Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/n2hz5a7dVbS-_wpQEtPIC1ZncP4.roa
File: n2hz5a7dVbS-_wpQEtPIC1ZncP4.roa (raw, json)
Hash identifier: 9urrG8RFIakXUanF2pxXqLsEZuaCpS4QrJzq7MzsVTY=
Subject key identifier: 9F:68:73:E5:AE:DD:55:B4:BE:FF:0A:50:12:D3:C8:0B:56:67:70:FE
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5469F2F18E11DC65E9EB2F752C9DB
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/n2hz5a7dVbS-_wpQEtPIC1ZncP4.roa
Signing time: Mon 02 Jan 2023 00:15:26 +0000
ROA not before: Mon 02 Jan 2023 00:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62162
IP address blocks: 85.204.43.0/24 maxlen: 24
85.204.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:46:9f:2f:18:e1:1d:c6:5e:9e:b2:f7:52:c9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f6873e5aedd55b4beff0a5012d3c80b566770fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:39:c1:2d:87:a2:fe:73:d2:df:b9:a4:6f:
b7:58:95:7b:e7:35:de:51:9c:67:3a:20:f6:70:29:
8d:60:49:52:12:b7:09:7d:c0:b7:de:4b:dc:bb:f7:
87:a8:d0:f1:d0:73:81:30:82:ff:a5:0e:69:23:30:
c6:22:16:e1:b5:1e:f2:c5:6c:bf:80:75:03:d7:76:
85:9a:57:07:cd:a7:3c:d2:29:6c:ce:59:dc:f9:26:
e3:1b:dd:e2:77:e2:6e:7b:7c:48:61:9f:c1:ae:fb:
e7:a7:8a:bd:59:03:4b:c8:bf:88:7f:aa:03:28:e1:
fe:2f:2d:43:bf:a6:d3:f4:f7:2b:29:0f:50:23:20:
c5:f2:a2:c2:b8:96:04:7f:07:2a:42:88:a7:8a:f1:
5d:63:72:30:cc:07:0f:0c:f3:a4:f4:e9:78:db:d3:
24:92:f0:84:4c:56:9d:00:84:af:d9:ca:bf:3d:33:
fc:55:ab:4d:de:96:17:9e:89:85:93:d7:65:fd:34:
ff:e4:72:98:64:8a:a8:1a:ec:d6:b8:f6:46:2f:72:
fb:f5:db:33:1b:48:f9:bd:0f:f5:98:6b:12:34:c4:
fb:4e:35:9e:88:31:a8:2e:7f:ab:06:09:cf:d1:42:
40:d0:94:96:ca:61:fb:f1:91:c1:a0:17:dc:e6:ea:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:68:73:E5:AE:DD:55:B4:BE:FF:0A:50:12:D3:C8:0B:56:67:70:FE
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/n2hz5a7dVbS-_wpQEtPIC1ZncP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.43.0/24
85.204.73.0/24
Signature Algorithm: sha256WithRSAEncryption
ed:c1:56:c3:c0:1d:d5:fe:b4:e6:38:b6:06:f8:c8:90:db:80:
eb:3c:73:74:85:69:c4:bc:d4:ce:85:9b:ba:1f:25:3d:b9:07:
c1:e9:51:28:c1:a8:ca:c5:e5:62:7c:97:26:6c:d3:71:ab:a7:
63:b9:0f:b3:75:03:f7:f1:56:ec:9d:76:5b:de:cb:e4:0f:04:
de:6d:92:b7:72:c3:ff:de:d9:93:f5:ab:5f:ce:d9:e6:e2:76:
0d:df:4e:af:d1:a5:c6:4d:1e:e3:b1:28:f6:54:45:e2:b0:71:
d7:00:37:5e:b9:7a:88:9b:95:c3:f7:0e:34:b7:1c:d5:3f:92:
df:01:6a:dc:d1:44:a0:c6:f5:f9:b5:c7:72:d1:e5:32:5f:49:
79:84:b5:be:72:43:b8:13:f8:17:f1:1b:9e:d4:dc:33:c7:e7:
ae:02:7a:53:b7:34:ce:81:63:e2:bb:97:26:06:83:d1:8b:45:
5d:73:19:d3:fd:22:bd:9f:3f:99:af:c4:7b:26:28:6a:11:0f:
79:ee:a2:08:87:51:aa:82:55:b7:86:d5:18:cd:c9:55:fb:54:
71:8c:56:a7:55:0d:ea:b3:5b:e3:ca:52:65:f2:22:f1:2f:05:
07:9e:ff:21:5e:b1:59:ce:7e:b0:a5:ad:4f:89:1a:95:ae:82:
ed:c7:94:26
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVv1UafLxjhHcZenrL3UsnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjY4NzNlNWFlZGQ1NWI0YmVmZjBhNTAxMmQzYzgwYjU2Njc3MGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb45wS2Hov5z0t+5pG+3WJV75zXe
UZxnOiD2cCmNYElSErcJfcC33kvcu/eHqNDx0HOBMIL/pQ5pIzDGIhbhtR7yxWy/
gHUD13aFmlcHzac80ilszlnc+SbjG93id+Jue3xIYZ/Brvvnp4q9WQNLyL+If6oD
KOH+Ly1Dv6bT9PcrKQ9QIyDF8qLCuJYEfwcqQoinivFdY3IwzAcPDPOk9Ol429Mk
kvCETFadAISv2cq/PTP8VatN3pYXnomFk9dl/TT/5HKYZIqoGuzWuPZGL3L79dsz
G0j5vQ/1mGsSNMT7TjWeiDGoLn+rBgnP0UJA0JSWymH78ZHBoBfc5uqThwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJ9oc+Wu3VW0vv8KUBLTyAtWZ3D+MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL24yaHo1YTdkVmJTLV93cFFFdFBJQzFabmNQNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABVzCsD
BABVzEkwDQYJKoZIhvcNAQELBQADggEBAO3BVsPAHdX+tOY4tgb4yJDbgOs8c3SF
acS81M6Fm7ofJT25B8HpUSjBqMrF5WJ8lyZs03Grp2O5D7N1A/fxVuyddlvey+QP
BN5tkrdyw//e2ZP1q1/O2ebidg3fTq/RpcZNHuOxKPZUReKwcdcAN165eoiblcP3
DjS3HNU/kt8BatzRRKDG9fm1x3LR5TJfSXmEtb5yQ7gT+BfxG57U3DPH564CelO3
NM6BY+K7lyYGg9GLRV1zGdP9Ir2fP5mvxHsmKGoRD3nuogiHUaqCVbeG1RjNyVX7
VHGMVqdVDeqzW+PKUmXyIvEvBQee/yFesVnOfrClrU+JGpWugu3HlCY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:20 2025 by rpki-client