Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/LEnUw4ZBc3kEb_AK4eQNnwUzmZI.roa
File: LEnUw4ZBc3kEb_AK4eQNnwUzmZI.roa (raw, json)
Hash identifier: rDAo5Z0F1+RCVzu76lK9uHJqRl/5icNLodTrhES4OUU=
Subject key identifier: 2C:49:D4:C3:86:41:73:79:04:6F:F0:0A:E1:E4:0D:9F:05:33:99:92
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DE54E133FB581AEE1AA13A4B47C02
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/LEnUw4ZBc3kEb_AK4eQNnwUzmZI.roa
Signing time: Sun 01 Jan 2023 22:05:02 +0000
ROA not before: Sun 01 Jan 2023 22:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212974
IP address blocks: 85.248.37.0/24 maxlen: 24
85.248.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e5:4e:13:3f:b5:81:ae:e1:aa:13:a4:b4:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c49d4c386417379046ff00ae1e40d9f05339992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:d9:3b:d3:b5:6b:ac:1e:1a:05:87:31:8d:
85:bd:72:d3:26:74:31:8e:4f:b6:71:69:04:76:d6:
9b:3c:dc:4b:c9:f5:3c:b9:b1:69:96:9c:b8:65:89:
8d:90:3d:d9:1f:5c:c1:32:92:97:e2:6e:c1:98:07:
ac:4d:51:ed:df:99:13:f5:19:fc:af:4c:ff:40:11:
bc:59:82:8e:a3:6b:e1:b7:24:7e:a1:e8:25:e6:1d:
08:bf:15:69:b8:9c:bd:e9:3a:61:ff:0c:16:c1:26:
5c:6a:cc:f3:d0:fa:2a:fa:73:10:1e:94:60:56:5a:
7a:13:d3:8f:5e:b6:e3:2a:24:36:c9:61:ec:d5:78:
4c:b3:83:a4:d5:96:dc:05:88:04:e0:9d:88:c1:e1:
e2:cb:8c:52:0d:a8:ca:2a:16:ff:ae:52:fa:a4:72:
90:30:a8:d7:fa:07:71:2a:e2:8b:45:44:fe:0a:e4:
c3:bf:07:e2:81:2f:72:17:c5:37:b5:62:5b:85:de:
09:49:9e:98:bc:86:04:d9:04:a9:4d:ef:e7:e6:fd:
b5:65:b2:f5:bb:19:f2:d6:d9:8b:86:61:dc:1b:19:
3f:cc:2d:f7:d5:d2:01:09:f3:48:3d:fb:5c:c8:39:
37:33:12:d1:2f:bf:2e:09:d5:e0:12:ec:24:9f:1b:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:49:D4:C3:86:41:73:79:04:6F:F0:0A:E1:E4:0D:9F:05:33:99:92
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/LEnUw4ZBc3kEb_AK4eQNnwUzmZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.36.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:6e:41:37:28:1b:2b:63:28:0b:98:ac:0d:0c:27:5c:0d:b6:
62:14:2f:9f:8b:81:f6:db:f2:1f:8f:d5:01:05:60:dc:0a:8f:
e6:cc:27:81:36:bf:55:aa:37:fa:fa:3b:d5:a5:15:a5:d2:a7:
35:dc:cf:15:5d:d1:e2:64:3d:b2:56:c7:6a:17:3f:2d:12:05:
fc:fa:62:62:18:53:ad:0f:58:8d:ba:e0:ee:fc:b2:c8:39:7d:
fa:57:e0:36:f5:d0:11:9a:2e:f5:2d:a6:97:c9:91:95:b2:a3:
b6:48:b2:d4:65:51:42:d9:6b:7c:46:17:31:d6:ff:16:f9:08:
cc:70:d4:b1:f6:25:c6:ff:fc:fa:f8:7e:bf:b4:17:10:9a:f3:
2f:61:10:a4:a4:6f:23:27:e5:e7:ec:f2:84:32:ee:13:38:44:
83:a9:e5:9d:8a:d9:9a:c2:51:a2:a1:27:e9:8d:81:bf:26:d2:
55:27:1d:bd:36:da:ce:bb:db:46:2f:e9:f5:54:4c:1d:85:85:
85:38:96:07:45:05:b3:72:e9:38:71:bf:c6:52:8b:59:c1:a1:
19:ec:20:7c:f9:8c:55:a1:5a:61:ce:ee:0b:d2:48:3f:f3:63:
9a:92:ee:11:5e:da:85:eb:bd:f6:60:39:f6:02:39:65:10:6c:
51:91:84:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXeVOEz+1ga7hqhOktHwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm
MDVkYmEwHhcNMjMwMTAxMjIwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzQ5ZDRjMzg2NDE3Mzc5MDQ2ZmYwMGFlMWU0MGQ5ZjA1MzM5OTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKPZO9O1a6weGgWHMY2FvXLTJnQx
jk+2cWkEdtabPNxLyfU8ubFplpy4ZYmNkD3ZH1zBMpKX4m7BmAesTVHt35kT9Rn8
r0z/QBG8WYKOo2vhtyR+oegl5h0IvxVpuJy96Tph/wwWwSZcaszz0Poq+nMQHpRg
Vlp6E9OPXrbjKiQ2yWHs1XhMs4Ok1ZbcBYgE4J2IweHiy4xSDajKKhb/rlL6pHKQ
MKjX+gdxKuKLRUT+CuTDvwfigS9yF8U3tWJbhd4JSZ6YvIYE2QSpTe/n5v21ZbL1
uxny1tmLhmHcGxk/zC331dIBCfNIPftcyDk3MxLRL78uCdXgEuwknxu25wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCxJ1MOGQXN5BG/wCuHkDZ8FM5mSMB8GA1UdIwQY
MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt
ZTJmYmMzYTY4ODAwLzEvTEVuVXc0WkJjM2tFYl9BSzRlUU5ud1V6bVpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw
LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVfgkMA0G
CSqGSIb3DQEBCwUAA4IBAQBfbkE3KBsrYygLmKwNDCdcDbZiFC+fi4H22/Ifj9UB
BWDcCo/mzCeBNr9Vqjf6+jvVpRWl0qc13M8VXdHiZD2yVsdqFz8tEgX8+mJiGFOt
D1iNuuDu/LLIOX36V+A29dARmi71LaaXyZGVsqO2SLLUZVFC2Wt8Rhcx1v8W+QjM
cNSx9iXG//z6+H6/tBcQmvMvYRCkpG8jJ+Xn7PKEMu4TOESDqeWditmawlGioSfp
jYG/JtJVJx29NtrOu9tGL+n1VEwdhYWFOJYHRQWzcuk4cb/GUotZwaEZ7CB8+YxV
oVphzu4L0kg/82Oaku4RXtqF6732YDn2AjllEGxRkYSu
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:25 2025 by rpki-client