Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/fqag6lAfsQ6v5Y3POLY6A_vle8k.roa
File: fqag6lAfsQ6v5Y3POLY6A_vle8k.roa (raw, json)
Hash identifier: MhsKPHXnI8wD1ex/cKnvJZFCoi4iUr1g9HkELbAtx54=
Subject key identifier: 7E:A6:A0:EA:50:1F:B1:0E:AF:E5:8D:CF:38:B6:3A:03:FB:E5:7B:C9
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 05E571F3
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/fqag6lAfsQ6v5Y3POLY6A_vle8k.roa
Signing time: Tue 15 Feb 2022 22:42:43 +0000
ROA not before: Tue 15 Feb 2022 22:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 85.203.15.0/24 maxlen: 24
85.203.21.0/24 maxlen: 24
85.203.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98922995 (0x5e571f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Feb 15 22:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ea6a0ea501fb10eafe58dcf38b63a03fbe57bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:14:03:a2:78:f6:45:a1:65:df:44:13:0f:
b9:9e:e8:37:a5:87:20:e2:b9:a4:e8:24:5a:fd:25:
eb:4f:9d:3a:40:2d:45:7b:95:95:de:3f:8d:aa:2f:
d9:37:92:40:9e:cc:48:41:a1:dc:56:fb:51:02:af:
bf:d2:fc:76:17:1b:8a:d6:3e:98:9a:cf:25:10:65:
1a:84:ad:eb:f1:4d:54:7d:a0:3b:eb:2e:5e:5d:0c:
48:38:c4:45:19:3c:59:85:d4:91:f5:03:07:ef:be:
b1:b8:31:03:81:7a:f4:3e:52:f3:34:b3:66:7f:2c:
92:71:f5:e3:b1:fa:9a:d9:33:2c:c3:88:e1:96:07:
f4:36:22:23:04:39:32:db:c8:d4:8d:71:f5:67:f7:
a1:91:3d:a3:b8:9c:91:c6:2e:04:d9:f8:ac:e1:b3:
49:33:64:11:75:dd:12:73:b2:9e:37:f3:dc:0e:71:
5f:9b:5d:a1:92:ed:91:34:04:3c:cc:9a:8b:b7:94:
97:d3:a8:08:06:21:fd:a6:a5:85:71:70:7f:68:dc:
b5:fd:d7:aa:94:ea:bd:4e:6c:71:bf:6b:78:49:b6:
a0:5f:75:d6:0e:5d:eb:a5:33:0d:c3:5b:8b:c8:a3:
aa:f2:98:de:9a:fa:cb:29:3a:cd:3e:c2:74:b8:71:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:A0:EA:50:1F:B1:0E:AF:E5:8D:CF:38:B6:3A:03:FB:E5:7B:C9
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/fqag6lAfsQ6v5Y3POLY6A_vle8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.15.0/24
85.203.21.0/24
85.203.34.0/24
Signature Algorithm: sha256WithRSAEncryption
44:73:e5:ea:e8:6c:0a:8f:90:6e:52:6f:20:6a:4b:f6:fa:26:
5c:52:11:35:bd:8c:79:58:1e:13:ee:e8:ed:dd:57:62:e5:93:
0c:ae:74:d4:6e:4f:f0:b9:94:e5:22:e4:38:33:b4:f0:87:fe:
ba:f2:62:e7:2e:ba:98:b0:6b:9d:bb:64:49:88:28:1f:2d:d7:
a0:80:72:07:35:8d:24:9a:bd:fd:f4:5e:43:b5:dc:81:75:47:
33:3e:bd:f1:aa:7b:93:a8:36:59:d1:02:e9:55:b5:d0:71:d8:
89:9f:90:12:9b:d8:48:f3:4b:81:fb:72:f4:79:de:3d:1a:ea:
f9:97:95:2a:3c:ee:2c:97:65:2c:6c:71:e1:b5:27:01:1c:7c:
73:b9:0a:97:05:55:f1:3b:0b:c0:7c:ea:6f:f8:cb:7f:a7:c1:
e9:96:6b:16:6e:4b:b7:50:7b:3a:89:0e:44:c3:f6:b2:d9:1c:
4b:ec:f7:b0:30:c0:c5:ee:d2:37:d3:9c:e8:81:7a:b5:4b:bc:
35:11:fe:f4:1f:03:3a:52:bc:f5:36:6f:c1:76:26:e9:03:d2:
09:70:9d:09:10:94:e2:4e:be:94:5d:7b:96:aa:cf:22:ca:f0:
b8:d9:33:43:ec:b3:c3:ad:9b:2e:1b:58:28:68:9c:93:2d:8f:
71:03:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:57:11 2025 by rpki-client