Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/735-BOVdIOuyUPSCAt32erShFz4.roa
File: 735-BOVdIOuyUPSCAt32erShFz4.roa (raw, json)
Hash identifier: weng+qXIJXePw9Yi17n5I7KUq6XMP1Lu2rq+2krjrfg=
Subject key identifier: EF:7E:7E:04:E5:5D:20:EB:B2:50:F4:82:02:DD:F6:7A:B4:A1:17:3E
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01856E8B25075DB23AFBA7410EBBF8BBAE48
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/735-BOVdIOuyUPSCAt32erShFz4.roa
Signing time: Sun 01 Jan 2023 18:14:50 +0000
ROA not before: Sun 01 Jan 2023 18:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47154
IP address blocks: 85.117.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:25:07:5d:b2:3a:fb:a7:41:0e:bb:f8:bb:ae:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 18:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef7e7e04e55d20ebb250f48202ddf67ab4a1173e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:29:16:42:b5:c9:74:7c:6d:94:03:c1:64:
91:1e:bb:95:1f:e0:41:84:27:cf:d7:40:d1:c9:6f:
d7:2a:23:56:73:3c:24:61:47:46:b4:13:68:98:37:
9b:7d:78:1a:cc:c0:84:29:b1:bd:8a:a8:2c:ec:09:
37:9f:b0:bd:b8:f4:78:a2:bb:14:4f:a4:6a:eb:2e:
79:c1:9e:5e:cf:f8:3c:7b:f6:6b:f0:52:93:5f:e3:
d7:9a:16:87:41:5e:61:e3:13:1d:62:f3:5d:5c:1c:
5b:74:04:b3:4a:b7:b2:b0:eb:66:ca:16:c4:69:3e:
42:a3:8f:2b:36:46:ec:7c:6e:9c:45:0d:fa:0a:84:
08:77:87:f6:ba:c7:8e:49:17:f0:f5:01:0f:7c:4e:
3a:9e:c0:4e:3b:22:e0:c0:e4:d0:d2:e4:29:9c:9d:
81:7d:53:1d:59:b1:36:60:fc:75:ff:64:15:6f:14:
2d:8a:a4:17:6b:fc:5b:0d:e1:b1:69:4a:eb:b1:a8:
3e:9b:e9:a9:1b:92:79:42:6e:1e:41:b7:28:8f:21:
27:60:4d:97:70:95:13:6a:9e:47:b9:17:7c:bf:ae:
a8:1a:7c:04:e7:2d:95:83:19:01:91:37:a6:0c:c3:
3e:05:d6:c9:18:ff:e5:38:25:8c:89:ac:dd:a0:18:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7E:7E:04:E5:5D:20:EB:B2:50:F4:82:02:DD:F6:7A:B4:A1:17:3E
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/735-BOVdIOuyUPSCAt32erShFz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.241.0/24
Signature Algorithm: sha256WithRSAEncryption
23:2f:f7:cd:bd:18:1a:64:d9:53:a1:fe:48:92:d8:53:c7:44:
29:fc:09:3a:64:d5:e8:fe:06:04:5b:11:e2:f8:4e:7e:e3:67:
58:be:9c:cb:86:c9:79:37:76:c1:4a:10:fe:35:75:f8:6d:e1:
76:81:a2:1b:d3:48:4f:cb:c0:54:2c:16:eb:da:96:49:02:59:
03:b7:f0:85:fa:95:3c:a8:e0:2a:5c:64:09:c7:b8:3a:fb:d4:
3b:21:a5:4d:e5:fe:cf:71:33:87:7b:fd:2e:33:9b:2a:00:f8:
45:c7:23:2b:f2:47:6a:de:79:4b:dd:3e:c9:9b:25:06:cc:4f:
c8:92:90:61:19:b9:4a:f0:cc:16:12:8a:0c:78:2d:e8:36:9c:
ea:a2:fa:17:6f:bf:d5:6b:b5:21:61:28:8e:cc:98:39:da:61:
db:8c:9b:09:21:68:0b:19:53:e5:67:06:4e:47:03:8a:fd:3d:
ab:c3:a4:3f:90:f5:da:c2:cd:2a:01:bc:d2:14:ea:b0:0b:45:
ac:57:c6:9c:4e:9b:37:e3:5b:31:e4:16:fb:32:97:ef:fc:f0:
02:62:f3:db:3f:ca:8a:f1:40:a0:19:41:f0:bf:c6:d1:f9:63:
18:48:62:ad:6e:94:2d:d8:39:4f:4d:d4:8d:d2:22:5b:d8:a4:
b5:54:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:44 2025 by rpki-client