Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/rN55hN9jIBCz4sDzP0ztxMdRpHk.roa
File: rN55hN9jIBCz4sDzP0ztxMdRpHk.roa (raw, json)
Hash identifier: YxhnFCVHIX9ZL2VCFiINwp4S6CV4ODZd00jcIwfq3XA=
Subject key identifier: AC:DE:79:84:DF:63:20:10:B3:E2:C0:F3:3F:4C:ED:C4:C7:51:A4:79
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 0186B86B89B6D9BD19C1E9318ED69AE381A0
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/rN55hN9jIBCz4sDzP0ztxMdRpHk.roa
Signing time: Mon 06 Mar 2023 19:35:00 +0000
ROA not before: Mon 06 Mar 2023 19:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20722
IP address blocks: 85.204.56.0/24 maxlen: 24
85.204.57.0/24 maxlen: 24
85.204.56.0/21 maxlen: 21
85.204.58.0/24 maxlen: 24
85.204.62.0/24 maxlen: 24
85.204.59.0/24 maxlen: 24
85.204.63.0/24 maxlen: 24
85.204.60.0/24 maxlen: 24
85.204.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:6b:89:b6:d9:bd:19:c1:e9:31:8e:d6:9a:e3:81:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: Mar 6 19:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acde7984df632010b3e2c0f33f4cedc4c751a479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:31:82:7f:09:a8:c4:11:a3:36:1a:6e:f0:
be:30:94:c7:0e:b5:8f:63:51:d5:aa:08:15:f0:77:
4e:1f:08:6f:80:b5:2a:30:70:30:82:a6:94:53:d7:
4c:96:96:3a:13:8e:e1:4e:5d:c5:71:ed:19:80:66:
7b:8b:69:41:0e:e3:d8:be:4e:d9:90:38:2c:c2:77:
57:ca:46:16:4d:dc:4a:e8:73:46:c8:20:60:c1:e1:
1d:c9:ac:2c:02:bd:a0:d8:0c:c1:e4:a4:b8:ab:a4:
24:1d:50:83:e7:b2:5f:aa:0d:a0:e3:9d:3e:d6:b8:
28:38:92:d5:d4:e6:da:d2:63:30:fd:f7:6b:e6:e2:
b8:89:78:bb:6f:b7:85:e4:d6:b4:76:e3:f2:08:b2:
d7:ce:83:66:d0:58:10:e2:98:fd:e7:cb:c7:be:da:
7b:99:ad:02:bc:00:00:84:05:a0:e3:0f:8a:71:8b:
06:6e:c4:3e:07:2a:aa:49:a2:d1:09:3f:35:9e:05:
ba:9d:26:61:17:37:ce:21:45:b1:03:a3:24:f7:75:
c2:25:34:0f:e5:0c:e5:3f:c9:c5:92:31:b5:37:f8:
c5:db:84:8c:80:e0:dd:dc:1a:af:5b:3a:50:c5:e9:
f6:6e:98:65:de:dc:b3:b0:b4:3f:9a:28:31:f2:0f:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DE:79:84:DF:63:20:10:B3:E2:C0:F3:3F:4C:ED:C4:C7:51:A4:79
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/rN55hN9jIBCz4sDzP0ztxMdRpHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.56.0/21
Signature Algorithm: sha256WithRSAEncryption
60:96:9d:ff:47:14:72:fe:4d:6e:23:69:a0:93:2c:e7:7c:ac:
ea:5b:62:72:d6:5b:e1:7d:aa:f4:c1:07:4a:5e:4d:ab:db:e3:
0f:24:aa:a1:9b:a1:3b:74:a9:01:30:07:11:a5:1d:dd:cf:31:
cc:92:c7:7c:46:4d:75:6e:93:69:87:27:32:25:1f:14:6f:e1:
3f:a2:a5:ff:aa:ab:5c:8e:f7:24:a4:bb:2c:5a:7f:b3:6c:bd:
89:7b:b9:7f:4f:62:31:b7:e8:2f:3f:1f:cc:65:ee:08:90:90:
33:91:dd:74:d4:ad:fc:ad:21:e1:eb:38:5f:23:7d:3c:bd:9a:
f5:61:2e:1b:74:71:5e:95:c1:5b:68:3f:b4:94:ba:57:cc:2a:
a9:26:22:6d:2f:db:91:40:67:5c:c4:4f:80:b1:e6:08:23:c3:
8c:d8:5a:2c:7a:48:26:78:45:41:d1:51:41:7b:23:6d:bc:a6:
b4:0f:34:bf:dd:7b:f8:16:91:1c:f6:bc:04:9b:c2:22:7b:f2:
23:7f:71:de:9a:7f:4a:ea:de:7f:e8:c8:4d:09:b2:ad:7e:86:
4d:12:d5:35:27:a3:dd:08:15:21:58:79:9d:fa:54:87:e6:cf:
80:62:93:42:93:ca:ef:06:2a:1f:77:f9:9f:c0:43:1f:0c:23:
95:ad:1a:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa4a4m22b0Zwekxjtaa44GgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZWYwNjllN2UzZWQ1YmY3MGY2ODJjZTQwYzU4MTBmZjNl
NWUzNzgwHhcNMjMwMzA2MTkzNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2RlNzk4NGRmNjMyMDEwYjNlMmMwZjMzZjRjZWRjNGM3NTFhNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa4xgn8JqMQRozYabvC+MJTHDrWP
Y1HVqggV8HdOHwhvgLUqMHAwgqaUU9dMlpY6E47hTl3Fce0ZgGZ7i2lBDuPYvk7Z
kDgswndXykYWTdxK6HNGyCBgweEdyawsAr2g2AzB5KS4q6QkHVCD57Jfqg2g450+
1rgoOJLV1Oba0mMw/fdr5uK4iXi7b7eF5Na0duPyCLLXzoNm0FgQ4pj958vHvtp7
ma0CvAAAhAWg4w+KcYsGbsQ+ByqqSaLRCT81ngW6nSZhFzfOIUWxA6Mk93XCJTQP
5QzlP8nFkjG1N/jF24SMgODd3BqvWzpQxen2bphl3tyzsLQ/migx8g8SDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKzeeYTfYyAQs+LA8z9M7cTHUaR5MB8GA1UdIwQY
MBaAFHrvBp5+PtW/cPaCzkDFgQ/z5eN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmIt
OTAwMDM0ZjAwZDllLzEvck41NWhOOWpJQkN6NHNEelAwenR4TWRScEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmItOTAwMDM0ZjAwZDll
LzEvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVcw4MA0G
CSqGSIb3DQEBCwUAA4IBAQBglp3/RxRy/k1uI2mgkyznfKzqW2Jy1lvhfar0wQdK
Xk2r2+MPJKqhm6E7dKkBMAcRpR3dzzHMksd8Rk11bpNphycyJR8Ub+E/oqX/qqtc
jvckpLssWn+zbL2Je7l/T2Ixt+gvPx/MZe4IkJAzkd101K38rSHh6zhfI308vZr1
YS4bdHFelcFbaD+0lLpXzCqpJiJtL9uRQGdcxE+AseYII8OM2FosekgmeEVB0VFB
eyNtvKa0DzS/3Xv4FpEc9rwEm8Iie/Ijf3Hemn9K6t5/6MhNCbKtfoZNEtU1J6Pd
CBUhWHmd+lSH5s+AYpNCk8rvBiofd/mfwEMfDCOVrRpp
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:10:45 2025 by rpki-client