Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/rBGpXxnY1vInLioP46WHMrBpJrQ.roa
File: rBGpXxnY1vInLioP46WHMrBpJrQ.roa (raw, json)
Hash identifier: 3jp8NfMzlxTek+OFckiiKPAHbJIzDvRnHZZ1iNb9gFw=
Subject key identifier: AC:11:A9:5F:19:D8:D6:F2:27:2E:2A:0F:E3:A5:87:32:B0:69:26:B4
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 018572D5A8BE12A536891631B367EB8864CF
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/rBGpXxnY1vInLioP46WHMrBpJrQ.roa
Signing time: Mon 02 Jan 2023 14:14:43 +0000
ROA not before: Mon 02 Jan 2023 14:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34965
IP address blocks: 85.235.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:a8:be:12:a5:36:89:16:31:b3:67:eb:88:64:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Jan 2 14:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac11a95f19d8d6f2272e2a0fe3a58732b06926b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:13:b8:f2:86:d8:06:e9:cf:ab:4d:d2:f2:
94:5b:13:75:85:57:39:b9:ae:f4:1e:d8:e3:42:43:
26:86:92:dd:e3:ae:17:8b:54:0a:be:65:2c:c9:e2:
b9:07:0d:9a:e7:d6:9d:25:1b:21:e3:4f:4b:c3:84:
3a:5d:da:ef:25:37:40:ce:b8:96:8c:ca:30:97:b9:
d6:b8:8d:96:bd:19:d5:68:56:31:e9:67:67:72:5f:
92:ae:93:34:09:83:c9:51:da:17:83:d8:e4:ff:cd:
e0:48:b5:7d:6d:a9:9c:0d:0f:d2:d8:53:af:af:fc:
69:2f:c5:43:1b:19:ac:fc:c8:6c:27:d6:bf:be:8e:
c9:78:92:4b:54:22:3e:cc:38:d4:93:25:bd:37:8e:
fc:f1:f4:50:93:1c:f9:bd:8d:48:4b:49:2f:c1:80:
36:ae:c7:4b:a9:b2:97:51:f0:a3:16:91:c3:43:20:
21:2d:4a:d2:f3:f1:59:88:d9:79:63:bc:ad:fb:51:
e2:c7:8b:59:a7:bb:55:5e:20:5a:67:9e:d3:09:82:
3e:41:f6:79:bf:d7:3a:2c:84:cb:55:06:11:3f:40:
eb:b3:99:70:1a:66:81:e8:f7:99:e7:9e:9b:bf:52:
14:03:7c:ec:22:8a:e3:d6:3d:1d:95:ac:89:82:22:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:11:A9:5F:19:D8:D6:F2:27:2E:2A:0F:E3:A5:87:32:B0:69:26:B4
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/rBGpXxnY1vInLioP46WHMrBpJrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.0.0/20
Signature Algorithm: sha256WithRSAEncryption
89:7a:d9:b6:25:6a:40:79:99:10:a8:2e:ef:10:fe:57:dd:cd:
82:dd:55:f2:10:ba:b4:fc:02:bc:2f:2f:a9:03:82:8a:88:b4:
11:ce:7a:5b:28:d6:0c:33:3d:56:b1:2a:24:4c:27:3e:b9:67:
08:e6:0e:d0:dd:ca:1f:37:91:e1:5a:da:40:9b:4d:23:bb:57:
a5:5b:b3:fd:5c:ee:80:c0:c5:02:39:de:13:98:5d:47:30:09:
fd:b4:d5:ad:1a:6f:af:16:02:63:03:7e:de:b0:24:cc:6d:6b:
e7:a6:33:00:49:44:2a:0c:e3:1d:6d:ab:dc:13:16:81:cd:12:
79:48:0f:6a:3f:90:d0:31:f0:b3:c6:8a:f5:d5:84:26:0b:38:
d1:88:22:bb:0b:65:0e:47:55:29:1b:e9:18:19:0a:1b:c0:86:
56:53:63:24:2a:99:d5:fb:01:53:1b:e2:27:0e:e2:5d:5d:07:
2d:80:b1:29:c5:5d:9a:e5:cf:2b:99:d4:db:67:7c:6f:98:6b:
8f:fe:b2:3e:80:f1:56:97:e7:36:bc:41:8e:01:28:a0:6f:b1:
9a:3c:1a:01:09:91:ff:f3:a7:84:7e:61:9e:8d:b0:21:78:52:
56:ed:99:e6:7a:ff:cc:ce:44:8e:d6:42:d8:81:a9:b3:75:0f:
21:00:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:07:26 2025 by rpki-client