Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/BFSotBnTvoww_uSN93TPLJ1Gn30.roa
File: BFSotBnTvoww_uSN93TPLJ1Gn30.roa (raw, json)
Hash identifier: GrTMRYBdUYBxd4UAeX8V9c5drxf0B3a1KUrxBdVBClA=
Subject key identifier: 04:54:A8:B4:19:D3:BE:8C:30:FE:E4:8D:F7:74:CF:2C:9D:46:9F:7D
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 37C2017B
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/BFSotBnTvoww_uSN93TPLJ1Gn30.roa
Signing time: Fri 18 Feb 2022 14:27:46 +0000
ROA not before: Fri 18 Feb 2022 14:27:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57822
IP address blocks: 80.72.209.0/24 maxlen: 24
80.72.208.0/24 maxlen: 24
80.72.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935461243 (0x37c2017b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Feb 18 14:27:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0454a8b419d3be8c30fee48df774cf2c9d469f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:04:b8:77:53:f5:ca:98:2f:03:47:6e:61:
c1:09:c8:c8:f1:aa:c1:f7:05:08:dd:d5:34:13:78:
6f:91:1e:89:5a:78:1b:da:12:99:51:0e:a8:af:9d:
c3:25:8a:aa:5a:17:95:40:c6:d5:1a:7c:60:aa:19:
8a:ac:7a:46:56:04:d1:eb:c9:fd:73:ed:98:71:2b:
5a:fe:14:90:d7:36:7e:b3:c1:61:18:95:7d:35:e9:
be:d1:24:53:2e:2b:b5:0e:3c:ac:0b:0a:d0:83:11:
a8:d3:bf:02:2e:5e:f2:25:c5:1f:66:b2:36:fe:15:
34:df:0d:e5:de:b6:a8:ec:1d:bd:ec:09:ec:f4:e9:
30:0e:a3:ec:12:c3:0a:f9:70:c6:ec:0c:41:df:34:
e7:92:4c:43:83:e1:c1:74:21:92:de:8b:60:2c:3e:
5d:cb:65:c1:a4:71:e8:12:ae:97:e7:a2:28:ab:79:
9a:80:52:10:b3:f2:6b:0b:76:dd:c6:95:0a:d4:b2:
53:23:b1:b3:fb:08:e9:32:ab:ce:14:5b:66:43:a6:
aa:30:06:cc:45:ae:a8:e3:c2:dd:a0:d6:d7:2b:cf:
3e:12:96:a5:1b:f0:2f:64:4b:53:5d:ee:3d:df:55:
08:59:7d:8e:f9:36:94:0f:41:d5:bd:ca:3c:06:68:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:A8:B4:19:D3:BE:8C:30:FE:E4:8D:F7:74:CF:2C:9D:46:9F:7D
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/BFSotBnTvoww_uSN93TPLJ1Gn30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.208.0/23
80.72.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:01:42:a3:5a:08:8c:96:9e:15:bd:52:b0:40:1f:16:3b:6d:
4e:80:93:95:a9:43:e7:58:db:a7:cb:da:37:8a:79:25:81:e9:
83:2b:f9:33:02:5c:cc:e7:b5:cb:fc:4f:77:ad:c0:c4:c4:0a:
f2:69:24:17:32:61:24:46:a6:9f:ea:06:e0:e0:19:fb:bd:99:
82:e3:ba:3b:58:33:d7:3f:d3:74:01:a1:11:18:89:37:cc:3d:
59:a8:61:a5:72:09:81:10:3b:52:d1:22:82:ed:f4:08:ee:45:
97:dc:20:6d:e0:07:9c:15:e3:3f:2d:a1:92:09:14:72:3a:35:
52:8b:16:b9:3b:cf:10:91:1e:c8:f2:79:dc:77:06:f9:98:af:
72:b7:38:6d:05:37:9b:03:56:72:dc:ef:91:32:a2:18:30:c5:
af:00:6e:ba:2a:56:43:18:99:d2:5c:be:7b:f7:09:0a:7a:27:
55:23:f0:ca:eb:9c:83:97:e1:b5:f0:54:54:55:b8:47:f1:5a:
4f:70:91:a5:fa:3e:44:60:32:79:f1:fb:2a:1f:cc:60:2d:7d:
7c:13:b4:62:6f:a6:bb:b4:ed:5e:24:dc:f1:83:57:05:c7:12:
43:15:3b:9f:44:70:3f:eb:5f:bb:98:95:c1:3d:27:8f:62:2e:
65:b2:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:22 2025 by rpki-client