Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/jRBtZuRettdw_fcxujKdU3E1h0o.roa
File: jRBtZuRettdw_fcxujKdU3E1h0o.roa (raw, json)
Hash identifier: l2oJEz3DjWTWQrrVH1YNh2B8itUSWxXMhhmQmg7ZJJM=
Subject key identifier: 8D:10:6D:66:E4:5E:B6:D7:70:FD:F7:31:BA:32:9D:53:71:35:87:4A
Certificate issuer: /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial: 643659
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/jRBtZuRettdw_fcxujKdU3E1h0o.roa
Signing time: Tue 15 Mar 2022 16:22:32 +0000
ROA not before: Tue 15 Mar 2022 16:22:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209302
IP address blocks: 85.209.250.0/24 maxlen: 24
85.209.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6567513 (0x643659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
Validity
Not Before: Mar 15 16:22:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d106d66e45eb6d770fdf731ba329d537135874a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:36:c4:b7:27:e6:c3:44:7a:3b:de:bb:d9:
63:f0:3a:cc:af:ee:63:b3:e5:06:43:e3:31:df:ac:
70:5d:cc:e0:0f:ff:20:e9:46:04:40:01:f6:59:da:
30:46:ea:03:99:a9:f0:8e:e6:db:66:dc:77:9e:bf:
aa:6b:61:e6:77:2d:b7:1a:3d:0a:21:5a:73:3c:43:
a0:be:f6:af:8a:1e:63:fa:27:33:ed:67:67:3f:d0:
de:23:7e:fb:45:f0:e0:cc:0d:f9:e8:d5:33:11:54:
de:5f:ac:2f:b6:b7:2e:40:70:89:ce:16:69:5f:74:
5c:d1:e9:44:00:f9:e6:e7:ec:40:e4:04:ac:d8:18:
03:2b:14:f4:c1:44:a5:a2:b4:dc:47:03:71:db:e3:
fc:7a:ab:e4:ea:ce:a2:fb:64:dc:19:2f:69:25:25:
b2:4d:12:0d:3a:6f:e8:9f:ac:67:fc:06:a4:be:07:
13:41:d6:82:e4:76:8b:7c:28:84:03:d9:66:41:fd:
b3:87:31:ee:70:6c:13:af:c1:cc:b3:06:e1:e0:d9:
59:75:02:9d:7b:14:55:87:cf:8d:0a:4f:22:15:04:
ee:d1:4a:62:9b:c0:6e:e4:08:17:d3:cc:d5:42:3e:
e9:0f:65:53:55:4d:d3:a1:12:33:ef:28:31:62:a3:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:10:6D:66:E4:5E:B6:D7:70:FD:F7:31:BA:32:9D:53:71:35:87:4A
X509v3 Authority Key Identifier:
keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/jRBtZuRettdw_fcxujKdU3E1h0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:b0:3b:f6:5a:97:55:5d:66:b9:90:d9:75:e8:e0:c4:4e:ab:
f4:d1:8b:ed:32:52:8e:0d:cd:7b:1c:a3:6f:6a:70:ce:75:c6:
cd:69:37:76:c9:bf:38:c6:eb:5e:23:bd:12:2e:4d:d3:63:47:
d6:f7:9d:b3:c3:7d:ba:cf:94:06:ea:62:57:51:8e:ef:cd:1f:
25:65:ed:a6:7a:9a:41:0e:5f:88:88:9f:f9:cf:01:21:1f:0e:
2e:4b:29:88:0f:60:c9:ea:71:8a:e1:2e:a2:db:ec:b0:eb:a1:
75:9e:eb:f1:78:c3:9d:42:4a:b8:5c:b3:61:7d:f3:ee:11:14:
08:39:20:40:b1:34:2f:35:ea:aa:bc:07:0a:1a:16:d6:91:bb:
9b:82:f0:56:64:42:a8:3c:7a:59:59:60:b6:ea:00:4e:ef:4c:
36:7f:80:93:7f:99:82:a0:3b:22:4d:70:c9:f2:04:2e:aa:32:
7f:6f:f2:7c:b9:86:dd:17:45:ff:6e:de:24:74:60:0a:50:f5:
e7:d1:b0:48:85:a9:af:34:c5:d7:98:a2:d4:a0:f5:0c:61:34:
1b:85:b8:b9:9b:85:b5:7a:1e:fa:ed:e8:ee:2b:75:70:db:5b:
c0:29:c4:ca:6a:f3:03:f0:de:48:6b:b7:07:d2:f6:ba:16:08:
bb:f8:2e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:31 2025 by rpki-client