Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/vNwQKX_SK2xEHDzFhJ4baCboN7M.roa
File: vNwQKX_SK2xEHDzFhJ4baCboN7M.roa (raw, json)
Hash identifier: Ok8BU+1/vfDIVqSv7VviAgKydXfopGc+NSFc81Kx6II=
Subject key identifier: BC:DC:10:29:7F:D2:2B:6C:44:1C:3C:C5:84:9E:1B:68:26:E8:37:B3
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 056B0AF8
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/vNwQKX_SK2xEHDzFhJ4baCboN7M.roa
Signing time: Sat 01 Jan 2022 15:07:20 +0000
ROA not before: Sat 01 Jan 2022 15:07:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 85.203.9.0/24 maxlen: 24
85.203.16.0/24 maxlen: 24
85.203.25.0/24 maxlen: 24
85.203.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90901240 (0x56b0af8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 1 15:07:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcdc10297fd22b6c441c3cc5849e1b6826e837b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:88:9c:b3:d4:87:c3:66:77:a8:53:4c:bd:
96:4f:2e:4e:7d:5b:4c:8f:3e:04:7d:dd:18:29:00:
43:ce:fe:60:e3:01:85:b4:74:48:10:ae:a0:6e:3f:
6f:8b:8f:cb:05:d9:d2:13:e0:61:97:78:8d:08:72:
fd:8a:67:07:a4:1a:49:cf:9e:59:89:38:c3:89:a2:
00:cd:84:bc:23:1c:14:a3:63:bd:63:e3:99:80:be:
c5:78:a2:ff:ea:0b:81:d8:fd:2f:ca:11:23:df:36:
a4:97:b3:0b:05:c6:0e:05:e3:0d:7d:6d:ae:49:e6:
5f:b2:2c:64:6c:20:17:86:56:70:a8:c7:0e:a6:97:
ea:d1:7f:51:8f:7b:22:96:39:eb:b5:b0:40:84:03:
8c:09:9d:8a:dc:68:d4:da:c0:d7:51:a4:cd:43:e1:
21:4f:a0:d8:28:24:21:39:95:03:01:65:3e:a2:6f:
d8:af:a1:03:29:35:d5:10:60:24:a4:f3:a1:07:b9:
38:f9:36:0a:7f:49:83:5e:da:9b:ea:ee:78:56:95:
37:fe:23:3a:11:9d:58:31:a8:f3:67:dd:52:50:ca:
47:9b:9e:b7:e3:64:41:4a:34:f0:bf:6b:21:15:22:
bc:f7:1c:45:fe:19:a4:e1:67:02:99:cf:16:3e:94:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DC:10:29:7F:D2:2B:6C:44:1C:3C:C5:84:9E:1B:68:26:E8:37:B3
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/vNwQKX_SK2xEHDzFhJ4baCboN7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.9.0/24
85.203.16.0/24
85.203.25.0/24
85.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bb:45:2f:a4:d5:e3:65:29:17:c1:14:5a:88:0d:40:ad:c7:
65:b1:4a:be:4e:dd:1e:0a:71:f6:68:ca:73:85:55:7b:f2:00:
97:75:52:83:63:f0:c4:2b:8f:67:42:d2:f2:fb:bd:e7:62:8d:
03:4f:22:4b:8b:0d:e8:59:c7:f9:f0:6a:29:a3:2f:2f:9f:26:
67:fa:15:46:11:98:af:bf:97:2c:c3:87:89:61:b5:e7:27:be:
00:6c:dc:fb:06:e7:6b:42:fd:74:9d:e1:06:24:c3:84:e7:9e:
33:f5:ea:3d:9a:d7:cf:f6:22:47:81:84:4e:02:7b:9f:66:82:
b8:47:95:2f:0b:ee:e9:1f:db:75:15:ba:8c:c1:d6:3f:5e:a1:
8d:fd:2f:16:84:97:4d:0d:f9:38:94:f4:34:da:26:af:05:7f:
4a:10:02:c8:58:25:e8:f6:7f:56:9e:57:bf:de:d4:a9:7e:d9:
fe:06:d6:7c:12:a8:1b:08:bb:7c:fa:d1:14:0b:03:8d:e5:1f:
51:74:37:1e:6d:21:1a:9c:cf:7f:a5:98:7e:57:90:98:7f:65:
ce:ca:10:7a:52:46:e5:11:59:d1:94:9d:de:d6:45:86:a5:b6:
56:67:9d:77:e0:f8:14:b5:c7:64:f0:3f:bf:20:5e:08:38:d9:
bc:48:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:50:16 2025 by rpki-client