Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/0mQ2njmBRdoGYPirIOa34f2dTw8.roa
File: 0mQ2njmBRdoGYPirIOa34f2dTw8.roa (raw, json)
Hash identifier: YPsQz9lkl/s7Ott9XlC5BG4NjCMUSdlhM7MuVTVyC0c=
Subject key identifier: D2:64:36:9E:39:81:45:DA:06:60:F8:AB:20:E6:B7:E1:FD:9D:4F:0F
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 0186B87B1A8E4FC1D12EBCADD2A1D2557E00
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/0mQ2njmBRdoGYPirIOa34f2dTw8.roa
Signing time: Mon 06 Mar 2023 19:52:00 +0000
ROA not before: Mon 06 Mar 2023 19:52:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45035
IP address blocks: 85.204.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:7b:1a:8e:4f:c1:d1:2e:bc:ad:d2:a1:d2:55:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: Mar 6 19:52:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d264369e398145da0660f8ab20e6b7e1fd9d4f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:d4:e0:6d:34:72:61:6f:ef:8c:41:c2:1c:
1c:ff:00:4d:f7:8d:06:12:f5:33:29:09:7e:d4:38:
e9:ed:e9:72:01:ec:c0:bd:50:67:f3:1f:24:e6:89:
b3:3b:af:d8:dc:bc:66:7d:90:31:72:04:78:5f:41:
c2:b3:40:f1:c5:d7:f7:b6:c4:1b:24:29:69:27:cc:
d5:45:88:ce:f9:2e:e4:4b:0f:09:e2:1f:ea:5b:bd:
8d:f9:32:64:06:38:c9:88:64:dd:e9:7e:d8:3a:d3:
b6:d2:e0:df:7d:cb:10:ba:79:90:f3:93:5d:48:bf:
0c:20:59:b5:25:bb:23:11:70:3b:7d:c5:2b:75:a6:
5c:17:20:83:92:3d:b9:a0:64:3e:3e:87:4d:c1:15:
68:82:b3:c1:3d:ed:ed:53:4a:05:53:8a:af:a9:c7:
e5:c1:3a:1e:b3:f1:ad:23:d5:9f:9a:93:06:82:ea:
26:11:5c:8b:ee:c1:12:e7:ef:27:92:3a:0f:ef:45:
e9:e6:2c:88:39:c7:9f:7f:5e:6c:a8:1c:ef:78:48:
73:15:67:f5:85:ec:8e:66:99:d4:3b:59:de:26:e7:
2a:9b:09:8a:47:20:31:b8:5c:01:a4:4e:3f:79:88:
bd:09:dd:5f:8a:e7:b3:1b:49:c0:61:7c:70:e6:7b:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:64:36:9E:39:81:45:DA:06:60:F8:AB:20:E6:B7:E1:FD:9D:4F:0F
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/0mQ2njmBRdoGYPirIOa34f2dTw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.45.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0c:f3:50:5b:f2:60:76:47:2c:8f:de:12:0a:3e:26:80:79:
05:98:88:c8:6d:ee:94:e3:ce:95:b5:13:88:e7:d6:48:51:e3:
14:a9:7a:b2:7c:b4:91:93:53:0e:db:8a:9b:12:79:28:20:2c:
52:24:18:bc:f2:42:d4:33:70:b6:f2:5b:75:c7:0a:a6:1a:0e:
03:0c:53:02:52:04:b1:3b:96:44:e6:8b:1d:2e:3f:27:be:93:
8e:9b:c2:3a:92:4f:13:6d:b9:ba:11:1e:4c:94:cf:e4:79:95:
ad:ac:21:69:07:f8:d0:8b:6c:da:f3:ff:53:93:10:cc:dc:ec:
23:56:db:38:8b:64:f2:0d:85:b9:59:8c:3a:e6:77:7a:ae:36:
0d:2b:90:33:38:d1:bd:a2:3a:3c:36:c8:72:e1:32:13:49:b7:
fa:13:b5:44:ef:e0:6e:89:cf:1b:e5:a5:84:20:d8:4e:8c:d6:
b7:f1:82:9b:05:b7:8e:4c:b5:a8:fa:dc:21:fa:cd:c4:d6:82:
9e:fc:65:b1:bf:a4:53:34:50:9f:c9:d4:ef:19:d1:e3:bf:f5:
0f:a7:0c:35:ec:7c:e1:da:e2:8c:a1:7f:e0:1a:4b:54:cf:68:
8b:cb:39:db:97:16:8b:5a:21:3a:28:18:15:e3:ee:cf:64:75:
54:4c:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:08:28 2025 by rpki-client