Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/BecfbqOz_mk-vbo-XbtYijN0dZc.roa
File: BecfbqOz_mk-vbo-XbtYijN0dZc.roa (raw, json)
Hash identifier: vgNTRpXmK3IadudP4ii6jlY+7hfcqcLAoIFM811je/s=
Subject key identifier: 05:E7:1F:6E:A3:B3:FE:69:3E:BD:BA:3E:5D:BB:58:8A:33:74:75:97
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 6F76
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/BecfbqOz_mk-vbo-XbtYijN0dZc.roa
Signing time: Thu 05 May 2022 09:46:12 +0000
ROA not before: Thu 05 May 2022 09:46:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201248
IP address blocks: 185.80.240.0/22 maxlen: 22
2a05:83c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28534 (0x6f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: May 5 09:46:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05e71f6ea3b3fe693ebdba3e5dbb588a33747597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:d1:07:99:86:04:8b:a5:18:f0:47:ff:02:
a3:e9:d6:5a:c8:6e:fc:62:f2:ed:54:44:46:4b:c4:
23:66:53:c6:b6:35:d6:75:63:0a:ca:04:8f:9d:f4:
b4:f9:67:39:69:be:f6:45:d9:6d:b6:5e:3c:3f:67:
aa:f1:4d:56:8c:70:ab:05:b3:88:49:81:77:2b:fc:
d2:a1:36:38:5d:9c:3e:e7:db:41:3a:2d:24:dd:1b:
0f:48:47:4a:a7:0d:5d:72:c1:39:a9:ae:5b:71:31:
16:82:70:7b:ce:db:b3:0a:a5:4e:83:d4:30:c0:dd:
db:36:11:68:cb:55:60:f4:04:a8:e2:12:83:ec:cb:
8c:01:3e:c4:40:e7:cd:89:09:c7:f9:82:06:5a:49:
3d:f5:84:9b:d9:4d:e8:52:8c:08:f7:72:64:ec:3c:
a7:c7:17:b6:ed:26:12:c2:e1:04:12:5e:a6:94:a9:
c0:f6:6c:6c:70:54:62:e5:f0:d0:68:1c:12:c4:32:
ff:f6:e8:24:ab:f3:2f:fd:47:70:68:91:64:a8:b0:
d4:5a:cf:2c:15:76:94:b3:82:94:fb:23:85:f9:f2:
59:60:6a:24:a3:dd:96:8c:02:97:60:8f:06:23:ae:
eb:2a:bb:2c:b2:e9:c1:a7:de:26:73:6a:d6:8a:ab:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E7:1F:6E:A3:B3:FE:69:3E:BD:BA:3E:5D:BB:58:8A:33:74:75:97
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/BecfbqOz_mk-vbo-XbtYijN0dZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.240.0/22
IPv6:
2a05:83c0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:89:11:05:73:90:74:f6:3b:73:46:b8:9b:a0:dd:aa:9d:e2:
92:be:bf:8b:b4:ab:02:c2:54:2f:5c:4a:9d:4a:75:da:07:75:
a5:db:d6:ed:33:c8:8e:29:57:f7:ab:43:b3:e6:6b:79:9e:16:
13:cf:8d:d5:fc:05:f0:37:96:2d:78:5f:5c:47:c8:87:43:d2:
36:9d:d8:fe:8c:4f:e2:1e:33:e6:88:66:53:1c:eb:92:85:d4:
4c:6f:ab:31:96:1e:4c:54:f5:1b:4f:0d:6f:31:b3:9a:89:59:
22:2e:57:1f:86:70:7a:c6:84:96:d9:e9:83:c8:19:83:bd:25:
e3:bb:09:93:9a:02:23:5c:cb:0f:90:11:81:7e:7e:83:07:38:
60:0a:51:b6:a9:c2:18:74:15:ff:16:9d:58:26:0b:f8:92:1d:
d0:b2:57:26:8f:93:4a:46:16:89:75:46:5a:91:16:73:c5:37:
6c:5d:61:fc:05:79:87:01:b1:a0:83:66:be:44:e4:f7:44:d9:
85:51:27:6c:36:9a:3a:d2:f1:0b:8e:32:2b:96:96:33:b5:37:
a9:39:50:21:3d:11:33:23:f0:6c:08:2f:bb:85:1a:57:9b:fe:
7c:07:2f:2e:bf:12:e8:a6:1d:03:2d:05:b2:db:2d:da:f0:23:
cf:e2:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:23 2025 by rpki-client