Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/FHi5ib0v-UKi39eWvwZ1B0Wdbt0.roa
File: FHi5ib0v-UKi39eWvwZ1B0Wdbt0.roa (raw, json)
Hash identifier: 082LWkF3bRDF2Gx91RUmX8xPJsmGW7pOEySOhx+p2Pg=
Subject key identifier: 14:78:B9:89:BD:2F:F9:42:A2:DF:D7:96:BF:06:75:07:45:9D:6E:DD
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 018ADC00CC850D91A212056019CF73602B6E
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/FHi5ib0v-UKi39eWvwZ1B0Wdbt0.roa
Signing time: Thu 28 Sep 2023 13:35:54 +0000
ROA not before: Thu 28 Sep 2023 13:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 85.11.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dc:00:cc:85:0d:91:a2:12:05:60:19:cf:73:60:2b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Sep 28 13:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1478b989bd2ff942a2dfd796bf067507459d6edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:91:bc:b3:bc:bd:26:d5:75:ae:5f:9a:6e:
0d:8c:cc:d6:08:d0:46:dc:d8:83:47:ea:15:cc:a7:
bd:13:e9:c4:34:4a:1e:6c:c5:f2:d7:5e:59:af:e9:
dd:a1:c4:0c:e4:b3:d0:36:f6:8f:41:5f:de:a4:ca:
00:b7:47:13:e8:a7:30:c3:19:86:ca:7f:90:66:87:
fb:9f:ca:ef:2c:9c:bf:4d:6c:bf:e7:22:fd:56:5b:
1f:73:e9:bc:90:0e:6a:1d:19:b2:49:28:4e:8b:b1:
78:24:68:b4:c7:73:77:1e:4c:87:7f:2d:29:0d:a2:
f9:eb:cd:70:6b:6f:60:39:8c:5a:96:99:2a:ac:fc:
f5:ca:f4:e7:e8:e8:4c:28:45:59:c3:63:ca:c8:00:
38:23:7d:67:9e:6b:52:8c:c6:8a:19:a4:6b:7d:b5:
31:17:05:ad:5d:1d:58:8d:df:78:c9:1d:83:de:71:
c8:72:1f:22:3c:48:de:84:d4:d3:44:d8:9b:f0:1b:
00:1c:dc:61:f7:ea:3b:35:1c:9f:39:14:2f:71:d5:
ea:ed:37:f1:5b:07:fd:2d:01:3e:97:f5:69:85:e7:
f9:bd:1a:e4:b1:a3:e6:c6:29:84:b0:e3:45:40:fa:
43:ea:13:be:12:6b:2c:1a:a0:3f:fa:67:6d:de:dd:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:78:B9:89:BD:2F:F9:42:A2:DF:D7:96:BF:06:75:07:45:9D:6E:DD
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/FHi5ib0v-UKi39eWvwZ1B0Wdbt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6e:a9:68:15:f2:6d:29:c3:d7:6f:e9:c0:62:73:a0:e5:c1:
fe:10:28:ee:b5:08:97:0f:1e:f6:a4:a4:6a:1c:a8:79:03:a2:
4d:fd:c3:2a:a2:ad:bf:9a:5e:9c:67:46:bc:a3:cf:04:b6:08:
fb:04:52:38:63:50:b1:a4:2c:70:1d:00:a3:5a:99:a3:96:15:
75:40:2c:a7:a2:97:57:5d:04:01:c5:0d:1d:11:51:29:7c:c0:
04:fc:af:77:5d:a6:e0:e2:e7:65:f5:2a:ea:31:d9:46:ac:ea:
fc:7b:52:8d:28:8e:96:83:0c:6a:8e:4b:4d:87:f7:63:e9:c1:
e7:1c:8d:d1:ab:c5:5c:c8:1e:7d:4a:18:bf:b6:c9:10:a0:c9:
db:32:20:d9:4c:76:bc:b2:60:67:ab:03:17:23:cb:d2:5f:fb:
77:76:e4:01:63:b9:9e:54:73:b3:41:dd:8f:1d:a8:76:83:0e:
12:11:41:6b:4e:7d:c9:e0:80:26:87:6d:93:39:37:9b:5a:f2:
3b:9e:43:92:1d:7c:ce:a9:e2:53:4b:6f:cf:be:62:de:c8:52:
16:8e:ae:00:b0:cf:6f:d5:80:3f:6a:16:ff:be:2b:5f:57:56:
45:73:61:25:34:66:a5:6a:b9:72:18:5d:01:75:f9:53:34:c0:
dc:b4:3e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:55 2025 by rpki-client