Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/1-_7alefea_D8CvyttRNBzXGDBpA.roa
File: 1-_7alefea_D8CvyttRNBzXGDBpA.roa (raw, json)
Hash identifier: tZe56V13RTpqCJlJRxhYCkKtAWoaRgYDgjzD19c0lWE=
Subject key identifier: FB:FE:DA:95:E7:DE:6B:F0:FC:0A:FC:AD:B5:13:41:CD:71:83:06:90
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 04CA9FB6
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/1-_7alefea_D8CvyttRNBzXGDBpA.roa
Signing time: Sat 01 Jan 2022 01:59:46 +0000
ROA not before: Sat 01 Jan 2022 01:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43350
IP address blocks: 185.56.80.0/24 maxlen: 24
2a06:e80::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80388022 (0x4ca9fb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 1 01:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbfeda95e7de6bf0fc0afcadb51341cd71830690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:ab:81:63:07:8e:76:d4:f8:c3:27:f7:be:
c5:48:67:82:b6:b2:80:78:ed:f0:08:b2:23:2e:b1:
f7:74:05:f8:57:16:65:d1:6b:e7:f9:03:08:ca:7e:
e0:5e:df:be:f8:d1:1e:ac:bd:c8:63:21:d8:d0:28:
f9:f9:9a:38:3a:c4:cf:43:75:8a:ef:f6:20:94:cd:
c3:12:76:63:49:61:cd:db:52:f8:fb:52:e9:3f:9e:
86:3f:9f:9a:45:5f:14:d8:22:2a:6a:7c:86:65:4e:
c5:6f:4d:95:7b:23:5c:c2:f9:38:4b:8e:27:04:33:
13:c6:bc:36:00:79:f9:f9:c4:39:3c:c6:2b:29:6e:
e9:ac:dd:c6:71:37:b5:09:8b:34:4a:23:61:9f:a8:
6e:1f:df:77:ef:26:14:3d:af:72:9d:78:fb:d8:87:
74:63:96:ee:7b:8c:7c:05:8e:c6:e7:4f:5b:35:45:
0f:4e:71:7e:bd:d9:82:9c:77:51:f8:5f:1e:82:ac:
5b:ae:98:cc:45:be:3b:2f:4a:e8:40:d6:9b:b6:09:
0a:26:ea:d6:83:62:d8:26:92:a5:57:64:45:34:62:
f0:20:a0:ba:03:a0:5f:74:b1:37:82:b7:1f:1d:4c:
53:2b:7b:9d:3a:7f:2e:f2:7e:db:2f:83:72:ca:c0:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FE:DA:95:E7:DE:6B:F0:FC:0A:FC:AD:B5:13:41:CD:71:83:06:90
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/1-_7alefea_D8CvyttRNBzXGDBpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.80.0/24
IPv6:
2a06:e80::/36
Signature Algorithm: sha256WithRSAEncryption
8b:6a:33:61:0f:00:23:7d:c4:73:30:19:c5:30:da:2e:3a:31:
fe:3f:ae:ed:a8:14:e5:f9:c2:e3:bb:ab:d6:a6:08:0a:b9:0b:
2e:c4:96:98:5e:95:b1:7f:d7:f2:58:60:7c:7c:57:d9:79:0b:
17:93:e9:f0:c4:03:57:47:c1:ca:40:a7:22:f4:f8:00:98:2c:
8a:4a:69:b4:40:91:3a:49:10:76:46:83:06:fa:d8:2c:06:19:
39:30:c9:d1:5c:7b:51:39:c4:c1:0a:af:f7:fb:fb:8b:31:0b:
ae:35:b7:89:ce:3b:0f:17:03:00:76:b1:71:a1:1a:0c:82:af:
e2:17:ed:68:fc:09:90:2e:cc:d3:a6:af:ce:49:ee:48:f3:cb:
8c:48:72:c1:ce:49:87:5c:ee:b6:ee:f2:56:c0:44:9e:5f:23:
45:9e:dc:45:5e:2d:9a:02:6f:fa:8a:56:bc:49:7a:cc:64:0d:
48:3c:bc:e1:6e:e8:58:e1:fd:bc:78:35:f7:7d:17:6f:e6:ad:
2a:1d:30:f9:cc:36:69:fc:cc:45:d9:b5:7d:fa:3f:07:67:b6:
d2:d2:03:e3:d1:d1:d3:ce:6b:57:91:95:0a:e2:31:a1:4e:a4:
b9:69:78:44:b2:9f:d9:16:b4:c7:52:e9:2d:77:29:7c:64:cc:
d0:f1:b4:6b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBMqftjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MDZjMDg2NmRjMjUyMDhlNmMwN2Q0YTIxZDdkODA1MGI1MDhkNmEyMB4XDTIyMDEw
MTAxNTk0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmJmZWRhOTVlN2Rl
NmJmMGZjMGFmY2FkYjUxMzQxY2Q3MTgzMDY5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKawq4FjB4521PjDJ/e+xUhngraygHjt8AiyIy6x93QF+FcW
ZdFr5/kDCMp+4F7fvvjRHqy9yGMh2NAo+fmaODrEz0N1iu/2IJTNwxJ2Y0lhzdtS
+PtS6T+ehj+fmkVfFNgiKmp8hmVOxW9NlXsjXML5OEuOJwQzE8a8NgB5+fnEOTzG
Kylu6azdxnE3tQmLNEojYZ+obh/fd+8mFD2vcp14+9iHdGOW7nuMfAWOxudPWzVF
D05xfr3Zgpx3UfhfHoKsW66YzEW+Oy9K6EDWm7YJCibq1oNi2CaSpVdkRTRi8CCg
ugOgX3SxN4K3Hx1MUyt7nTp/LvJ+2y+DcsrA5rkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT7/tqV595r8PwK/K21E0HNcYMGkDAfBgNVHSMEGDAWgBQwbAhm3CUgjmwH
1KIdfYBQtQjWojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01Hd0ladHdsSUk1c0I5U2lIWDJBVUxVSTFxSS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDQvYmFkZWRmLWQwZTktNDVhOS1hZjc1LTEwZWRiNTQxZTZmZi8x
LzEtXzdhbGVmZWFfRDhDdnl0dFJOQnpYR0RCcEEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0
L2JhZGVkZi1kMGU5LTQ1YTktYWY3NS0xMGVkYjU0MWU2ZmYvMS9NR3dJWnR3bElJ
NXNCOVNpSFgyQVVMVUkxcUkuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
LwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBAC5OFAwDgQCAAIwCAMGBCoGDoAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCLajNhDwAjfcRzMBnFMNouOjH+P67tqBTl+cLj
u6vWpggKuQsuxJaYXpWxf9fyWGB8fFfZeQsXk+nwxANXR8HKQKci9PgAmCyKSmm0
QJE6SRB2RoMG+tgsBhk5MMnRXHtROcTBCq/3+/uLMQuuNbeJzjsPFwMAdrFxoRoM
gq/iF+1o/AmQLszTpq/OSe5I88uMSHLBzkmHXO627vJWwESeXyNFntxFXi2aAm/6
ila8SXrMZA1IPLzhbuhY4f28eDX3fRdv5q0qHTD5zDZp/MxF2bV9+j8HZ7bS0gPj
0dHTzmtXkZUK4jGhTqS5aXhEsp/ZFrTHUuktdyl8ZMzQ8bRr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:30 2024 by rpki-client on console-fra.rpki-client.org