Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/q_TTbdh2MXvYuuql-nggi8q6vvY.roa
File: q_TTbdh2MXvYuuql-nggi8q6vvY.roa (raw, json)
Hash identifier: m9Z+KoCRfKnSy9i/AKOKIDDhIeo0M/ORYVpPIgZUJ2s=
Subject key identifier: AB:F4:D3:6D:D8:76:31:7B:D8:BA:EA:A5:FA:78:20:8B:CA:BA:BE:F6
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 15409BD1
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/q_TTbdh2MXvYuuql-nggi8q6vvY.roa
Signing time: Sat 01 Jan 2022 07:52:50 +0000
ROA not before: Sat 01 Jan 2022 07:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201073
IP address blocks: 82.80.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356555729 (0x15409bd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 1 07:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abf4d36dd876317bd8baeaa5fa78208bcababef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:7d:27:fa:46:c8:8c:0f:5c:b9:f0:8c:5f:
71:ee:d0:e5:f0:de:8f:93:1f:93:5e:e9:82:88:d0:
da:38:10:89:b6:53:cd:c1:6d:b1:e2:96:37:04:72:
f0:ca:ee:6d:4d:ae:d7:45:d3:c7:3b:15:d0:bc:0a:
69:a8:2d:08:f4:16:d7:9f:b3:16:5c:13:4d:0c:75:
8d:92:25:a2:8c:a6:ca:53:df:b8:7d:44:4f:c1:4f:
98:18:63:7b:02:19:a8:c3:e2:25:0b:4c:54:ff:fa:
cc:e7:58:be:30:e8:e9:73:fa:ad:b0:81:cb:15:b6:
18:da:68:5a:c8:70:7f:61:2b:0d:ea:0a:0c:91:f6:
d3:4b:34:0f:b0:09:6b:d8:64:f4:4e:7c:76:25:f8:
7e:3f:d3:78:de:0e:b3:44:88:69:ac:a8:66:d6:6b:
24:74:55:13:95:6f:1f:26:6e:1b:8f:e6:e2:a1:f2:
9e:76:06:8c:b6:7f:7f:ab:f5:d3:17:26:4e:ed:fc:
88:de:4e:0d:df:4c:77:cb:e6:65:a2:20:74:f5:80:
d4:c8:4a:5e:68:89:13:6a:bd:1d:21:f6:77:10:31:
7e:47:6c:11:3d:56:f0:55:c6:3e:77:06:14:ef:65:
10:14:7c:a1:b9:3e:72:1d:c5:b0:03:60:9d:16:34:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F4:D3:6D:D8:76:31:7B:D8:BA:EA:A5:FA:78:20:8B:CA:BA:BE:F6
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/q_TTbdh2MXvYuuql-nggi8q6vvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.80.13.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c0:b7:69:5c:e0:f4:ad:5f:71:4f:7d:c8:af:5d:05:d1:7c:
00:48:a9:c7:4b:fc:ef:f2:5e:04:17:2e:98:78:86:80:64:99:
9c:23:5d:27:04:cf:3f:57:e9:8a:a3:40:03:71:7f:01:fc:5a:
1e:3a:0a:3e:46:d8:fc:9a:38:bc:a6:4e:23:56:cd:e1:51:17:
20:6f:18:29:39:27:58:f7:b1:95:50:c4:cf:9f:65:d7:69:66:
6f:8e:1f:52:e0:d9:f4:5b:85:c0:a2:ee:77:b3:c9:0e:ad:63:
98:27:44:04:d2:88:d4:19:c6:53:ef:a4:76:ca:f1:7e:23:ca:
da:cb:6a:33:38:56:59:57:96:13:2f:13:41:87:98:9d:24:97:
ef:9c:8b:e2:47:5a:93:71:75:7a:53:44:ec:36:08:50:7b:89:
63:6b:6c:df:12:77:3e:4e:b7:0b:dc:c1:d1:24:83:0b:f0:68:
cb:6d:28:c8:42:99:83:dc:a7:be:77:33:10:a0:1a:01:bb:a5:
4f:63:31:cb:75:6e:a9:a6:1c:c7:a1:d5:3a:77:38:81:3c:4c:
0a:ae:7d:f0:c1:48:d8:28:f2:1c:3a:ca:54:9b:ae:67:ec:43:
d1:47:e0:f1:14:75:95:b1:15:65:aa:cb:7d:d0:34:d3:c2:3d:
2c:1b:64:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:52 2025 by rpki-client