Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/EgoDRorp8T-RfK0-XxnTdvu893g.roa
File: EgoDRorp8T-RfK0-XxnTdvu893g.roa (raw, json)
Hash identifier: q6t5l2SvDXremW04BXvk/6IUOxMlMn6yfsApcNpQ7jw=
Subject key identifier: 12:0A:03:46:8A:E9:F1:3F:91:7C:AD:3E:5F:19:D3:76:FB:BC:F7:78
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 1743AF5A
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/EgoDRorp8T-RfK0-XxnTdvu893g.roa
Signing time: Sat 01 Jan 2022 16:03:46 +0000
ROA not before: Sat 01 Jan 2022 16:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39425
IP address blocks: 85.204.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390311770 (0x1743af5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=120a03468ae9f13f917cad3e5f19d376fbbcf778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:b0:da:af:f3:48:0e:1f:14:c1:fa:a9:19:
5d:5d:c0:6c:60:d2:15:8d:5f:91:64:13:96:91:df:
67:44:15:f4:81:34:71:5f:c9:c6:b1:65:52:f3:58:
56:25:7b:97:6d:2f:a3:7d:f8:78:99:7b:bf:ab:e4:
9a:6a:27:69:d6:9b:7c:bb:80:58:b5:a9:c8:36:21:
93:07:54:4e:bf:5c:6e:3d:09:67:92:42:51:80:f6:
5c:ef:83:3d:27:21:f4:12:a5:bc:06:28:f7:ef:a8:
b7:6d:41:96:45:b8:19:11:b3:f1:21:bf:07:5b:1b:
c0:e2:58:26:54:40:fd:f7:8e:b4:0c:51:8e:3b:0e:
dd:32:b1:79:f9:a7:32:55:87:04:6b:fa:a1:52:9b:
b0:85:3e:a0:28:50:dc:a3:63:ec:74:0a:1c:b8:9a:
73:76:36:0c:38:82:61:a9:36:90:07:4b:32:ac:e7:
13:6a:a3:99:3f:42:6c:37:d7:db:1e:e2:92:51:19:
f8:0d:f7:88:9c:31:23:9d:63:31:c0:2a:5d:b7:65:
b9:f5:60:fc:2d:1a:64:9a:fc:a3:71:97:99:04:e3:
d6:71:ef:d5:7c:6c:e4:5f:8b:2c:97:74:4c:e5:29:
94:eb:18:58:1f:0b:d9:90:41:00:f5:6a:dd:f7:9b:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0A:03:46:8A:E9:F1:3F:91:7C:AD:3E:5F:19:D3:76:FB:BC:F7:78
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/EgoDRorp8T-RfK0-XxnTdvu893g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.41.0/24
Signature Algorithm: sha256WithRSAEncryption
85:bd:20:2d:08:99:ca:dd:01:48:3c:ac:47:09:14:8d:cd:e8:
0a:23:1c:13:97:3c:f8:47:9e:bf:e3:c4:58:b2:56:d0:17:80:
b7:09:5b:19:c9:53:cf:d4:2b:40:ed:04:7e:92:d3:28:f7:82:
da:a7:08:87:2d:cd:81:a6:20:b7:82:b0:b6:90:a9:d8:37:ab:
fb:fe:8a:f5:72:93:f3:6b:5b:cc:29:81:32:c1:99:34:eb:7d:
83:22:54:df:4d:ba:39:0b:cb:11:de:65:2d:ef:1a:95:ae:b3:
fe:b1:9e:c2:b9:14:dd:71:4e:80:28:f6:7a:6d:df:13:60:1a:
e5:62:55:db:3d:8d:b6:9f:00:a7:0e:96:42:3f:ca:37:54:ec:
50:9a:c7:a5:be:54:c5:93:1b:bc:fd:58:79:c3:32:2b:46:55:
69:97:f1:ff:65:68:89:c0:ca:00:a4:f9:37:01:c5:52:19:fc:
e2:77:3b:aa:63:92:a5:b8:5f:67:8a:e4:ea:c7:73:df:dd:d4:
33:c3:8f:22:6f:7b:28:3e:1c:b9:07:ae:0b:29:85:1b:3d:ab:
bf:87:a5:d4:b5:7c:aa:04:64:ea:6a:ea:f4:44:31:ed:9e:94:
a5:7b:8d:6d:f4:96:ff:27:50:2a:4f:3c:62:ce:33:0f:98:7a:
9b:c9:00:d1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF0OvWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZGYxMzJkZjEzZTRiZTUzZDgyNTBjOGM0ODQyMDI2NGVlZjZjMTRjMB4XDTIyMDEw
MTE2MDM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTIwYTAzNDY4YWU5
ZjEzZjkxN2NhZDNlNWYxOWQzNzZmYmJjZjc3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlMsNqv80gOHxTB+qkZXV3AbGDSFY1fkWQTlpHfZ0QV9IE0
cV/JxrFlUvNYViV7l20vo334eJl7v6vkmmonadabfLuAWLWpyDYhkwdUTr9cbj0J
Z5JCUYD2XO+DPSch9BKlvAYo9++ot21BlkW4GRGz8SG/B1sbwOJYJlRA/feOtAxR
jjsO3TKxefmnMlWHBGv6oVKbsIU+oChQ3KNj7HQKHLiac3Y2DDiCYak2kAdLMqzn
E2qjmT9CbDfX2x7iklEZ+A33iJwxI51jMcAqXbdlufVg/C0aZJr8o3GXmQTj1nHv
1Xxs5F+LLJd0TOUplOsYWB8L2ZBBAPVq3feb2LcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQSCgNGiunxP5F8rT5fGdN2+7z3eDAfBgNVHSMEGDAWgBR98TLfE+S+U9gl
DIxIQgJk7vbBTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZmRXkzeFBrdmxQWUpReU1TRUlDWk83MndVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvYzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8x
L0Vnb0RSb3JwOFQtUmZLMC1YeG5UZHZ1ODkzZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
YzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8xL2ZmRXkzeFBrdmxQ
WUpReU1TRUlDWk83MndVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXMKTANBgkqhkiG9w0BAQsFAAOC
AQEAhb0gLQiZyt0BSDysRwkUjc3oCiMcE5c8+Eeev+PEWLJW0BeAtwlbGclTz9Qr
QO0EfpLTKPeC2qcIhy3NgaYgt4KwtpCp2Der+/6K9XKT82tbzCmBMsGZNOt9gyJU
3026OQvLEd5lLe8ala6z/rGewrkU3XFOgCj2em3fE2Aa5WJV2z2Ntp8Apw6WQj/K
N1TsUJrHpb5UxZMbvP1YecMyK0ZVaZfx/2VoicDKAKT5NwHFUhn84nc7qmOSpbhf
Z4rk6sdz393UM8OPIm97KD4cuQeuCymFGz2rv4el1LV8qgRk6mrq9EQx7Z6UpXuN
bfSW/ydQKk88Ys4zD5h6m8kA0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:48 2025 by rpki-client