Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/5Avxd5fRtTF72pcwXf1Lyvv0QyQ.roa
File: 5Avxd5fRtTF72pcwXf1Lyvv0QyQ.roa (raw, json)
Hash identifier: QnFS1sRivUhQ+uZs/s7p4M9e8Z/2ROD9dcTZurIFB7Q=
Subject key identifier: E4:0B:F1:77:97:D1:B5:31:7B:DA:97:30:5D:FD:4B:CA:FB:F4:43:24
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41D45F33511CEC372D07FBD316410F
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/5Avxd5fRtTF72pcwXf1Lyvv0QyQ.roa
Signing time: Sun 01 Jan 2023 16:54:45 +0000
ROA not before: Sun 01 Jan 2023 16:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39425
IP address blocks: 85.204.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:d4:5f:33:51:1c:ec:37:2d:07:fb:d3:16:41:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e40bf17797d1b5317bda97305dfd4bcafbf44324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:6d:0c:5b:55:91:a1:fc:aa:68:ca:23:ba:
a3:20:85:54:30:7a:3b:c0:73:6e:1a:c6:37:e9:2a:
af:4b:ac:d4:05:fd:b1:fa:d9:5c:91:6d:da:32:91:
74:b9:1f:11:0b:b1:48:89:d4:93:e3:1b:07:e7:63:
a9:f9:6a:6d:14:93:54:9a:b3:2a:54:91:72:61:a0:
d0:0c:1e:8c:6d:d4:07:cb:c1:a5:b3:a3:d2:5e:05:
b0:cd:8c:c7:6e:41:22:eb:66:4f:32:40:8e:3c:38:
18:0f:45:1b:c7:f0:9b:1c:db:4a:95:70:26:bf:85:
26:a9:2a:55:cb:e4:84:92:5b:50:3d:5e:9e:72:53:
22:c6:00:29:07:62:18:97:a1:ae:92:9b:ce:6e:d3:
85:0d:60:04:6e:0a:c2:c7:04:1a:05:4c:58:3b:77:
f2:ce:55:72:e0:2a:c5:d2:dc:fb:2a:b0:4e:da:09:
c3:6f:8c:dd:59:ba:67:8f:7c:89:dd:76:87:8e:6d:
e7:ae:23:77:f2:39:6a:7f:f5:38:54:b4:ce:db:cc:
af:96:c9:1b:6f:64:67:69:5d:dc:ec:d3:b9:b3:fb:
d0:4f:6d:ef:55:37:3c:28:9a:34:75:c3:37:6e:6e:
58:19:8a:30:04:9c:5f:2a:61:09:5c:cb:e6:50:fc:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0B:F1:77:97:D1:B5:31:7B:DA:97:30:5D:FD:4B:CA:FB:F4:43:24
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/5Avxd5fRtTF72pcwXf1Lyvv0QyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.41.0/24
Signature Algorithm: sha256WithRSAEncryption
81:aa:91:3b:1e:1e:25:2b:4e:21:64:2d:c1:2d:cf:b0:b1:89:
b3:92:f9:42:2b:48:02:87:77:d4:6a:e2:20:d6:57:f6:56:d8:
95:b3:24:80:cd:6f:18:f9:d7:20:1f:90:e0:e5:00:92:6a:bd:
c3:d7:21:03:69:f7:3f:b3:04:f4:91:e1:cc:87:21:23:73:30:
1a:31:27:b1:ea:2e:3d:7f:e2:eb:ff:4a:f1:bc:2a:b4:c8:51:
0e:b5:65:6c:78:8d:10:fb:d4:98:81:a9:db:90:f5:d0:5b:26:
ca:87:55:08:11:9d:e9:4a:88:93:d6:64:48:04:8f:84:5f:d9:
82:70:e7:d0:47:7d:e8:16:f2:23:b8:64:62:e6:5e:91:0e:ae:
23:09:68:1c:eb:c6:8b:b4:41:f2:2b:39:c9:c6:42:ac:e3:41:
6e:9e:62:e6:22:99:ed:41:20:9b:0a:39:6f:41:40:0f:7a:72:
d7:2c:c7:60:9e:43:68:61:62:86:b5:5e:6e:79:05:5b:d4:15:
85:66:7c:f6:66:a5:0f:e8:98:ed:75:52:b1:91:c3:b3:bf:6a:
14:61:5e:d2:83:74:d7:6a:b3:c8:a4:8d:89:e6:eb:bc:d1:9d:
dd:21:ba:b6:17:d5:08:b6:1f:b4:7c:69:59:9d:fc:0d:9b:2a:
37:37:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:00 2025 by rpki-client