Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/4Le4rot98vtRlwD_Bh8KKUMFIqs.roa
File: 4Le4rot98vtRlwD_Bh8KKUMFIqs.roa (raw, json)
Hash identifier: NfK6B0+WK/aLKCtwbxrxJJR3KROndV01QXuROChAqbM=
Subject key identifier: E0:B7:B8:AE:8B:7D:F2:FB:51:97:00:FF:06:1F:0A:29:43:05:22:AB
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 09389820
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/4Le4rot98vtRlwD_Bh8KKUMFIqs.roa
Signing time: Sat 01 Jan 2022 12:58:52 +0000
ROA not before: Sat 01 Jan 2022 12:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42901
IP address blocks: 80.90.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154703904 (0x9389820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0b7b8ae8b7df2fb519700ff061f0a29430522ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:96:78:d6:40:b0:9b:22:48:78:f0:97:74:
30:9b:36:34:32:58:d8:ed:e8:50:a6:72:61:6c:25:
64:d3:c1:06:37:4e:53:e0:d8:c0:59:f1:f1:f0:91:
15:81:a3:38:0b:56:4e:31:e3:ea:64:91:8b:e1:5f:
fe:8a:eb:02:98:8f:ba:55:13:34:9c:d4:5f:40:04:
c4:31:0b:8c:ea:d2:ac:0d:fd:48:c6:b3:4f:42:1e:
41:cf:6f:22:50:b1:88:4b:e8:34:16:ba:0d:bb:90:
18:10:a4:ed:3a:27:81:02:a1:39:7d:98:b5:24:fb:
dd:73:1c:e1:52:ad:95:21:1b:2d:ed:26:4e:bc:bf:
1e:ac:a2:7d:b8:13:d0:20:f4:42:40:be:ba:8f:8d:
d6:74:e1:be:e5:be:2d:b8:75:4a:4f:7c:0a:f9:2d:
b9:67:d1:99:8a:74:e9:ba:0a:0c:49:3f:6b:a7:c4:
d7:be:2d:13:29:dc:52:d3:42:6c:3a:9c:ca:32:b8:
cd:e4:85:90:4c:a8:af:93:b0:24:e4:63:1d:db:83:
7d:b9:31:c7:2f:e9:fb:44:7b:12:0c:ea:82:2c:29:
b6:d9:ff:5b:79:49:49:65:5b:a3:e5:cd:db:d3:ef:
4a:2e:8e:17:7a:8c:92:b4:d6:90:12:e7:e3:bc:10:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B7:B8:AE:8B:7D:F2:FB:51:97:00:FF:06:1F:0A:29:43:05:22:AB
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/4Le4rot98vtRlwD_Bh8KKUMFIqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.241.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e2:29:2f:e8:cc:80:63:56:f4:cc:04:8a:49:a9:d1:56:f5:
15:c6:f5:16:c4:59:63:d7:ea:fc:46:30:0f:a7:04:6c:70:4d:
d6:e8:06:a3:30:dd:f0:4f:6b:0b:ba:a4:5b:16:ab:9d:62:9e:
40:9f:af:7a:b3:84:fb:66:7c:60:df:83:4b:5c:5a:1e:14:4f:
3c:b1:fe:59:6a:3f:07:ac:27:b3:d0:ec:18:14:25:9e:65:c8:
5a:86:24:61:96:2f:b5:64:f3:94:20:9f:01:04:81:1d:7b:3c:
92:2f:43:18:d7:53:16:7d:e1:62:0c:7e:23:45:ae:3d:7e:80:
39:19:2d:05:99:62:82:6a:7b:b3:38:4c:43:a7:78:e4:c1:b0:
e1:49:0b:00:c6:94:02:80:44:5a:a8:6f:72:ad:cf:ff:4f:8c:
f0:74:20:a9:37:7a:58:dd:20:5c:21:81:fe:5d:d4:2c:88:a3:
d4:19:0a:a7:aa:87:b0:05:9b:ad:39:a8:75:88:b3:8c:3e:07:
99:af:ab:27:fe:f0:69:b5:1b:db:94:cf:c1:f3:47:ee:ea:c8:
dd:97:2e:fb:f8:be:b7:11:34:e0:29:d0:65:15:28:5a:1e:c7:
6e:4f:34:12:d3:26:11:97:9a:01:e1:40:a6:31:80:dd:62:cd:
4c:da:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:01 2025 by rpki-client