Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/_4B9qMDgFWDHz3TIBkuiz7mxk8c.roa
File: _4B9qMDgFWDHz3TIBkuiz7mxk8c.roa (raw, json)
Hash identifier: XKcrPbImv4134VShmktoEVAKgQXO+tUeParlGNeEVxM=
Subject key identifier: FF:80:7D:A8:C0:E0:15:60:C7:CF:74:C8:06:4B:A2:CF:B9:B1:93:C7
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 018877E9D1971D1DE166326A2B9496369A32
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/_4B9qMDgFWDHz3TIBkuiz7mxk8c.roa
Signing time: Thu 01 Jun 2023 17:03:12 +0000
ROA not before: Thu 01 Jun 2023 17:03:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209354
IP address blocks: 85.208.205.0/24 maxlen: 24
85.208.206.0/24 maxlen: 24
85.208.204.0/24 maxlen: 24
85.208.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:e9:d1:97:1d:1d:e1:66:32:6a:2b:94:96:36:9a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Jun 1 17:03:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff807da8c0e01560c7cf74c8064ba2cfb9b193c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fe:b2:0e:d3:45:08:27:46:e1:12:f4:78:7a:
ae:32:16:ec:c8:43:f6:8d:3a:d3:72:45:8c:e3:b7:
69:33:60:e5:28:2a:ca:c0:ae:48:4e:d6:24:96:b7:
5e:64:6d:95:38:46:7e:75:19:ca:08:af:26:a2:e9:
99:56:cf:a9:0a:24:51:04:e8:70:d5:11:c8:12:81:
e7:d1:9a:47:c8:7b:93:d5:dd:77:6f:2b:25:8d:a2:
3d:ce:d2:91:c6:26:a5:4d:bb:d3:44:b3:68:74:5a:
67:b5:24:90:1d:85:69:81:6b:2f:d9:79:ae:c2:e5:
ae:f6:b1:62:c7:f7:84:39:c2:c7:1b:ff:64:b9:fe:
0c:22:42:cc:bc:94:f5:31:53:4f:fd:a3:a2:3e:e7:
03:47:95:a5:f0:99:0d:65:95:b8:42:ce:d1:8a:f3:
1a:ba:d9:e0:52:39:be:56:95:70:25:a0:6a:1a:48:
4d:e7:06:03:db:c3:37:2d:d8:cc:8f:97:81:49:fd:
eb:30:d9:6e:c3:d4:fb:b2:57:61:23:54:f2:48:9f:
81:79:b0:9f:b4:1e:02:15:12:37:1d:65:80:6f:42:
1d:8d:3b:6a:dd:57:04:97:ec:e1:ae:7e:d3:8e:83:
1e:1b:33:20:38:71:3c:cf:f9:ac:70:44:08:66:ae:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:7D:A8:C0:E0:15:60:C7:CF:74:C8:06:4B:A2:CF:B9:B1:93:C7
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/_4B9qMDgFWDHz3TIBkuiz7mxk8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:22:79:cc:4c:b4:e4:ca:6f:49:a0:db:76:b9:ab:c5:8f:d0:
d9:1b:0d:6a:1c:4b:d4:08:fa:df:6c:2e:14:4d:ab:aa:96:7f:
9c:cb:74:ed:52:5f:3e:84:d3:a1:99:16:f9:49:80:01:3e:18:
9e:5a:4d:d6:a0:a2:79:c2:69:1e:a2:55:04:53:d4:c9:4c:50:
bb:f1:27:2a:47:10:78:76:41:51:6f:bb:83:bb:fd:99:39:f2:
8b:37:6e:ab:95:10:87:e0:96:1c:b2:e1:d9:4d:41:53:9d:32:
e8:4c:44:58:d1:ee:41:ca:c7:5b:82:54:91:b8:3f:a8:ed:02:
f8:6f:23:35:5a:20:dd:31:98:83:10:62:c8:c4:85:23:12:47:
12:56:89:1c:11:4a:19:01:e7:4b:25:31:28:a7:53:77:23:85:
37:56:98:6b:2c:8c:65:13:83:07:cd:fe:d3:77:a2:c7:76:17:
2f:f9:c0:98:ec:e5:6e:7e:00:74:85:f1:f5:8c:50:a0:52:7c:
79:5d:8a:e4:d3:70:b5:a1:83:d4:b3:e7:cf:b6:77:0d:7c:eb:
8a:39:4b:b6:88:e9:b3:49:2f:90:ce:2b:d7:ac:23:ca:6e:14:
e6:32:94:8d:39:35:9e:83:24:58:a6:88:68:df:71:62:e0:a0:
03:5a:1e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:13 2025 by rpki-client