e9:2b:57:3b:5a:2a:c8:d1:4d:89:
a4:d9:26:17:a6:98:87:57:72:db:09:73:53:82:a9:8c:57:a7:
02:69:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:21:32 2025 by rpki-client