Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/7H3LrSHi4DTSHnE_DFNq8v_wgiE.roa
File: 7H3LrSHi4DTSHnE_DFNq8v_wgiE.roa (raw, json)
Hash identifier: H5VJHICwc+a7S1qsOlRoHQJOduzwhG7gDYHOBWy7Pyg=
Subject key identifier: EC:7D:CB:AD:21:E2:E0:34:D2:1E:71:3F:0C:53:6A:F2:FF:F0:82:21
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 05E2BB1C
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/7H3LrSHi4DTSHnE_DFNq8v_wgiE.roa
Signing time: Tue 15 Feb 2022 08:41:39 +0000
ROA not before: Tue 15 Feb 2022 08:41:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 85.203.46.0/24 maxlen: 24
85.203.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98745116 (0x5e2bb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Feb 15 08:41:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec7dcbad21e2e034d21e713f0c536af2fff08221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:6f:79:f8:01:71:42:97:36:3a:e6:f3:c0:
9a:93:fa:5b:94:27:e8:63:42:f4:0f:86:ed:6b:c3:
18:5c:79:f3:05:79:c0:43:01:94:a3:84:1c:3a:4a:
d8:9d:b5:09:1c:63:e6:74:06:0c:de:ec:06:2c:34:
87:79:c2:69:0e:1d:98:ed:aa:fb:ac:8b:e8:c6:2b:
de:24:e8:fd:6e:b4:41:3d:a8:85:44:e7:53:3b:13:
77:71:2c:c8:e1:7d:5e:71:32:f2:8a:f9:bb:8f:f9:
5c:ab:25:72:75:ce:96:e1:40:2f:8a:6b:e2:f0:92:
07:e1:da:97:d8:2e:26:fd:49:6f:b2:20:e4:25:f7:
96:b0:8c:20:40:87:57:e7:5f:4f:7f:69:54:33:a8:
ee:29:8e:c4:77:1b:e4:d6:4d:2b:c5:09:4e:4e:92:
aa:53:3e:88:11:0b:62:c4:1e:38:0c:43:a5:e9:d6:
e9:0e:16:ef:98:57:30:36:3d:2c:74:ab:f6:74:19:
e5:37:3d:ee:2c:24:7d:21:a1:80:64:dd:b0:fa:95:
4f:e2:cb:b5:a6:7d:86:4c:9e:64:f8:9b:d7:f3:ea:
48:9f:1d:25:45:3e:7b:bc:ac:6b:b8:c5:86:69:45:
8c:90:93:5b:e7:3b:33:84:83:d1:11:83:df:b9:45:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7D:CB:AD:21:E2:E0:34:D2:1E:71:3F:0C:53:6A:F2:FF:F0:82:21
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/7H3LrSHi4DTSHnE_DFNq8v_wgiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.22.0/24
85.203.46.0/24
Signature Algorithm: sha256WithRSAEncryption
41:31:ad:d2:e9:01:b0:aa:2b:5a:6b:0b:de:3b:c1:39:bc:22:
21:45:7c:5e:00:10:ca:0f:11:e0:9f:37:35:1f:cf:a1:76:43:
56:8d:30:b2:36:d9:68:4f:2c:a9:ac:d3:9e:61:ad:1d:0d:42:
31:61:00:df:ac:66:b1:c8:1e:e0:18:7a:e4:c2:eb:60:ef:12:
d5:40:5a:b6:19:7c:1a:99:b2:67:74:59:32:e4:da:44:b1:5f:
b3:e3:e6:68:e0:7c:1a:1b:c6:85:45:fc:67:4f:85:18:3f:6a:
9a:95:06:35:2a:af:8a:c6:05:ad:70:a9:da:74:99:03:44:a2:
ab:ac:d9:73:10:0a:4b:90:45:43:ec:10:40:5c:ec:71:51:52:
33:47:c0:11:1a:09:89:08:e0:b2:b3:0d:46:a7:2a:73:17:42:
41:6d:d7:38:ff:38:78:f2:1e:67:c9:bc:82:a1:71:a0:4d:44:
54:6b:e0:d7:2e:ce:e3:d1:b3:5c:59:a3:e9:80:e0:be:9f:e1:
9d:81:44:15:97:48:30:19:d6:31:6a:3f:95:83:6e:59:90:f5:
25:28:01:c7:25:01:d6:5d:41:e8:93:aa:c4:11:a4:c1:c0:0b:
0a:34:6a:66:0e:0c:aa:95:8c:35:89:57:75:90:f8:cf:8a:a9:
60:05:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:59:31 2025 by rpki-client