Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/D6k-FHNnSBwpYgqQK2ESNVF37mA.roa
File: D6k-FHNnSBwpYgqQK2ESNVF37mA.roa (raw, json)
Hash identifier: L77l8pCeN6Jn2MMbpfo1wyEhjayxqWS54ri9HZ9Bv+s=
Subject key identifier: 0F:A9:3E:14:73:67:48:1C:29:62:0A:90:2B:61:12:35:51:77:EE:60
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 018AA1A528D988B38934BCABCFCEC21F01DC
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/D6k-FHNnSBwpYgqQK2ESNVF37mA.roa
Signing time: Sun 17 Sep 2023 05:37:50 +0000
ROA not before: Sun 17 Sep 2023 05:37:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212036
IP address blocks: 85.208.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a1:a5:28:d9:88:b3:89:34:bc:ab:cf:ce:c2:1f:01:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Sep 17 05:37:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fa93e147367481c29620a902b6112355177ee60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:c0:e2:64:80:58:ae:9e:f3:35:22:f4:32:
82:0e:01:ae:f6:1a:54:49:17:41:6d:15:f5:b9:68:
78:29:04:c2:01:50:db:30:ab:ef:ed:d6:31:92:17:
88:6f:20:a7:f3:7a:51:69:0a:6d:7c:2f:b5:d6:97:
3a:c9:da:a3:c2:5e:50:34:30:d6:f0:3c:08:30:d0:
e7:6b:e8:f6:c4:70:ec:d3:35:da:47:93:f5:86:6a:
00:b1:80:9a:c9:e8:f6:37:06:94:6f:ef:ee:72:5a:
98:5f:6d:6a:a1:3c:e1:dd:1a:5b:b0:0d:1e:98:c1:
29:52:22:57:2e:4a:33:5a:fd:8c:92:e0:36:1a:25:
5a:aa:d5:49:d0:6c:27:b8:6c:80:e2:55:13:fa:28:
ed:cc:09:01:98:6f:90:06:9d:8d:7d:55:ef:44:6a:
97:50:ee:e2:56:88:5c:77:ac:74:52:6e:e5:48:7d:
c6:3e:76:a4:ca:7b:0a:0b:59:7a:61:eb:1c:22:8d:
72:7a:8f:38:20:65:ad:73:29:8f:74:c9:66:8b:e3:
6e:4a:80:ea:3e:d1:12:90:1f:9b:cd:13:f6:bd:85:
b8:ac:c8:97:96:7f:61:58:df:e2:6c:75:c7:d7:ed:
83:e4:f6:2b:1c:a6:4d:35:9d:c4:d0:bf:43:3f:98:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:3E:14:73:67:48:1C:29:62:0A:90:2B:61:12:35:51:77:EE:60
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/D6k-FHNnSBwpYgqQK2ESNVF37mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.252.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fe:16:d0:6d:2b:58:ac:44:86:b7:07:dd:88:ea:65:e2:8b:
8c:0e:e0:54:6d:20:fc:43:cc:4c:e0:ef:c5:f9:55:d3:75:e1:
89:65:95:4c:c8:a6:dc:15:0c:ac:e8:1c:8e:a7:44:ab:7f:2c:
5a:6a:7b:f6:ac:80:a3:34:88:49:96:79:8b:ed:84:1d:81:93:
c0:37:ae:10:4a:83:9c:fa:84:47:ca:ff:2a:d9:72:1b:df:d4:
1a:6d:a8:ae:3f:bc:bf:4a:81:05:5d:57:c0:eb:11:e1:06:f2:
f1:53:db:a5:bd:dc:35:52:14:42:1b:02:ee:44:2c:96:3c:6e:
58:06:2d:59:1b:c7:8e:60:bb:fb:ff:bd:53:f9:fd:39:b3:3c:
2f:f4:ed:8e:19:9c:32:97:bc:71:94:dc:8a:d0:73:98:16:b8:
fc:74:ac:d4:88:5c:ff:3d:b4:d2:88:bc:0f:49:d8:22:96:54:
0e:14:85:4b:3d:d7:7b:dd:61:c4:af:49:1f:d7:83:6e:fe:cc:
8b:51:1d:76:bf:9e:d3:a1:55:73:f1:c3:df:4a:20:d2:5a:45:
fa:f6:21:9e:d7:e0:a5:08:90:bc:9a:6c:b9:bc:7a:ea:91:e2:
1e:29:04:23:41:88:7e:29:d9:0f:32:3c:9f:d1:81:b3:63:eb:
89:ae:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:59 2025 by rpki-client