Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/XnvvvG3o6x6OZWMN5ql0CZoQNIs.roa
File: XnvvvG3o6x6OZWMN5ql0CZoQNIs.roa (raw, json)
Hash identifier: Z4A2EFGlqJd6BFX9XtuYjCbzoALF5JuF7LV1wn2IOVs=
Subject key identifier: 5E:7B:EF:BC:6D:E8:EB:1E:8E:65:63:0D:E6:A9:74:09:9A:10:34:8B
Certificate issuer: /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Certificate serial: 0113F001
Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/XnvvvG3o6x6OZWMN5ql0CZoQNIs.roa
Signing time: Tue 12 Apr 2022 14:45:22 +0000
ROA not before: Tue 12 Apr 2022 14:45:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210086
IP address blocks: 85.117.250.0/24 maxlen: 24
85.117.249.0/24 maxlen: 24
85.117.251.0/24 maxlen: 24
85.117.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18083841 (0x113f001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Validity
Not Before: Apr 12 14:45:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e7befbc6de8eb1e8e65630de6a974099a10348b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:18:35:54:cb:65:a9:7d:58:dd:b3:5c:de:
16:a0:ed:b4:c5:26:14:3b:40:27:3c:a1:4b:a4:12:
31:65:f9:d9:e0:75:52:0f:d0:15:c3:6d:63:f1:97:
fd:5a:2c:cb:02:39:2c:47:9f:ba:6b:ed:cc:01:5c:
4b:fa:33:e7:d6:de:6b:18:d7:eb:eb:f1:b2:a4:f4:
80:cb:ec:b0:8a:30:e2:00:20:3d:62:b3:e4:c2:33:
9b:f5:d9:6c:fe:0b:d0:24:75:da:e8:fa:03:6c:8b:
61:62:aa:a0:dd:b6:48:40:93:e7:fe:88:87:06:93:
e6:b0:98:b6:81:cf:29:e3:76:b6:5a:d0:9e:fc:30:
c1:be:20:59:99:f1:fc:d2:f4:ae:34:0d:cc:02:da:
d2:66:0f:75:8b:d4:28:7b:f9:87:b8:48:24:63:f1:
14:a7:e7:a5:11:cb:35:be:56:66:c4:f8:9c:f1:0a:
f5:21:2a:97:af:c2:35:70:b6:53:62:50:fd:a9:b4:
5b:97:a0:65:51:d3:6e:a5:ac:75:d4:25:21:fd:bc:
05:a9:54:d8:88:0a:79:35:46:94:6f:db:35:21:e9:
de:6c:b6:c1:c5:46:9c:6d:0f:0f:92:a8:0d:e9:e3:
d6:40:34:3d:65:99:0c:1a:57:c7:b5:fb:69:d4:77:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7B:EF:BC:6D:E8:EB:1E:8E:65:63:0D:E6:A9:74:09:9A:10:34:8B
X509v3 Authority Key Identifier:
keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/XnvvvG3o6x6OZWMN5ql0CZoQNIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.248.0/22
Signature Algorithm: sha256WithRSAEncryption
28:0a:84:22:f5:bb:0d:eb:b0:05:44:b1:47:e3:34:af:0d:6f:
92:f2:7b:91:c3:de:7a:82:ea:70:72:83:f4:3e:15:8f:9a:c1:
ca:3c:50:1c:84:aa:bc:17:52:2f:02:0b:43:4b:cb:9d:4c:77:
ec:15:b7:aa:cc:56:a1:c4:74:40:81:b7:e2:8f:24:34:83:e3:
77:af:3a:09:c3:1d:b1:19:40:7e:8a:72:49:86:01:6b:d2:22:
63:6c:60:56:8f:9e:bb:1b:34:3f:73:8a:88:d8:c8:0f:d4:64:
a0:03:86:18:61:86:76:86:68:3d:44:24:55:04:e0:aa:c3:25:
31:22:38:2e:5b:26:25:9a:04:2d:ea:b2:8b:e7:be:4f:8c:f6:
a4:9c:65:82:2b:0a:9a:9a:8d:07:98:cd:65:b9:11:24:8d:34:
82:7b:af:15:f7:ed:d8:02:e2:79:19:03:59:f0:b8:85:98:35:
fd:46:d1:7a:8c:13:ff:6c:ab:7e:3c:ea:40:b9:bb:7f:bc:d4:
30:22:ac:ce:e6:5d:37:67:39:55:84:12:f4:3d:16:ed:8a:08:
57:98:e4:c4:cc:50:ff:b5:03:14:8b:e5:49:fa:0e:18:59:10:
4f:19:e0:85:2a:2b:91:b6:40:4a:cc:d6:33:73:b2:e0:27:13:
34:2d:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:15 2025 by rpki-client