Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/5z_97gedTAtNBbd79eB5TXclaGQ.roa
File: 5z_97gedTAtNBbd79eB5TXclaGQ.roa (raw, json)
Hash identifier: aJoRKGgZJGgkrhO8szeXs9Wd5QkiBu9yR/vSmWdE5iw=
Subject key identifier: E7:3F:FD:EE:07:9D:4C:0B:4D:05:B7:7B:F5:E0:79:4D:77:25:68:64
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0A295E3A
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/5z_97gedTAtNBbd79eB5TXclaGQ.roa
Signing time: Thu 28 Apr 2022 07:53:12 +0000
ROA not before: Thu 28 Apr 2022 07:53:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211526
IP address blocks: 85.14.56.0/24 maxlen: 24
85.14.57.0/24 maxlen: 24
89.252.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170483258 (0xa295e3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Apr 28 07:53:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e73ffdee079d4c0b4d05b77bf5e0794d77256864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:0b:85:c9:12:24:f5:3a:b1:69:69:8e:8a:
b8:8c:41:11:66:3a:89:56:e5:4e:cd:c3:03:d0:e5:
90:b5:0a:a1:13:e2:71:bb:85:3f:cc:5f:b6:c7:8f:
fe:05:0e:2b:20:8a:83:fe:15:6f:3a:f4:95:07:71:
27:55:09:40:3d:80:87:1a:3d:c3:77:61:e2:36:af:
c4:c6:c7:f6:94:7e:ed:9f:22:6e:b8:d7:c8:a0:98:
f6:a4:16:5e:8b:2c:b3:ab:5e:4b:74:1d:10:5b:fa:
a8:6b:8b:13:8e:5c:7f:a3:42:bb:ba:de:c9:c7:35:
27:1e:f6:c4:a8:d5:fb:67:39:5b:a4:2b:ad:0f:94:
7e:c0:17:cf:0b:6f:cc:b8:e8:9c:fc:72:1e:74:aa:
6b:f0:cf:47:c8:7f:1c:a2:ad:a6:ca:7a:fc:5d:1f:
84:db:fb:62:9e:51:16:e4:77:ea:ce:b4:6a:83:a6:
a4:3e:3e:74:3a:07:65:e2:94:cb:58:47:6f:71:8e:
43:1a:55:e3:bd:d4:a0:b6:54:03:7b:47:14:c1:d7:
34:8b:e4:85:c4:48:35:22:75:9e:a6:db:2d:be:cd:
e7:92:87:52:cd:98:73:1f:82:3d:14:b3:36:e4:fa:
93:74:ff:e7:1b:56:86:bb:c0:bb:38:3f:b5:47:b2:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3F:FD:EE:07:9D:4C:0B:4D:05:B7:7B:F5:E0:79:4D:77:25:68:64
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/5z_97gedTAtNBbd79eB5TXclaGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.56.0/23
89.252.198.0/24
Signature Algorithm: sha256WithRSAEncryption
db:fe:0a:f8:e5:e4:60:77:29:74:14:ed:1a:ba:51:09:f1:fc:
5f:55:2f:e4:f6:dc:9d:30:73:b8:ae:aa:2f:66:a9:20:29:97:
f4:2a:23:96:ea:14:b0:4d:30:1b:af:f1:bc:31:5c:5c:46:cc:
3f:21:ef:1b:26:fa:67:50:93:60:b2:78:50:17:18:7e:90:94:
3c:22:ff:dc:9c:71:f4:1a:0a:e9:da:33:53:43:33:af:6a:0c:
77:6e:de:8f:2b:da:d2:9f:da:3d:01:cc:a3:a5:de:ed:f8:6e:
93:04:05:12:59:b2:3a:ba:cd:90:f9:0f:37:d0:89:18:61:74:
04:65:8e:17:ea:83:c7:b6:3e:80:f7:1c:94:bd:e3:5e:9a:bf:
92:85:5a:be:84:f6:23:c2:90:c7:d1:0e:a9:d3:de:63:b5:9f:
00:a4:96:69:02:8f:b3:7e:66:14:95:9e:03:49:f5:36:c2:5e:
3c:43:86:48:47:2e:11:dc:79:32:64:55:bb:05:bb:47:f0:64:
8a:ed:6a:be:b6:11:5f:7b:c5:4e:e9:77:26:59:06:06:3b:07:
b8:75:1a:ca:ca:4c:5f:a1:a0:ca:6d:e7:9f:c8:61:70:03:99:
79:6a:6e:f6:45:c6:71:cc:fc:04:3c:e0:cb:71:1e:8e:02:1b:
79:db:c2:dc
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECileOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MTA0YTQwODIxYzQxNzZjYzQyZTI1NWVmNmMxNzI3NDczYzNmMDBhMB4XDTIyMDQy
ODA3NTMxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTczZmZkZWUwNzlk
NGMwYjRkMDViNzdiZjVlMDc5NGQ3NzI1Njg2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANh2C4XJEiT1OrFpaY6KuIxBEWY6iVblTs3DA9DlkLUKoRPi
cbuFP8xftseP/gUOKyCKg/4Vbzr0lQdxJ1UJQD2Ahxo9w3dh4javxMbH9pR+7Z8i
brjXyKCY9qQWXosss6teS3QdEFv6qGuLE45cf6NCu7reycc1Jx72xKjV+2c5W6Qr
rQ+UfsAXzwtvzLjonPxyHnSqa/DPR8h/HKKtpsp6/F0fhNv7Yp5RFuR36s60aoOm
pD4+dDoHZeKUy1hHb3GOQxpV473UoLZUA3tHFMHXNIvkhcRINSJ1nqbbLb7N55KH
Us2Ycx+CPRSzNuT6k3T/5xtWhrvAuzg/tUeyo/kCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTnP/3uB51MC00Ft3v14HlNdyVoZDAfBgNVHSMEGDAWgBRBBKQIIcQXbMQu
JV72wXJ0c8PwCjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FRU2tDQ0hFRjJ6RUxpVmU5c0Z5ZEhQRDhBby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvOTY5OTYyLTEyZDMtNDFiMi1hYjQzLWIyN2Q2ZTI3OGUxOC8x
LzV6Xzk3Z2VkVEF0TkJiZDc5ZUI1VFhjbGFHUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
OTY5OTYyLTEyZDMtNDFiMi1hYjQzLWIyN2Q2ZTI3OGUxOC8xL1FRU2tDQ0hFRjJ6
RUxpVmU5c0Z5ZEhQRDhBby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAVUOOAMEAFn8xjANBgkqhkiG9w0B
AQsFAAOCAQEA2/4K+OXkYHcpdBTtGrpRCfH8X1Uv5PbcnTBzuK6qL2apICmX9Coj
luoUsE0wG6/xvDFcXEbMPyHvGyb6Z1CTYLJ4UBcYfpCUPCL/3Jxx9BoK6dozU0Mz
r2oMd27ejyva0p/aPQHMo6Xe7fhukwQFElmyOrrNkPkPN9CJGGF0BGWOF+qDx7Y+
gPcclL3jXpq/koVavoT2I8KQx9EOqdPeY7WfAKSWaQKPs35mFJWeA0n1NsJePEOG
SEcuEdx5MmRVuwW7R/Bkiu1qvrYRX3vFTul3JlkGBjsHuHUayspMX6Ggym3nn8hh
cAOZeWpu9kXGccz8BDzgy3EejgIbedvC3A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:16 2025 by rpki-client