Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/eoTbcV1I0klEu29QuK5-aw6m0hA.roa
File: eoTbcV1I0klEu29QuK5-aw6m0hA.roa (raw, json)
Hash identifier: iLBZjaYvjrPhtTFCuymrqwOvUvploq7ZFh6qZarCedM=
Subject key identifier: 7A:84:DB:71:5D:48:D2:49:44:BB:6F:50:B8:AE:7E:6B:0E:A6:D2:10
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 064DF5AD
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/eoTbcV1I0klEu29QuK5-aw6m0hA.roa
Signing time: Tue 11 Jan 2022 13:58:02 +0000
ROA not before: Tue 11 Jan 2022 13:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60078
IP address blocks: 85.204.249.0/24 maxlen: 24
85.204.248.0/24 maxlen: 24
2a10:52c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105772461 (0x64df5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jan 11 13:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a84db715d48d24944bb6f50b8ae7e6b0ea6d210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:12:0b:30:20:e2:a4:ce:56:99:ea:40:04:
de:60:d5:53:f8:8d:0a:74:fd:44:7f:88:23:4d:95:
db:62:79:6b:14:8a:ca:dc:4b:0f:5b:79:77:57:f4:
cb:14:27:a5:5c:62:7f:ed:0b:9a:32:d3:92:b9:7e:
f7:7e:a1:e3:5d:27:fd:e5:13:7b:2f:ed:2d:3b:12:
e0:51:ac:11:42:22:f5:0c:f1:2c:91:28:41:bc:55:
a1:02:03:4a:24:52:3b:39:df:a3:64:75:2e:81:f6:
e2:d4:9b:6c:5c:36:e3:72:54:a0:b8:67:15:90:e3:
ce:ab:a2:c4:eb:9f:f7:81:25:1b:28:05:87:b1:00:
8d:88:49:f0:75:1a:7a:48:a0:91:29:94:20:49:0b:
7a:2d:48:24:41:f5:ff:70:f9:01:8a:39:e0:48:2f:
47:f4:77:fb:63:fb:01:c0:0c:9b:62:53:73:13:3a:
52:8c:d9:7a:47:ad:4d:78:31:ae:81:1a:50:5f:12:
40:e2:10:43:28:ab:bf:ec:02:50:23:4e:13:83:29:
81:42:24:d8:04:dc:ae:6e:3e:25:6b:80:14:64:c0:
de:98:c2:1d:ab:3f:60:66:e1:14:b1:25:31:c3:34:
dc:11:70:00:f3:31:d8:02:98:59:e3:25:02:a7:6d:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:84:DB:71:5D:48:D2:49:44:BB:6F:50:B8:AE:7E:6B:0E:A6:D2:10
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/eoTbcV1I0klEu29QuK5-aw6m0hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.248.0/23
IPv6:
2a10:52c0::/48
Signature Algorithm: sha256WithRSAEncryption
33:15:19:e7:04:32:d3:95:62:b5:4b:a6:7f:a8:96:de:13:a6:
45:fc:e8:61:3f:fa:fe:dd:64:84:f2:40:c1:5b:72:22:d9:4e:
a5:cd:e2:7c:bc:d3:73:f5:a1:35:95:60:34:72:33:e3:2f:9d:
81:eb:12:1e:5e:64:c6:3b:fe:c5:3c:5c:7d:ed:5f:e0:36:cd:
b2:d0:ef:e7:a1:aa:84:56:c5:7f:a5:d1:1c:cf:40:af:c7:f3:
29:da:f9:9f:00:d6:95:79:11:26:ba:f4:e7:51:16:d5:f8:eb:
75:5c:96:d0:6c:9e:3f:26:0a:b3:0f:7f:a7:1d:18:18:73:2b:
79:62:85:96:fd:97:e9:06:46:45:79:ed:49:42:2f:e9:4f:22:
ae:ea:57:42:d8:f1:4b:94:fc:9c:a5:ae:23:ce:1a:fd:9e:d3:
af:11:f7:97:f7:0d:33:7d:c6:a0:d1:b8:f7:8d:35:fb:1a:b4:
dc:8f:3b:64:5d:72:86:d7:0b:0d:49:a8:50:fb:37:33:1d:79:
9d:ba:f9:7c:59:5c:41:df:ee:0c:86:d7:7a:7b:64:e1:b0:f0:
b8:8f:78:cf:13:76:50:1e:1d:32:d2:96:7e:06:55:87:57:dd:
54:46:1c:61:c0:2d:5b:a2:e7:ed:d8:8d:e5:a8:b3:9f:1c:a7:
08:e1:1c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:43 2025 by rpki-client