Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/fVqpYf4tb6PkwfTJlVbKrk4pUM4.roa
File: fVqpYf4tb6PkwfTJlVbKrk4pUM4.roa (raw, json)
Hash identifier: wdCHfTTbsNcKzuaWnfKWEKTFEIGbtPlPHuTR5kXiPGE=
Subject key identifier: 7D:5A:A9:61:FE:2D:6F:A3:E4:C1:F4:C9:95:56:CA:AE:4E:29:50:CE
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0882AA63
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/fVqpYf4tb6PkwfTJlVbKrk4pUM4.roa
Signing time: Sat 01 Jan 2022 03:50:52 +0000
ROA not before: Sat 01 Jan 2022 03:50:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6855
IP address blocks: 85.248.74.0/24 maxlen: 24
85.248.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142781027 (0x882aa63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 03:50:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d5aa961fe2d6fa3e4c1f4c99556caae4e2950ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:bd:e4:39:2e:c3:28:01:53:51:7f:6b:30:
f3:b1:aa:26:4f:93:7d:e9:94:ca:d5:22:51:a7:70:
1b:3e:10:2f:49:df:4b:85:fa:53:f7:3d:2f:0b:3b:
29:27:64:5f:8d:1c:4b:f6:3c:72:43:3b:da:fe:a3:
ca:30:55:e4:45:26:84:42:31:96:38:4c:9c:f2:f2:
aa:6a:33:70:4a:2d:1d:a6:86:2a:b7:70:35:2b:b5:
ff:ba:c4:ed:88:34:50:fc:2c:01:c1:7b:2a:04:c8:
9f:eb:de:e7:56:4f:ab:d4:77:42:a0:07:6c:7a:51:
f9:43:6f:21:a7:78:74:98:fa:40:f6:2e:ce:b0:52:
f5:0d:24:6c:60:e6:89:4f:8f:d0:13:b3:a7:e7:c2:
58:aa:ac:b3:64:72:37:04:67:50:19:7b:90:6e:81:
26:06:fd:f5:0a:12:50:59:59:94:d4:00:78:04:af:
99:45:f4:4e:c5:80:c7:6b:2c:31:fc:e8:59:ab:ca:
d3:da:cf:58:14:d1:c6:ef:c1:d3:dd:48:cb:29:62:
11:3c:66:9d:93:87:3a:e1:f4:f3:53:c8:e8:c9:d2:
4b:9c:e3:dd:ee:31:d1:0d:b9:38:4a:30:e9:a0:4f:
02:36:46:a2:93:f7:0f:77:e3:35:d9:fd:d8:6b:13:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:A9:61:FE:2D:6F:A3:E4:C1:F4:C9:95:56:CA:AE:4E:29:50:CE
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/fVqpYf4tb6PkwfTJlVbKrk4pUM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.31.0/24
85.248.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:33:cb:ac:20:2b:41:cc:f9:7a:f4:fc:a9:59:7b:0c:f8:94:
b8:db:c3:70:c7:d1:11:06:d4:81:9d:00:8d:f6:66:55:1c:eb:
fb:97:45:66:0d:d6:3f:ff:40:2e:8f:56:2a:9f:92:db:8c:7e:
58:45:45:9e:57:1b:ea:80:68:22:76:2f:76:cc:90:c8:93:66:
e9:81:e4:ea:cd:84:c3:09:ed:09:5e:dc:33:12:15:5d:ec:e6:
a6:22:31:af:93:9a:7a:1a:b1:a5:a6:9e:07:b4:bd:ae:2a:73:
ba:d5:69:28:b4:8e:71:fc:9c:1b:e5:38:23:a8:ae:f6:1c:c3:
6b:6f:c7:e4:24:8b:51:4d:f0:26:40:f3:93:38:00:e7:ff:10:
e6:db:80:39:09:66:4b:f6:f7:51:10:b3:fa:e2:d9:f2:f9:dc:
89:2a:61:76:0a:7c:c8:65:34:f7:54:c6:98:cb:14:fa:78:15:
81:99:a7:70:68:7d:ab:ba:c9:bf:14:e4:22:e2:3f:5d:b6:f1:
d0:e6:f1:07:da:5f:0d:e0:60:79:84:2a:ba:cd:6e:5a:57:3f:
54:7b:99:6f:04:c9:30:42:56:62:b5:dd:3f:ea:47:46:f5:84:
8c:92:c4:2b:b8:9b:a0:a6:de:ff:bb:ff:b4:ba:61:90:b8:25:
88:31:a6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:24 2025 by rpki-client