Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/aYfzs5iDgDD13gEC9lnBrIL3QyM.roa
File: aYfzs5iDgDD13gEC9lnBrIL3QyM.roa (raw, json)
Hash identifier: RyjhWYrM0fy9npwRsVSSMTjtkQGI3ekJtnqiEWFLPio=
Subject key identifier: 69:87:F3:B3:98:83:80:30:F5:DE:01:02:F6:59:C1:AC:82:F7:43:23
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018C40D64DF762924C823086397D7B69B814
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/aYfzs5iDgDD13gEC9lnBrIL3QyM.roa
Signing time: Wed 06 Dec 2023 20:33:55 +0000
ROA not before: Wed 06 Dec 2023 20:33:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48123
IP address blocks: 85.140.57.0/24 maxlen: 24
85.140.56.0/24 maxlen: 24
85.140.58.0/24 maxlen: 24
85.140.59.0/24 maxlen: 24
85.140.72.0/24 maxlen: 24
85.140.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:d6:4d:f7:62:92:4c:82:30:86:39:7d:7b:69:b8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Dec 6 20:33:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6987f3b398838030f5de0102f659c1ac82f74323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:d4:87:62:9d:06:b0:e7:cf:6e:5b:de:15:
ec:b1:64:53:da:d0:97:f0:cf:05:01:0c:4b:c7:79:
d0:d1:33:5b:17:f0:64:08:c9:57:bc:23:5d:ca:d9:
95:5c:31:98:e0:31:b8:db:f4:74:75:20:9f:4d:f0:
bb:62:50:25:32:8e:86:09:25:45:1a:c6:35:6a:c3:
f2:05:c8:b3:fe:5b:e4:4c:33:a1:48:3d:b3:45:9a:
c3:38:f3:7c:67:ca:14:3d:3e:9e:9d:2a:77:3f:f9:
63:1d:ed:b2:34:6c:42:df:d9:c0:37:93:26:1d:83:
f4:69:9c:96:b5:0f:aa:7c:a0:12:ab:d3:41:e2:b6:
75:d3:a6:b4:ae:92:2d:61:73:6d:97:f0:33:88:5d:
17:a7:fb:89:59:9b:41:83:95:98:d0:dd:a8:34:ef:
e9:90:e1:f2:c3:e2:d9:dc:d8:fa:a5:e9:81:60:c8:
e8:dd:79:cb:46:90:8a:f1:90:38:9d:04:96:0d:a4:
cc:a8:f1:68:56:6d:d9:52:02:b0:28:2e:bf:20:f0:
32:d4:98:61:ad:d3:56:61:13:a6:2e:9e:10:2f:85:
ac:c3:6e:2e:9e:2e:13:62:d3:4b:fd:e1:f7:95:db:
40:7b:60:80:25:1d:0e:8f:b9:ed:31:db:36:fb:78:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:F3:B3:98:83:80:30:F5:DE:01:02:F6:59:C1:AC:82:F7:43:23
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/aYfzs5iDgDD13gEC9lnBrIL3QyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.140.56.0/22
85.140.72.0/23
Signature Algorithm: sha256WithRSAEncryption
25:b2:4c:67:c1:dd:f3:85:0e:89:a5:86:d1:29:00:98:3c:14:
08:37:e4:f5:46:55:48:f1:89:07:74:f9:9a:10:d4:af:7c:21:
fc:46:a7:c4:fa:4a:52:31:90:6d:e0:3a:f4:74:ac:53:a9:dd:
07:2d:4c:23:74:44:af:5d:d8:ab:04:21:76:38:8b:ee:42:41:
5a:3b:3f:c5:f5:8f:53:d7:78:25:39:e7:ec:29:57:af:95:0f:
41:a2:5b:43:30:95:e8:26:78:91:dd:d6:fe:aa:9b:7c:8d:2c:
1d:98:74:53:dd:29:c2:87:96:53:25:b9:9d:7b:65:e0:3c:90:
c1:d7:fe:58:32:e3:c8:95:55:3d:a1:22:36:18:c6:d6:cf:7b:
1f:63:ee:35:95:a9:b1:04:9c:f7:af:e9:a0:83:27:01:1f:35:
e6:8c:51:09:61:84:89:28:cd:00:8f:16:aa:de:c3:7e:0a:25:
dc:b8:c9:68:c1:2c:56:e6:f7:9e:2d:ce:ec:44:cf:2c:8a:d0:
2a:fc:cc:dd:5c:6a:0b:e0:3a:1f:35:87:12:27:e8:ae:d4:74:
f3:0e:a6:06:c2:4b:7d:ab:bb:b6:8d:81:c0:8f:d2:04:e0:a1:
57:8d:b0:34:e6:05:bb:2a:3a:58:1e:89:6c:f7:ad:3d:49:7d:
3e:ae:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:28 2025 by rpki-client