Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/w4ZyQrjY_Vkyupl3gufa5H-7Dck.roa
File: w4ZyQrjY_Vkyupl3gufa5H-7Dck.roa (raw, json)
Hash identifier: pfNQ6K2WA4tERqR9823Yz8y2jdsX+115rqkrfOBtkj0=
Subject key identifier: C3:86:72:42:B8:D8:FD:59:32:BA:99:77:82:E7:DA:E4:7F:BB:0D:C9
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 018842EBBAA7DE083CA821D850833D0A1089
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/w4ZyQrjY_Vkyupl3gufa5H-7Dck.roa
Signing time: Mon 22 May 2023 10:05:25 +0000
ROA not before: Mon 22 May 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44696
IP address blocks: 85.202.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:eb:ba:a7:de:08:3c:a8:21:d8:50:83:3d:0a:10:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: May 22 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3867242b8d8fd5932ba997782e7dae47fbb0dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:b0:bf:45:a8:db:37:2c:2e:c0:28:bc:65:
7f:aa:07:a5:02:58:b7:26:42:20:02:cc:9a:17:f8:
13:3f:14:04:ad:d3:a1:d2:66:49:d8:e1:40:a3:e0:
4b:81:ee:83:04:f9:5a:77:1d:97:de:4e:82:a7:e4:
2a:d2:90:fd:8f:91:38:1a:e3:94:1b:a0:5f:50:a5:
c3:02:ec:20:9d:10:df:bf:10:0d:73:80:96:09:18:
31:f3:e3:e3:6d:86:6d:00:ab:11:dd:a3:67:b2:67:
b8:85:84:cb:cc:9e:c8:e6:32:e0:0d:ca:66:98:dc:
28:b4:11:d1:8b:5c:ef:75:e4:27:c1:ec:83:3d:63:
e0:b6:6d:78:be:f0:1f:19:4c:e7:e0:80:5b:66:f4:
5c:7a:ed:89:e4:bc:68:2a:5b:1f:d7:1a:73:21:e4:
e3:8b:9d:77:a0:1e:22:cc:8a:d8:18:bc:04:b1:76:
56:b3:12:5a:01:22:ba:09:ce:19:1e:f5:88:39:b9:
d1:b7:a7:3a:33:c2:91:58:54:74:e4:b1:88:c9:25:
6f:e9:01:c0:17:d7:58:7a:ee:6d:79:cb:c6:cc:0f:
da:63:56:33:8d:cd:dd:4e:c8:c1:60:0d:04:2c:a9:
6d:d3:cd:cf:4c:38:d9:8d:cf:93:97:13:0d:49:25:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:86:72:42:B8:D8:FD:59:32:BA:99:77:82:E7:DA:E4:7F:BB:0D:C9
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/w4ZyQrjY_Vkyupl3gufa5H-7Dck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:ea:ec:bc:eb:c0:93:be:3b:3c:6a:5e:3e:29:e8:48:01:8e:
75:94:11:84:0c:94:a8:cc:96:d4:a4:8f:38:33:16:62:30:34:
e7:7c:1a:93:a1:1b:97:6a:51:55:7a:e3:e1:9d:bc:4c:1f:40:
00:a9:73:70:1c:0f:e1:9b:9a:05:fc:2f:8e:e3:88:80:4f:36:
8b:50:05:ab:30:c4:2c:7b:e9:83:ff:69:ba:53:88:42:47:94:
21:2f:48:5f:d2:70:89:3a:7e:66:67:03:43:40:69:05:c8:9e:
d3:49:45:94:fc:92:c2:fb:2e:5f:59:3b:9e:6b:a8:dd:c1:23:
b4:9e:d3:70:6c:25:94:b1:03:cc:dc:79:c4:cd:7f:60:8f:2f:
10:e5:93:70:04:24:56:c2:5a:31:6a:ce:86:3a:06:a9:5b:01:
2a:fa:2a:bf:92:4a:1d:f7:08:88:4d:f8:5f:6d:86:09:ee:01:
51:15:38:4b:59:a8:48:a2:bd:b8:9f:82:73:3a:0b:1f:0d:2f:
16:11:5b:ea:66:bb:a2:8a:60:87:08:40:13:b4:aa:55:2e:c2:
97:29:42:aa:d6:3a:6a:bf:48:85:e1:2a:28:be:52:69:cf:18:
e2:77:9b:65:15:dc:59:17:f2:5c:c6:ab:f4:a5:b9:b1:32:8f:
de:fd:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:18:39 2025 by rpki-client