Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4WPrrDwp_gt2VDEGNwJvjtw-cAo.roa
File: 4WPrrDwp_gt2VDEGNwJvjtw-cAo.roa (raw, json)
Hash identifier: 4EKiryp1xMJHaAVzeG7HnVwktutw5KCTehyn6tSRqLE=
Subject key identifier: E1:63:EB:AC:3C:29:FE:0B:76:54:31:06:37:02:6F:8E:DC:3E:70:0A
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0187A55164DF874E12546B225B7953AE462A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4WPrrDwp_gt2VDEGNwJvjtw-cAo.roa
Signing time: Fri 21 Apr 2023 19:36:27 +0000
ROA not before: Fri 21 Apr 2023 19:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212147
IP address blocks: 85.202.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a5:51:64:df:87:4e:12:54:6b:22:5b:79:53:ae:46:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 21 19:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e163ebac3c29fe0b7654310637026f8edc3e700a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:e6:cd:d7:99:6d:54:cc:c1:dc:ba:33:a7:
97:3a:f6:89:93:b1:b6:3e:07:b7:44:92:3f:48:55:
a2:f1:7a:9b:16:c2:ad:ff:da:86:0d:27:e1:0e:c6:
43:4b:9c:fd:32:71:0b:a5:5c:d2:11:c4:36:55:52:
a1:bc:53:41:4a:8c:59:48:1a:83:49:1f:a9:79:01:
50:75:9f:7d:d7:cb:b3:df:71:5e:7a:d9:6f:62:c7:
97:1f:64:b7:9d:9f:cc:b4:9b:10:0f:bd:6a:cc:09:
b8:89:45:9c:d7:6e:2b:24:14:fc:8c:8d:46:ea:bf:
37:05:be:e9:09:f2:df:d3:5f:24:d1:ef:f8:7e:1a:
08:f3:30:ff:aa:02:0f:b4:cb:c7:57:d0:af:72:f6:
e1:9c:71:5b:a8:23:5f:58:5a:b5:53:3b:b3:c6:fe:
2f:60:c4:36:0f:db:60:f5:23:9b:ff:1d:40:bd:77:
28:a7:a2:bc:1e:5d:de:1f:c8:91:15:3d:69:90:18:
72:9c:08:d3:1a:af:59:3c:ca:1a:95:85:02:db:7f:
b4:59:84:17:18:aa:f3:11:b0:d8:0d:82:c7:d6:ac:
44:dd:9c:7a:d4:ab:1e:e2:74:ae:24:72:16:e9:86:
a5:31:b3:db:10:39:05:23:ea:ee:17:f4:9d:36:db:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:63:EB:AC:3C:29:FE:0B:76:54:31:06:37:02:6F:8E:DC:3E:70:0A
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4WPrrDwp_gt2VDEGNwJvjtw-cAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.86.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d7:2b:6c:98:1e:ec:02:d9:2a:f6:d7:53:f2:53:72:ea:a2:
11:8e:0b:3f:93:9a:e8:47:8b:26:d8:6e:51:2a:66:19:a4:a6:
b5:97:48:22:3a:5a:80:e9:f2:66:2d:6a:41:f6:6b:1a:f4:d0:
28:05:ad:d0:08:3e:a5:86:1c:ea:e4:31:60:bb:77:98:7e:4b:
07:10:bd:e5:7e:93:35:13:02:20:e3:8e:9f:69:92:67:ba:45:
29:18:e8:e1:3e:15:06:c3:29:c3:60:fb:d0:41:12:b1:82:bf:
e4:dc:29:4e:93:74:b4:7d:5d:c9:c9:ff:92:bb:ab:6a:e4:f6:
a2:0e:48:3e:fe:61:1d:aa:a9:0e:03:20:29:f6:04:3e:38:b6:
29:53:69:8d:06:5c:cc:21:25:7b:fa:3d:76:42:bd:f9:16:02:
29:79:9f:8e:8e:cd:37:b3:0d:71:fc:8a:90:89:b0:83:9c:e4:
04:6d:ca:5e:bd:ce:53:60:37:a8:f8:68:81:5b:31:b6:61:47:
24:bb:6d:b3:9c:81:ad:7e:0f:f8:1c:00:79:ea:34:67:65:f4:
9d:f7:1d:cf:47:c8:bd:36:1d:05:40:d4:04:d2:83:d6:4a:1b:
4e:d7:c5:ce:bc:f3:4d:34:d0:8b:40:b0:c3:10:58:da:36:28:
45:1f:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:43 2025 by rpki-client