Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/730Eg06a8xgKUIJs9jog0JsvY7U.roa
File: 730Eg06a8xgKUIJs9jog0JsvY7U.roa (raw, json)
Hash identifier: zeoAKj0UYkJkYZ7jzcchxa1UyY5ntnyZLvPdmhc2a7U=
Subject key identifier: EF:7D:04:83:4E:9A:F3:18:0A:50:82:6C:F6:3A:20:D0:9B:2F:63:B5
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 05620F5E
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/730Eg06a8xgKUIJs9jog0JsvY7U.roa
Signing time: Sat 01 Jan 2022 15:07:16 +0000
ROA not before: Sat 01 Jan 2022 15:07:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8038
IP address blocks: 85.203.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90312542 (0x5620f5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 1 15:07:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef7d04834e9af3180a50826cf63a20d09b2f63b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:2b:72:c0:73:04:0a:23:a2:2e:85:4e:b2:
a2:f2:7e:a0:1f:84:53:86:48:ac:d5:a4:77:c9:53:
1e:37:ef:17:b3:83:a9:38:c5:89:04:43:09:2c:9c:
56:c9:f4:04:90:5b:a4:78:ff:60:2d:16:59:0e:40:
e6:e3:b5:f5:a3:02:1d:08:aa:9e:b2:6a:32:24:88:
44:94:93:2a:55:19:f1:c2:c4:a7:35:c5:17:05:94:
9b:3c:d5:2b:22:7d:37:d5:5f:ad:b6:0e:13:e7:2c:
1a:a7:c7:04:89:5c:99:96:ea:f3:cd:64:30:da:38:
6c:e0:8a:c9:13:49:55:a2:72:5b:71:33:1f:27:52:
2f:50:1c:55:75:3d:36:e3:63:0d:cc:ac:4c:65:65:
0e:bb:8e:83:26:69:02:32:c0:3a:84:64:8e:cc:29:
42:14:c1:31:27:40:2b:6b:5a:6b:9b:2d:61:81:99:
e3:65:89:ec:51:96:72:3a:be:0d:80:a3:7b:67:08:
5a:36:92:87:ba:00:a2:3c:95:71:73:f4:0f:23:3f:
c7:29:42:ea:85:6a:d6:d1:38:c2:fa:ad:aa:42:51:
4c:74:ec:4a:08:ea:cc:4b:a5:be:42:3a:68:91:f6:
78:47:b1:84:08:1c:ca:b5:cf:20:c8:51:73:66:67:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7D:04:83:4E:9A:F3:18:0A:50:82:6C:F6:3A:20:D0:9B:2F:63:B5
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/730Eg06a8xgKUIJs9jog0JsvY7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:18:11:ed:18:95:cd:7d:3e:00:9b:e6:ce:51:e4:34:e7:42:
1a:40:1c:99:a2:aa:8d:50:53:53:e5:c8:80:5a:07:8e:9a:2f:
3f:99:ea:0b:e0:bb:82:8a:e6:6d:30:2d:d9:5c:1a:d2:b8:c7:
52:05:22:ec:e6:ea:ae:25:90:c8:15:5f:04:38:9d:43:20:47:
0f:0a:2c:e5:1b:15:46:d0:14:84:32:25:98:b6:19:fb:36:f0:
2e:de:97:c7:5e:9a:55:23:cf:d9:9e:58:5d:5c:bb:4a:44:6d:
bb:b2:08:c6:d9:87:4c:fd:4d:b8:ea:35:05:91:04:02:48:33:
d6:48:11:28:27:f3:41:1a:68:94:6d:61:0b:9c:0e:c7:0a:ed:
6b:86:4d:33:f1:04:a0:8e:54:3e:e6:e6:b2:14:c2:b3:80:ec:
13:07:8e:14:88:34:70:79:6a:91:72:45:bf:a0:5b:9f:32:2d:
bc:1b:01:ad:d5:00:7d:55:0a:d7:10:11:2c:c3:bf:7e:0e:fb:
f8:02:88:29:72:f5:a7:95:5b:bf:1e:68:3a:a8:99:d4:20:fb:
b6:85:8b:ad:6e:c5:76:ec:23:d3:b9:7f:80:e0:48:f3:2d:2f:
3d:dd:4b:96:e2:74:a4:df:1d:b9:81:31:ec:41:c0:68:f7:52:
00:cc:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:50:17 2025 by rpki-client