Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/gLdISQf1zrNMWhClKZ7vOaCSLfc.roa
File: gLdISQf1zrNMWhClKZ7vOaCSLfc.roa (raw, json)
Hash identifier: C8oP+OhwZgnIMe4JmbgpAcOQ7uxgB2kfrXamuAEUcyw=
Subject key identifier: 80:B7:48:49:07:F5:CE:B3:4C:5A:10:A5:29:9E:EF:39:A0:92:2D:F7
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0570B175
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/gLdISQf1zrNMWhClKZ7vOaCSLfc.roa
Signing time: Sat 01 Jan 2022 15:07:23 +0000
ROA not before: Sat 01 Jan 2022 15:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 85.203.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91271541 (0x570b175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 1 15:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80b7484907f5ceb34c5a10a5299eef39a0922df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:15:2c:c1:2d:d6:6e:7c:21:7e:a4:45:03:
f4:09:7a:3e:29:5d:e0:a5:01:8f:24:fb:08:ef:53:
4a:27:cf:11:0f:a3:f8:49:48:7a:15:e8:d6:6d:48:
80:d4:38:eb:6b:9c:a1:c6:7c:51:d9:31:d4:2d:de:
98:04:43:45:c4:ad:92:7d:bd:2d:fa:d2:4d:b0:82:
f1:2b:9a:e0:eb:a7:af:60:35:e0:48:f5:dd:1a:fe:
17:c6:ee:76:b9:21:29:d4:9f:34:cb:a2:83:66:63:
62:bf:35:e9:a7:48:50:72:17:19:a8:7c:eb:9e:d2:
8b:b5:14:e8:a1:6c:37:8d:ec:cf:d2:24:3e:9d:8f:
fc:20:86:67:16:36:d5:d0:3b:08:ca:02:ea:fa:4f:
22:87:87:82:c8:8d:c0:8e:b0:a0:c1:19:7b:1e:d2:
8f:94:8c:d3:2c:7b:f0:26:88:81:48:66:ba:68:c9:
ba:9b:20:b5:40:a0:7b:fb:cd:15:f6:bf:b8:30:87:
ce:1b:69:9e:2c:b0:9f:0e:30:d9:7e:a5:8f:15:e0:
6f:69:7d:1b:3c:f3:e9:f0:e6:af:57:15:10:8d:18:
67:e6:c2:f9:c2:ac:c3:f2:20:b0:d2:38:4e:03:f1:
92:b0:0c:29:31:cc:87:ea:3f:40:ec:7d:12:23:1d:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B7:48:49:07:F5:CE:B3:4C:5A:10:A5:29:9E:EF:39:A0:92:2D:F7
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/gLdISQf1zrNMWhClKZ7vOaCSLfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.21.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d8:bd:c1:a1:9d:73:30:32:16:86:ff:e2:10:fc:42:99:3e:
b0:75:57:5c:ea:9b:4b:a0:31:88:3b:42:49:ff:28:a2:30:5a:
43:06:9f:11:48:4e:1c:15:9b:d1:ae:13:d0:f6:62:4e:43:b7:
34:ab:90:f8:8f:7b:b2:3b:c9:5c:54:07:ea:b2:ea:fa:4b:46:
f8:dd:15:47:21:a8:6e:72:fc:21:75:88:12:0b:1e:b3:53:8a:
4a:f7:9a:47:44:e1:90:3c:29:b2:0b:6e:76:8c:ff:fa:a3:f0:
c1:3c:b3:4c:80:c9:c4:68:1b:ee:20:6b:ef:da:41:1a:ba:f8:
e3:7c:5d:b3:cf:3b:03:eb:3c:de:9b:39:b5:7c:e4:e1:0c:90:
7d:ef:be:d8:d4:fb:eb:87:5e:4e:00:2d:00:8a:69:71:79:04:
fc:f4:ce:52:7e:1c:b8:df:85:69:1b:22:8f:ca:be:f9:54:da:
a1:8c:59:c8:fc:b3:3a:a1:a4:a4:82:c6:d8:74:77:56:c5:d2:
36:09:f2:27:ac:f1:79:57:c4:d3:37:36:68:f2:15:c5:67:dc:
0a:15:58:eb:80:f4:c9:e6:16:ed:81:ee:71:2e:23:98:14:2b:
0b:79:48:0b:65:75:a0:88:fc:67:85:87:f5:04:05:4b:83:e6:
c9:9c:91:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:50:19 2025 by rpki-client