Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/_mE7OPnJgn0zjWf1zr4pGZPRtLY.roa
File: _mE7OPnJgn0zjWf1zr4pGZPRtLY.roa (raw, json)
Hash identifier: uHc/mzAluPJTMz7ReRg2oeLqYEBVIDUG3v92l7uxQ+k=
Subject key identifier: FE:61:3B:38:F9:C9:82:7D:33:8D:67:F5:CE:BE:29:19:93:D1:B4:B6
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0185711556DD9904EE14E08F2E3E2D6F8418
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/_mE7OPnJgn0zjWf1zr4pGZPRtLY.roa
Signing time: Mon 02 Jan 2023 06:05:01 +0000
ROA not before: Mon 02 Jan 2023 06:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200115
IP address blocks: 85.219.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:56:dd:99:04:ee:14:e0:8f:2e:3e:2d:6f:84:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe613b38f9c9827d338d67f5cebe291993d1b4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:fe:0d:ea:8b:c3:80:8c:e9:b7:23:95:12:
f9:7c:ae:61:8e:df:98:62:2c:ac:8f:b8:29:0b:21:
5f:85:f7:45:f6:bb:24:49:eb:c2:55:0e:dd:02:bb:
77:77:d5:47:6f:d9:b9:2a:04:34:f1:52:1f:64:c6:
5b:d7:97:07:cb:a5:1a:e5:9e:b9:8b:17:2c:35:66:
09:9e:9d:ff:6c:c8:29:31:96:ab:d2:27:16:75:5a:
37:18:73:e9:f4:f8:db:61:64:27:79:3a:98:0e:c8:
a6:a1:b5:97:4e:ed:fc:f7:ba:ec:b1:38:35:96:40:
06:c1:a2:65:67:74:c9:90:cc:a7:9d:8d:e6:89:07:
46:41:44:d5:74:3b:97:4f:3c:6b:08:58:22:92:ce:
ed:54:5a:b6:44:79:da:9a:d5:37:23:c9:3c:2b:37:
7c:a1:14:da:6f:e5:e8:a8:08:35:71:12:fe:07:c4:
99:4d:2a:d0:f2:72:f7:bd:a9:9d:8d:d9:27:8b:4b:
86:cd:0a:eb:78:29:ac:96:93:65:90:2d:ef:e0:94:
ef:76:ce:9d:74:dd:86:87:13:2c:68:9b:1c:41:1a:
06:0d:a8:2e:58:f5:ed:a5:7f:76:b6:cb:7f:fd:7c:
db:07:75:af:eb:b7:88:9c:9e:1b:69:e1:5d:d0:30:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:61:3B:38:F9:C9:82:7D:33:8D:67:F5:CE:BE:29:19:93:D1:B4:B6
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/_mE7OPnJgn0zjWf1zr4pGZPRtLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:91:be:5d:67:3e:17:b9:b4:77:69:34:be:83:3b:29:a5:22:
ce:45:2e:1a:00:28:0c:bf:6c:3a:77:5d:bb:35:43:70:ee:a6:
9f:d6:0d:fc:2d:6a:c0:ca:44:d8:07:ca:2f:c7:a3:a4:31:2e:
c9:19:8b:84:6e:46:dd:e1:02:bc:0c:4e:dc:3c:15:19:96:3b:
24:f4:58:d2:0f:20:f6:54:e6:e7:0f:f5:b7:7e:6f:7d:11:9f:
b0:65:73:50:39:51:0c:21:99:06:19:5f:89:10:c0:c4:ef:63:
59:bf:63:0e:67:fc:16:bd:37:00:7f:54:93:95:4b:99:0b:47:
d8:d2:7b:52:62:0d:d9:f6:77:70:67:2f:e5:fc:ee:cc:63:97:
2f:33:ff:ee:6d:54:87:c6:5b:50:c3:33:07:06:0e:73:04:5d:
47:0e:f1:dc:f8:ac:d1:a4:07:d8:49:c6:c5:5a:51:65:db:f3:
d2:0b:f5:af:45:9d:9f:19:69:c5:60:8b:b1:6d:bd:d7:f0:fc:
7e:20:59:dc:29:96:8f:8a:0c:69:72:c0:80:da:af:09:c5:a5:
be:97:f0:fb:a4:87:40:32:f7:99:f2:47:15:66:07:7d:29:ae:
b4:c1:b0:39:1a:58:ae:bf:96:3e:05:6d:da:d6:de:8b:fb:c9:
85:2d:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:13 2025 by rpki-client