Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/A-zD8cnhUil8MlnpmblEWdFizz8.roa
File: A-zD8cnhUil8MlnpmblEWdFizz8.roa (raw, json)
Hash identifier: 797lzRQKm1ZtesIFukoUbegrU7qrQvA92PsEXNNhT3s=
Subject key identifier: 03:EC:C3:F1:C9:E1:52:29:7C:32:59:E9:99:B9:44:59:D1:62:CF:3F
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01897242C8F8F1C3CFC9D8D0C7666948AA77
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/A-zD8cnhUil8MlnpmblEWdFizz8.roa
Signing time: Thu 20 Jul 2023 07:45:26 +0000
ROA not before: Thu 20 Jul 2023 07:45:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 268624
IP address blocks: 80.94.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:42:c8:f8:f1:c3:cf:c9:d8:d0:c7:66:69:48:aa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jul 20 07:45:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03ecc3f1c9e152297c3259e999b94459d162cf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5c:a7:29:50:0c:6c:74:e7:ac:1e:26:88:ff:
b3:29:53:8a:c8:6d:72:f5:86:8b:7d:49:74:c2:42:
1a:c3:31:cf:e2:5d:9c:e1:6c:2b:50:f3:0e:13:94:
9f:a9:6a:ea:32:fb:9a:50:88:a7:61:57:a8:95:de:
14:4e:17:f7:9f:90:e9:f0:b5:38:db:17:73:2f:b8:
c2:83:f5:b6:68:33:5a:70:44:fb:a2:4f:12:7d:f1:
b9:d5:18:fe:c5:0b:f5:99:71:dc:38:ea:b9:a6:5e:
66:44:99:a3:c5:62:bb:3f:07:d8:61:b2:c9:c5:be:
c6:e9:77:f7:4c:44:1b:14:2b:7a:9c:27:b6:a7:0c:
a9:da:79:cc:d7:e3:72:ff:09:87:f3:4a:2b:19:13:
49:1b:a8:fd:4b:e5:e1:ee:44:7d:fd:97:a7:66:1c:
ef:bd:38:a1:80:f9:41:98:21:cd:04:4f:75:98:0a:
84:1a:58:f1:b9:ff:19:c5:51:c4:46:c7:a7:07:80:
70:fb:84:2b:7d:05:ef:cd:44:d1:40:75:de:f9:cd:
77:ea:de:a3:53:ee:2d:af:61:17:15:3f:21:c5:9c:
20:21:4e:91:f7:33:fd:4c:c6:76:fd:89:ff:6b:0b:
81:cc:f9:c9:40:6e:0a:14:43:f5:a9:e5:f0:f4:3b:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EC:C3:F1:C9:E1:52:29:7C:32:59:E9:99:B9:44:59:D1:62:CF:3F
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/A-zD8cnhUil8MlnpmblEWdFizz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.90.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4d:70:d6:c9:29:df:a9:bf:83:ff:de:53:ac:4b:92:e8:4a:
48:33:e7:95:02:06:d2:61:22:70:ee:23:cc:59:3b:d0:ec:06:
4f:86:f3:73:ed:84:15:02:ea:7b:62:6b:7f:0a:36:69:ef:d1:
6a:db:5e:e8:1a:20:5b:56:fe:af:48:57:cc:81:51:29:e1:32:
ec:06:61:dc:aa:f8:8e:a8:90:e4:bb:49:af:35:c7:e9:8b:32:
76:b0:53:f9:cf:e9:78:56:cc:e4:d0:cd:7e:f2:cc:b3:b6:a4:
90:8c:92:d2:2e:2b:bf:e2:b1:65:f7:72:01:ad:33:5b:76:d0:
b2:a7:2d:a2:4a:20:e1:b1:ad:f1:4a:3a:11:81:de:ef:29:a5:
c2:9d:52:3d:3e:cf:f1:84:d8:58:68:a1:ee:20:e7:a8:c5:7c:
41:70:1d:ce:4e:7a:ea:da:e6:81:1e:3d:bd:e9:9f:a0:27:e8:
3b:66:cf:48:29:75:af:57:b7:83:2e:d7:08:85:ee:7e:e7:07:
64:e6:41:82:23:21:17:d5:70:11:09:62:ee:e9:14:da:3f:68:
73:59:2f:de:48:8f:51:51:ea:f4:00:a9:61:4a:48:82:45:e8:
fb:fc:ee:89:34:38:a6:cf:e0:a2:58:87:7b:12:44:26:df:d6:
f0:69:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:52 2025 by rpki-client