Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/cfMzYdPwsHYrlyTAkbYxEC3UAYw.roa
File: cfMzYdPwsHYrlyTAkbYxEC3UAYw.roa (raw, json)
Hash identifier: ebpI0SvabjUtiGh7nQgjRFIdJK/kKUSIt3WM7esCUo4=
Subject key identifier: 71:F3:33:61:D3:F0:B0:76:2B:97:24:C0:91:B6:31:10:2D:D4:01:8C
Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial: 021FA242
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/cfMzYdPwsHYrlyTAkbYxEC3UAYw.roa
Signing time: Sat 01 Jan 2022 16:05:13 +0000
ROA not before: Sat 01 Jan 2022 16:05:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15826
IP address blocks: 80.247.224.0/20 maxlen: 20
185.20.84.0/22 maxlen: 22
2a00:1a60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35627586 (0x21fa242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241ed58e426975e299875897caff9552640d9c09
Validity
Not Before: Jan 1 16:05:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71f33361d3f0b0762b9724c091b631102dd4018c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:09:25:4e:97:df:e3:8e:b9:24:cd:a8:28:
53:21:3d:46:f7:74:0a:ae:d5:8d:46:12:94:a2:20:
18:41:5e:79:b9:40:8a:2e:18:6a:6a:57:2b:20:cd:
c3:f7:43:01:d8:c0:e4:7c:b8:f9:9d:1b:ee:e9:2d:
0c:f8:b5:29:8c:d2:1d:a3:99:68:0a:a6:f0:58:d6:
ce:f8:75:d3:f3:6a:f5:79:61:75:9a:a2:a8:13:20:
eb:e1:12:d3:af:4d:d5:17:cd:a3:fd:7a:80:34:ea:
f8:0b:c4:70:7f:03:2c:c5:9f:b7:d8:e9:0d:40:32:
c1:ee:2e:7f:99:d6:97:12:44:ba:b9:b8:9e:d6:6f:
59:96:5a:6e:93:c2:7e:fd:81:89:95:d5:dc:a0:06:
04:73:5a:36:c2:58:ad:a1:b2:35:3c:73:24:f7:32:
30:c1:60:d4:cd:8a:69:62:a5:c8:d5:34:16:e1:3b:
21:8f:af:84:28:a0:60:0d:9c:30:30:36:36:5c:f1:
26:12:10:d1:08:07:55:06:42:bd:2c:59:ee:85:ba:
81:5d:66:2f:2a:59:f2:8d:df:b6:63:93:6a:a9:cd:
79:cd:5f:45:68:57:ec:34:04:ab:52:db:a8:b8:96:
00:08:60:63:b7:3a:b3:94:54:ed:35:a7:66:86:e0:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F3:33:61:D3:F0:B0:76:2B:97:24:C0:91:B6:31:10:2D:D4:01:8C
X509v3 Authority Key Identifier:
keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/cfMzYdPwsHYrlyTAkbYxEC3UAYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.224.0/20
185.20.84.0/22
IPv6:
2a00:1a60::/32
Signature Algorithm: sha256WithRSAEncryption
68:74:2d:3a:37:e6:40:c6:d7:94:5f:48:5f:81:9e:21:60:a7:
96:ee:9d:57:be:6d:84:63:8e:a0:d2:01:f6:e7:2b:c7:7f:b1:
97:d2:69:45:bc:ac:4c:f9:05:93:2d:b1:fe:64:df:fe:14:b1:
7a:aa:36:4d:ad:05:57:cb:7f:68:a7:91:00:7d:36:78:5e:e8:
93:fc:78:77:a8:c7:d7:58:b7:36:dd:5a:39:d6:a4:d4:16:91:
fe:ea:ec:f7:e1:4d:3f:29:dd:22:92:4b:3f:48:bb:77:79:1d:
c1:db:41:2b:56:10:2b:69:82:aa:04:d1:9d:6a:d9:97:3a:60:
6e:79:a4:ad:2b:23:e9:a5:4a:80:0b:dc:ed:ef:85:11:9d:65:
77:cd:e2:ca:29:26:96:8b:3a:90:8b:20:f3:de:58:48:fb:fb:
ce:39:db:08:dc:da:bc:5d:0f:01:ff:c1:e4:b0:37:23:9d:53:
02:af:e5:3a:37:18:d3:fc:31:86:72:f5:33:d0:4c:2b:77:6d:
79:3e:c6:e8:fa:d8:03:bd:ba:64:f9:da:df:f6:48:49:0c:a8:
b5:f6:6b:d3:72:89:66:c7:31:52:c3:e3:c6:74:1c:6c:29:2d:
66:47:b2:cb:d4:de:e2:f4:37:9b:c2:33:8a:89:86:10:de:67:
63:43:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 14:21:11 2025 by rpki-client