Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/LHfFiomlxe9Np2Hrhd1bn5MuLSs.roa
File: LHfFiomlxe9Np2Hrhd1bn5MuLSs.roa (raw, json)
Hash identifier: 9i9vA4XJChTfyO/OPX3g27KJNzfx98AGHuM7EHfMsks=
Subject key identifier: 2C:77:C5:8A:89:A5:C5:EF:4D:A7:61:EB:85:DD:5B:9F:93:2E:2D:2B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 01887696F23957D1636EAB7C253212892530
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/LHfFiomlxe9Np2Hrhd1bn5MuLSs.roa
Signing time: Thu 01 Jun 2023 10:53:03 +0000
ROA not before: Thu 01 Jun 2023 10:53:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208549
IP address blocks: 80.64.221.0/24 maxlen: 24
80.64.220.0/24 maxlen: 24
80.64.222.0/23 maxlen: 23
80.64.223.0/24 maxlen: 24
80.64.222.0/24 maxlen: 24
2a0d:1cc0::/29 maxlen: 29
2a0d:1cc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:96:f2:39:57:d1:63:6e:ab:7c:25:32:12:89:25:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Jun 1 10:53:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c77c58a89a5c5ef4da761eb85dd5b9f932e2d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:0c:d4:c8:86:ba:8c:fa:9a:38:9c:9c:8a:
3e:5f:59:21:2c:92:47:30:ad:2a:ad:2c:09:50:36:
19:3f:4f:75:d9:38:ff:29:52:26:29:bd:2d:de:58:
4d:89:9d:63:23:a7:d6:53:e5:fb:08:9f:00:27:05:
f8:33:95:c6:c0:eb:b9:84:28:e5:14:50:e2:1e:50:
18:ee:69:9f:f0:22:f5:94:6d:30:d6:91:60:f1:b6:
dc:a1:e8:8d:29:c8:24:38:57:14:df:9e:2b:f1:34:
17:88:20:d3:3b:22:20:29:ab:69:4b:79:db:ed:1c:
c3:fe:f9:b9:c8:04:db:35:6e:6f:0c:e4:6c:a9:9a:
9f:82:92:db:69:a8:c2:cd:ae:2d:bc:84:86:74:d8:
e8:d3:22:1b:5c:08:40:7e:fc:05:96:7b:ae:d3:63:
2f:2d:69:c0:28:3a:43:06:5e:cf:df:c0:79:4d:46:
0f:a9:95:c1:46:3a:8e:fa:55:11:cf:17:ba:76:30:
d2:cf:f8:41:7c:dd:46:00:63:98:0a:1b:c6:b8:ff:
c8:c3:b8:aa:7b:84:6d:62:7c:0b:9f:90:35:ff:d5:
15:e3:43:a6:89:85:a9:ff:a3:79:17:02:40:fc:23:
ce:04:48:bb:19:ed:56:e4:4a:ec:05:43:7d:2a:3d:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:77:C5:8A:89:A5:C5:EF:4D:A7:61:EB:85:DD:5B:9F:93:2E:2D:2B
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/LHfFiomlxe9Np2Hrhd1bn5MuLSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.220.0/22
IPv6:
2a0d:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
91:a2:41:44:b1:e6:d2:c0:57:7a:7c:9a:40:14:b8:0e:79:31:
98:c0:f5:84:57:7b:a5:3e:b0:03:aa:10:59:a2:6d:52:0c:68:
78:ec:da:a5:00:a7:2b:d2:01:9b:35:be:34:70:d9:fc:8e:e9:
73:37:9a:64:52:1e:a7:a0:1d:3d:ed:cb:31:6d:f6:1b:db:cd:
e9:9e:c0:51:08:8d:81:d9:8e:48:25:cb:fd:b6:12:60:e8:81:
6d:1f:70:2a:05:c9:52:21:a3:4a:e2:d5:56:a3:1d:b1:48:4a:
7b:41:86:74:bf:a0:60:c0:47:53:bd:48:35:65:ab:ce:dd:a2:
52:49:ab:55:8e:16:2d:a5:cd:23:7d:57:4a:89:ff:22:7a:c9:
5b:1d:fa:e4:6e:c3:2c:30:91:10:bc:5a:19:fd:c4:64:9e:de:
99:30:64:60:b0:e4:22:d8:49:83:9a:4c:8a:97:4d:6a:10:47:
4b:1a:dd:b7:01:4b:4c:bb:63:b0:14:b9:19:30:00:cd:7b:0f:
b1:9c:d1:fa:c9:ae:8a:f5:6d:fd:e8:f2:c6:bf:b3:33:f3:c9:
83:b3:fb:67:4c:59:0b:e5:8b:08:27:79:0b:78:02:29:b6:92:
ca:f6:99:e9:c1:9a:e6:49:c8:2f:64:0d:15:fa:8b:4e:3e:4e:
51:92:68:56
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYh2lvI5V9Fjbqt8JTISiSUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm
NTU3OGIwHhcNMjMwNjAxMTA1MzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzc3YzU4YTg5YTVjNWVmNGRhNzYxZWI4NWRkNWI5ZjkzMmUyZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8MM1MiGuoz6mjicnIo+X1khLJJH
MK0qrSwJUDYZP0912Tj/KVImKb0t3lhNiZ1jI6fWU+X7CJ8AJwX4M5XGwOu5hCjl
FFDiHlAY7mmf8CL1lG0w1pFg8bbcoeiNKcgkOFcU354r8TQXiCDTOyIgKatpS3nb
7RzD/vm5yATbNW5vDORsqZqfgpLbaajCza4tvISGdNjo0yIbXAhAfvwFlnuu02Mv
LWnAKDpDBl7P38B5TUYPqZXBRjqO+lURzxe6djDSz/hBfN1GAGOYChvGuP/Iw7iq
e4RtYnwLn5A1/9UV40OmiYWp/6N5FwJA/CPOBEi7Ge1W5ErsBUN9Kj2Y0wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCx3xYqJpcXvTadh64XdW5+TLi0rMB8GA1UdIwQY
MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt
YTc2M2RmM2FlZTZkLzEvTEhmRmlvbWx4ZTlOcDJIcmhkMWJuNU11TFNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk
LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCUEDcMA0E
AgACMAcDBQMqDRzAMA0GCSqGSIb3DQEBCwUAA4IBAQCRokFEsebSwFd6fJpAFLgO
eTGYwPWEV3ulPrADqhBZom1SDGh47NqlAKcr0gGbNb40cNn8julzN5pkUh6noB09
7csxbfYb283pnsBRCI2B2Y5IJcv9thJg6IFtH3AqBclSIaNK4tVWox2xSEp7QYZ0
v6BgwEdTvUg1ZavO3aJSSatVjhYtpc0jfVdKif8ieslbHfrkbsMsMJEQvFoZ/cRk
nt6ZMGRgsOQi2EmDmkyKl01qEEdLGt23AUtMu2OwFLkZMADNew+xnNH6ya6K9W39
6PLGv7Mz88mDs/tnTFkL5YsIJ3kLeAIptpLK9pnpwZrmScgvZA0V+otOPk5RkmhW
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:35 2025 by rpki-client