Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/DXdy_Ej78rmv19W1a7tn3FJ89xk.roa
File: DXdy_Ej78rmv19W1a7tn3FJ89xk.roa (raw, json)
Hash identifier: +ofYMQtxbMFGi/m7fORfGqtTz55HlPZpGgF8JIazEJI=
Subject key identifier: 0D:77:72:FC:48:FB:F2:B9:AF:D7:D5:B5:6B:BB:67:DC:52:7C:F7:19
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018CA02266632E8E2638EAC9CE323E087E80
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/DXdy_Ej78rmv19W1a7tn3FJ89xk.roa
Signing time: Mon 25 Dec 2023 08:40:58 +0000
ROA not before: Mon 25 Dec 2023 08:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29555
IP address blocks: 85.117.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:22:66:63:2e:8e:26:38:ea:c9:ce:32:3e:08:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Dec 25 08:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d7772fc48fbf2b9afd7d5b56bbb67dc527cf719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:49:b4:3e:73:7a:6f:fb:2f:b1:8c:d9:3e:
30:4e:2a:34:f9:4f:a8:64:5d:dc:1e:a7:54:7a:d7:
32:97:b5:68:be:0f:fc:84:20:31:dd:b8:3a:7f:88:
86:85:73:33:b3:a5:84:92:19:98:83:8b:55:90:f6:
3b:ed:e9:11:cc:68:fb:0d:eb:b4:e6:5f:f5:09:ed:
47:6d:22:ef:02:a8:9a:5d:4b:67:64:6b:3d:f3:e9:
6f:47:4f:c0:4c:d1:67:c2:93:08:3d:21:26:80:9f:
51:fa:6a:39:7c:de:90:be:8a:1f:e9:e2:62:7a:bd:
d2:39:21:e4:b6:8d:5a:62:fb:27:33:84:11:a7:17:
a1:b5:ec:15:fe:0b:e7:f2:5c:6c:ff:d0:2a:be:b6:
7c:de:dd:dd:5f:c5:a0:c0:e3:2f:ee:b0:58:c3:0c:
7f:a1:ce:75:94:f0:2a:83:18:00:fb:cd:04:fd:5c:
bc:77:69:99:50:5a:bb:8a:9c:25:f8:b1:71:de:9a:
64:d5:9d:78:57:7c:03:15:b6:ab:44:c2:32:51:8b:
71:a9:39:8d:1a:87:94:e3:34:8d:93:c0:6e:35:ed:
70:44:01:c2:7f:11:d1:92:76:3a:55:d5:99:07:a0:
7e:7b:e3:81:46:93:7a:fb:46:de:44:db:48:6c:0b:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:77:72:FC:48:FB:F2:B9:AF:D7:D5:B5:6B:BB:67:DC:52:7C:F7:19
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/DXdy_Ej78rmv19W1a7tn3FJ89xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:0b:32:d2:c3:bc:50:a9:9f:be:c1:a1:91:cc:07:23:2c:bd:
37:99:6a:f5:76:49:ed:7c:8f:d3:f3:04:31:88:d8:2d:37:b9:
c9:d5:18:f2:39:d5:d3:cd:a4:a7:09:c9:66:14:c4:90:6e:3c:
43:84:82:f1:fd:9d:83:15:de:af:95:73:54:8a:a0:57:06:06:
88:35:b8:69:18:6b:ff:ef:75:68:c4:f7:95:ee:87:c8:1b:a4:
fa:37:15:76:ce:90:16:0a:b3:d3:dc:01:fd:75:02:e3:37:9e:
f1:ab:3c:00:39:a4:6b:85:f5:a5:77:ec:f8:87:26:69:6b:be:
c2:42:4f:d9:dd:e1:51:74:6c:00:e2:4d:6b:93:f4:f7:90:21:
a6:eb:a9:e7:cf:73:24:e7:00:15:2f:40:4f:b5:7c:8f:d4:64:
10:dd:c3:b4:3b:37:e2:5e:a6:fe:c0:24:6d:6c:d0:5f:0d:70:
60:f1:29:99:db:6c:32:b9:14:b4:f7:f4:92:e1:11:93:7f:61:
7e:62:b5:a7:80:d2:9e:10:84:cd:ee:6e:dc:af:f6:e8:c6:b6:
fd:22:6a:79:6d:55:7c:6f:ed:eb:12:c3:26:f1:b5:83:0d:dc:
66:37:32:a4:37:df:66:84:3d:c0:9b:34:7b:e8:58:50:1f:8d:
28:19:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:23 2025 by rpki-client