Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/SgLf4agV3sD3rCbUSJgSmPjVwLE.roa
File: SgLf4agV3sD3rCbUSJgSmPjVwLE.roa (raw, json)
Hash identifier: KRpS9XRsxtnGsCMUwDw2u6WoO1pf0Zt3S8pR27LUSzM=
Subject key identifier: 4A:02:DF:E1:A8:15:DE:C0:F7:AC:26:D4:48:98:12:98:F8:D5:C0:B1
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 08F5FF5C
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/SgLf4agV3sD3rCbUSJgSmPjVwLE.roa
Signing time: Sat 01 Jan 2022 15:04:58 +0000
ROA not before: Sat 01 Jan 2022 15:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209824
IP address blocks: 85.209.53.0/24 maxlen: 24
85.209.52.0/24 maxlen: 24
85.209.55.0/24 maxlen: 24
85.209.54.0/24 maxlen: 24
2a09:9340::/30 maxlen: 30
2a09:9344::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150339420 (0x8f5ff5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Jan 1 15:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a02dfe1a815dec0f7ac26d448981298f8d5c0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:af:0e:67:76:3d:ff:02:9c:2c:28:ec:e2:
34:86:3c:d0:00:82:5e:dc:96:95:ea:b1:74:dd:71:
a7:9a:82:37:de:06:b7:29:eb:ea:ba:29:61:9b:07:
bc:31:ee:dd:0e:3d:74:73:4b:03:77:e3:eb:25:dc:
2b:a7:43:a4:28:0d:e4:38:95:17:5d:d1:74:17:d8:
dd:26:f2:4e:23:87:25:8c:9c:63:ac:51:fc:a3:aa:
0e:5d:0b:5f:3a:94:46:3f:b6:1e:40:35:54:4d:7d:
19:07:85:5b:49:a1:de:cb:f6:a2:2d:5f:a1:4a:6a:
d9:b7:35:f9:32:40:92:fe:42:7b:04:74:92:1f:73:
70:37:cd:fd:a9:de:fd:d4:b1:15:b8:4e:dc:87:3e:
3b:08:a2:6d:2d:e9:b0:d2:e1:d2:94:12:85:2c:dd:
bb:eb:73:34:61:95:78:08:4f:9c:6b:16:4a:d4:20:
27:b7:18:5d:f6:e3:67:50:0d:ff:0e:6d:5d:dc:31:
b0:5c:f9:de:75:a7:17:b0:ff:cf:7e:02:88:e8:db:
42:57:39:8b:2a:ac:e6:4f:f4:9c:10:89:68:09:e8:
f0:71:b8:c2:c2:79:89:7b:0a:db:6e:1a:00:9d:65:
a9:29:b2:86:c5:06:2d:cd:f3:b4:09:bb:8f:e6:9b:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:02:DF:E1:A8:15:DE:C0:F7:AC:26:D4:48:98:12:98:F8:D5:C0:B1
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/SgLf4agV3sD3rCbUSJgSmPjVwLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.52.0/22
IPv6:
2a09:9340::/29
Signature Algorithm: sha256WithRSAEncryption
2a:90:af:96:c8:06:f9:ab:af:4d:d8:86:b1:d0:0a:bd:2a:78:
e3:ef:6a:f9:c3:2c:79:6e:53:b2:e8:09:76:42:70:ad:28:03:
15:54:91:d9:ab:9d:36:90:c6:11:6c:34:a9:6c:11:7b:61:a9:
a7:4c:cc:96:98:41:f4:aa:e1:27:1a:2b:ef:e8:0e:85:b6:a8:
0e:dd:28:79:df:fb:0f:a6:24:3c:38:44:e7:1b:91:f7:90:39:
14:2b:1a:ca:5f:b3:c7:cc:49:b1:a0:91:2b:2a:59:cb:7e:d8:
20:14:f3:cf:2e:66:29:42:3e:8d:fc:19:70:e0:6d:35:98:a3:
79:c1:73:fe:ea:60:ce:3b:09:9b:dc:cf:fc:f3:b5:f5:8d:12:
b6:87:88:cf:46:43:06:07:ef:16:1e:fb:d6:68:eb:85:73:da:
d4:04:bc:8c:32:74:4d:c2:ba:dc:45:66:35:06:96:ff:38:a5:
79:6d:be:13:d6:69:59:39:9d:22:7b:69:0d:78:97:74:8d:27:
36:b4:a4:79:45:23:79:a0:0d:4e:05:5c:f8:62:0a:d7:49:6b:
f9:40:fe:14:00:14:19:05:a5:cb:f6:39:5e:70:fc:b9:ce:e2:
7d:81:95:69:05:f2:31:0b:b5:64:f8:e4:0a:af:e7:30:b9:de:
07:d1:de:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:00:33 2025 by rpki-client