Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/rr2M_l82XlVHM9Qpn3RU0fEqo7M.roa
File: rr2M_l82XlVHM9Qpn3RU0fEqo7M.roa (raw, json)
Hash identifier: ugbPB+nMUJGXaf2U0aVq9hKw7YegVIiW0xwXM/55g08=
Subject key identifier: AE:BD:8C:FE:5F:36:5E:55:47:33:D4:29:9F:74:54:D1:F1:2A:A3:B3
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0572F61C
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/rr2M_l82XlVHM9Qpn3RU0fEqo7M.roa
Signing time: Sat 01 Jan 2022 15:07:24 +0000
ROA not before: Sat 01 Jan 2022 15:07:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212042
IP address blocks: 85.203.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91420188 (0x572f61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 1 15:07:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aebd8cfe5f365e554733d4299f7454d1f12aa3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:7f:0d:34:d3:e7:92:cd:e7:cb:a5:e0:dd:
ac:4f:7c:69:7d:8f:e7:25:77:b5:46:68:14:93:fd:
4b:56:c7:27:35:e2:66:b6:f8:62:c9:52:0d:88:71:
81:67:b4:69:28:ec:ee:d3:44:3f:e8:ac:17:fd:93:
cf:2d:38:f3:4f:ac:9a:d8:e7:a9:71:d5:31:e9:6a:
c8:0b:86:72:57:1d:09:02:1d:db:2b:a2:c7:1a:6c:
f4:50:2c:22:11:9d:06:0e:f2:c1:28:f1:6c:9a:ad:
53:dc:90:e6:21:4b:b3:a9:22:1c:10:fe:e0:78:5a:
7f:90:60:4a:d2:cd:e3:62:fe:4d:1c:6a:08:16:b7:
56:46:3c:43:ab:45:b2:d3:ea:20:e8:64:a5:08:80:
fa:2f:f0:dc:46:f9:d9:6d:d6:04:71:d2:f2:df:62:
cc:b8:8b:4e:e0:53:79:66:1e:e8:36:06:50:af:04:
e8:a2:3a:67:bc:9b:a6:15:9c:39:3b:40:e0:a0:4e:
cc:4d:a3:55:b4:f7:29:8f:41:7c:91:0d:a5:7f:d8:
db:e1:1a:6e:2e:6d:ff:a5:03:1b:4e:84:25:3a:ba:
09:b4:e1:8e:ce:d7:d6:d7:4b:2d:99:2b:6e:d7:a5:
f8:18:f0:ff:8b:96:90:46:02:ae:eb:09:82:b3:af:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:8C:FE:5F:36:5E:55:47:33:D4:29:9F:74:54:D1:F1:2A:A3:B3
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/rr2M_l82XlVHM9Qpn3RU0fEqo7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.33.0/24
Signature Algorithm: sha256WithRSAEncryption
75:37:b4:29:ca:f7:ae:05:f6:05:22:43:16:df:a7:ea:3d:b1:
6e:b2:f9:86:70:4b:97:3c:ca:5f:be:d6:9f:fc:6b:04:cc:0e:
09:2c:2a:41:52:1f:fb:71:76:84:be:f7:1c:e9:b9:ec:5e:27:
f1:35:a2:1e:58:c0:36:50:c1:e1:69:ac:cd:14:d5:bb:2b:91:
43:cc:79:56:b8:4a:1e:5d:9b:a4:12:15:3b:e7:2b:5b:72:c8:
72:a3:a3:23:6b:18:de:ac:1c:ca:4f:b2:03:3b:4d:cd:56:bb:
a6:9a:cd:b8:71:d6:52:14:6e:04:03:90:19:9a:89:45:dc:6b:
6a:fa:67:ae:ca:af:ad:f0:6d:17:b0:54:97:86:9a:96:6a:22:
a6:b3:f6:01:c4:62:47:06:d2:2e:8d:1a:6a:25:d8:c0:99:db:
1b:a8:9d:ac:4c:50:11:c4:7b:32:f4:69:2b:a5:a8:78:01:cc:
45:72:30:15:ad:fb:c8:2b:4f:fa:3a:9d:d8:6d:12:85:7a:9b:
b9:dc:6c:86:0d:d3:b7:46:b1:f6:fb:24:7a:eb:78:23:ca:0a:
f8:ce:a3:de:8a:c3:89:0c:61:5d:c6:34:36:c9:07:3f:2f:d2:
ce:43:96:01:64:fa:51:66:7a:59:13:2e:b9:f0:08:95:1d:86:
cf:1e:86:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:06:34 2025 by rpki-client