Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/9w5qnJdgMMCA3CIMQ-Ym6nM4U8E.roa
File: 9w5qnJdgMMCA3CIMQ-Ym6nM4U8E.roa (raw, json)
Hash identifier: LPnwJhZFtPv+hicn42gzJSoHHrtC3tF5VuBjVwdLUWQ=
Subject key identifier: F7:0E:6A:9C:97:60:30:C0:80:DC:22:0C:43:E6:26:EA:73:38:53:C1
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 018570F070DB569F73111C45F2AC68368CC0
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/9w5qnJdgMMCA3CIMQ-Ym6nM4U8E.roa
Signing time: Mon 02 Jan 2023 05:24:43 +0000
ROA not before: Mon 02 Jan 2023 05:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31461
IP address blocks: 80.65.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:70:db:56:9f:73:11:1c:45:f2:ac:68:36:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Jan 2 05:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f70e6a9c976030c080dc220c43e626ea733853c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:db:34:a5:d4:2c:bc:9b:a0:9c:69:78:13:
9d:59:89:cc:cc:60:89:8b:e3:23:82:9b:00:4f:d5:
41:9d:d4:de:96:bc:e1:c8:b6:23:00:23:75:ff:1c:
93:ae:a1:96:a6:c6:7a:ba:63:49:ba:f0:a3:aa:83:
60:ab:10:16:9f:ac:b0:29:3a:fc:5b:22:6a:3d:c6:
05:69:e3:36:ea:e0:b4:cd:77:68:2d:4d:37:fd:c9:
10:a0:e3:b5:5e:50:b9:2a:14:b3:7e:7b:51:a9:0c:
fc:14:99:21:70:45:7c:40:48:c1:c0:bc:a4:21:b9:
78:b9:fc:40:1b:bd:e7:60:04:62:16:4b:73:3b:19:
0f:dc:50:d9:1b:5f:0a:a8:73:b6:a9:fc:c5:d0:34:
b6:84:48:71:20:c5:28:97:b0:6c:52:cb:06:68:78:
09:49:6c:c3:41:6c:5a:20:c1:ae:78:1b:47:09:e5:
0c:f3:b3:d7:5d:9b:8e:7c:be:dd:b7:cc:6f:73:12:
1d:1d:96:4e:5b:84:52:f7:87:8e:68:0a:ea:f1:ff:
4a:28:a4:7d:db:a9:a4:ed:00:a8:59:b9:54:00:de:
e3:22:c5:58:0c:b6:f9:71:3d:91:90:eb:c2:ca:70:
47:b5:38:1e:61:34:a0:10:ac:89:18:9e:12:9c:21:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:6A:9C:97:60:30:C0:80:DC:22:0C:43:E6:26:EA:73:38:53:C1
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/9w5qnJdgMMCA3CIMQ-Ym6nM4U8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.176.0/21
Signature Algorithm: sha256WithRSAEncryption
15:24:eb:e1:4d:1a:7d:18:95:8d:9f:bd:0a:26:3d:6d:f3:32:
2d:06:e2:73:b7:95:5c:cb:39:a5:2a:aa:e5:d8:5c:13:6c:06:
04:67:22:08:4f:97:a4:65:fd:4f:e7:4f:87:3c:fa:50:e8:08:
af:14:6f:16:fb:f3:65:6e:4f:c4:50:08:7f:86:c6:e9:09:1a:
7e:3c:18:f5:70:9e:78:9a:70:c4:b1:e4:3c:26:d5:32:cc:2c:
3b:b4:e5:95:da:27:73:03:51:c9:58:6e:d3:3f:1e:a6:0a:bf:
5c:db:24:be:43:06:43:80:b6:f3:34:5e:02:c0:6b:94:5a:08:
79:19:84:19:17:b9:05:15:f8:2b:e7:8c:6a:30:fa:f3:50:2e:
7e:54:f0:98:98:03:3e:d7:e4:9f:04:a3:5e:69:f5:75:48:56:
f5:f3:5d:48:af:07:10:df:11:e9:d2:cf:ea:d8:ca:f1:06:d4:
7f:67:30:54:a9:11:1d:ec:f2:e6:c8:43:f4:ca:a6:ad:6f:fa:
f2:6d:55:7b:24:c3:54:9d:45:b1:f4:cb:70:cc:d8:63:5c:e2:
9b:6e:7c:e2:04:92:eb:ec:09:5e:ba:29:f3:cc:71:fd:33:04:
94:9f:24:18:3d:07:52:49:a8:67:48:0b:ec:52:61:e5:79:01:
fe:36:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:03:02 2025 by rpki-client