Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/PpSFqXTgGHLV_6T4U5U13qnMdCM.roa
File: PpSFqXTgGHLV_6T4U5U13qnMdCM.roa (raw, json)
Hash identifier: jPFYG82ypvJaDkh0sj3rttbRM4METqDo7Hb9BcYmqwM=
Subject key identifier: 3E:94:85:A9:74:E0:18:72:D5:FF:A4:F8:53:95:35:DE:A9:CC:74:23
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 05ED1CD2
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/PpSFqXTgGHLV_6T4U5U13qnMdCM.roa
Signing time: Sat 01 Jan 2022 16:05:20 +0000
ROA not before: Sat 01 Jan 2022 16:05:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8943
IP address blocks: 85.119.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99425490 (0x5ed1cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Jan 1 16:05:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e9485a974e01872d5ffa4f8539535dea9cc7423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:fa:32:a2:2f:da:27:f3:9e:55:89:3f:59:
31:9f:8e:b4:b1:52:4a:9b:e1:58:fb:f3:f8:aa:79:
05:48:e7:29:e6:92:9a:9b:b3:c9:13:c1:68:c3:41:
d4:e6:3a:56:86:83:ea:f2:b0:83:cd:3e:9c:73:ab:
47:86:f2:a4:18:6a:8b:e9:92:20:3a:e2:32:9c:13:
28:f2:c8:07:20:31:e8:bb:4f:c6:4a:c5:87:bb:aa:
b7:b0:94:41:8b:bd:6f:db:d3:4f:6f:c4:4f:74:7f:
42:16:d5:17:24:c7:04:e2:13:4d:98:65:d6:31:38:
f1:d2:97:d7:05:7a:1e:43:f1:c1:73:7b:b1:31:e9:
11:dd:6b:66:25:d0:50:81:84:76:84:0e:94:eb:18:
8e:f0:00:48:ed:40:d3:a3:8b:5d:e6:8a:44:59:31:
4d:76:8d:34:ed:91:b2:41:0c:77:fa:c7:d3:fb:24:
0f:41:1b:77:43:09:ca:14:5a:d8:de:8b:2e:d2:de:
8b:c1:0a:5d:9d:54:c9:e1:81:75:bb:85:f7:3a:2c:
9e:67:54:f0:8d:a7:7a:d0:87:f5:52:a0:9d:6b:8b:
3e:ba:f1:b8:50:42:75:67:88:93:a0:40:65:a6:14:
ad:13:ff:31:23:57:80:b2:91:fe:5f:4b:bd:65:c4:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:94:85:A9:74:E0:18:72:D5:FF:A4:F8:53:95:35:DE:A9:CC:74:23
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/PpSFqXTgGHLV_6T4U5U13qnMdCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.80.0/21
Signature Algorithm: sha256WithRSAEncryption
37:89:c4:bd:cd:be:b9:eb:1b:5d:f4:43:9a:8a:c0:f3:2b:b6:
f5:ce:8e:4d:bb:bf:df:73:48:e5:b5:4d:c2:42:3e:75:1d:65:
ac:6d:55:45:2e:6b:08:34:2b:3c:be:04:04:7b:d8:5c:3e:01:
1e:9e:dc:c5:5a:28:34:22:9b:ee:55:0e:d1:79:63:0f:e9:9b:
88:d0:46:74:83:03:08:9e:66:c6:ea:8a:46:22:17:30:34:91:
80:74:6d:58:c8:3e:4f:6b:d1:88:2c:20:da:8e:ec:11:9f:78:
d2:2b:8d:5c:ee:58:c8:39:c7:bf:49:86:6e:74:3c:3a:2f:38:
d5:c2:3e:02:b4:fb:e2:19:81:7b:26:91:9e:df:e6:1f:b1:36:
c3:09:3c:9b:90:e8:59:de:00:a3:c0:cd:c3:ce:6e:2b:e3:f2:
e2:43:9e:e3:6d:9a:16:e7:bc:9e:e2:a8:cd:0a:bf:eb:db:36:
6f:e9:21:bd:50:4e:e9:04:00:67:f0:53:3c:83:e7:c5:e8:6d:
5c:9d:28:92:be:de:a6:61:64:4d:f8:83:ec:35:77:8e:9f:62:
13:29:c7:97:b5:34:3e:c5:3e:de:79:31:5b:20:1a:0d:ca:8b:
33:24:e4:9a:ff:6b:9c:7c:ee:ea:dc:cb:4d:35:19:bf:ac:d3:
6c:c5:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:30 2025 by rpki-client