Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/XBpfjjUxpKxrTwSTc3wITxEt-KQ.roa
File: XBpfjjUxpKxrTwSTc3wITxEt-KQ.roa (raw, json)
Hash identifier: ViMSU8S6zbUl2yyIRDDoJ7F+02e3qbDCno5gglkG2k0=
Subject key identifier: 5C:1A:5F:8E:35:31:A4:AC:6B:4F:04:93:73:7C:08:4F:11:2D:F8:A4
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0616A062
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/XBpfjjUxpKxrTwSTc3wITxEt-KQ.roa
Signing time: Mon 07 Mar 2022 21:48:26 +0000
ROA not before: Mon 07 Mar 2022 21:48:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 85.203.15.0/24 maxlen: 24
85.203.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102146146 (0x616a062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Mar 7 21:48:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c1a5f8e3531a4ac6b4f0493737c084f112df8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:d0:c0:00:ce:be:b8:bb:7c:03:45:45:d8:
11:0f:34:4d:65:92:47:58:fd:35:20:03:6f:01:7a:
56:fe:16:1c:88:8a:0e:d7:da:c3:7e:d7:af:66:92:
b1:92:54:9d:43:f5:33:de:0d:d6:81:96:0f:46:78:
1d:40:1f:3a:a6:e3:c6:44:46:d9:2b:71:94:fe:fa:
f9:f9:c1:23:43:14:3e:09:63:53:b5:02:07:28:d7:
a7:0b:48:03:db:b3:90:f8:23:f4:98:70:65:9d:34:
53:6d:14:f8:51:8f:b7:12:7d:45:a3:d8:5b:09:d2:
11:1b:78:fc:22:a5:58:cb:74:98:4e:70:0c:31:24:
23:f4:c4:fc:a1:89:f2:8e:a8:a3:86:93:64:d7:6f:
49:c0:68:ed:08:88:d5:fb:7b:b1:db:7d:83:71:14:
8c:17:08:51:75:3a:a2:d0:e6:a9:69:2d:49:6e:14:
55:45:e3:ed:7b:cd:19:c4:de:e2:10:41:72:56:b8:
09:e8:89:1a:21:1c:13:14:42:1c:68:e9:0a:fa:44:
f3:78:1b:39:e2:46:75:00:e4:37:52:47:ef:34:7b:
aa:14:e1:df:b4:d9:a4:70:f7:ae:5d:7c:ce:dc:76:
4f:f7:ee:a4:3a:c8:e2:23:fa:33:f7:f7:58:18:f7:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:5F:8E:35:31:A4:AC:6B:4F:04:93:73:7C:08:4F:11:2D:F8:A4
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/XBpfjjUxpKxrTwSTc3wITxEt-KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.15.0/24
85.203.36.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d2:6b:3d:23:5d:21:04:64:fb:65:94:ed:68:d4:c7:0b:e7:
75:14:c9:c1:8f:93:44:94:47:ac:8e:a2:f5:91:c6:e2:8d:ba:
2d:1f:8c:8d:a7:cf:9a:12:8e:33:29:a4:2c:9d:1b:15:ef:67:
3d:c3:de:80:49:7c:e0:0b:73:70:ef:6f:16:9a:b0:a3:cb:76:
e6:9d:b5:8b:6b:c1:8d:24:8b:82:d3:60:a3:a3:8e:c4:9f:f3:
da:aa:3b:3b:da:b3:6d:bc:21:06:9d:0c:ac:83:2d:37:8c:27:
62:be:b4:93:33:b7:2f:1f:af:11:95:a0:c7:67:46:5c:05:22:
2b:28:10:96:70:b4:33:0f:0d:46:0e:9c:df:f4:17:30:50:eb:
9e:0e:5e:60:42:9a:20:49:67:70:43:c1:ca:06:d6:a8:8b:fe:
32:25:89:e4:2b:05:d1:ed:d9:fe:7f:e8:54:49:d4:37:11:56:
eb:89:50:1d:ee:a8:22:62:4e:fd:6e:1a:3b:e6:25:60:3d:73:
9f:94:81:19:a8:11:f8:d3:76:d2:6f:42:14:33:d3:21:0a:76:
f2:5a:8b:8f:85:6c:fd:43:c5:ba:f9:25:8c:a6:5a:db:a7:42:
b0:a1:f3:0d:ca:34:96:5e:b1:f6:76:e0:76:eb:67:39:9a:3e:
8d:60:3b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:59:31 2025 by rpki-client