Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/v8SMQdq0VUZRog5P7AwFNGqdFfs.roa
File: v8SMQdq0VUZRog5P7AwFNGqdFfs.roa (raw, json)
Hash identifier: XmFt/wzazON4cyOwWO3j1vHlKsPpNs21rAxEtqlp0OA=
Subject key identifier: BF:C4:8C:41:DA:B4:55:46:51:A2:0E:4F:EC:0C:05:34:6A:9D:15:FB
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 0856DEAE
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/v8SMQdq0VUZRog5P7AwFNGqdFfs.roa
Signing time: Sat 01 Jan 2022 13:58:23 +0000
ROA not before: Sat 01 Jan 2022 13:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40065
IP address blocks: 45.80.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139910830 (0x856deae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Jan 1 13:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfc48c41dab4554651a20e4fec0c05346a9d15fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:53:2e:e7:24:7a:51:af:a4:73:7d:10:5d:64:
1a:56:31:cc:54:c6:52:24:d3:44:0f:36:48:94:07:
e8:ac:04:43:b9:8b:a1:8d:d2:1f:79:93:64:65:de:
de:78:40:eb:70:84:4a:66:a7:3d:53:d6:a4:c3:a2:
b1:b8:a5:70:19:0f:3c:58:ad:24:91:2b:4f:25:59:
bb:98:6d:6c:58:b0:1c:ee:7b:9a:29:69:f3:ae:64:
dc:91:1e:29:b9:af:84:0b:f3:4c:31:11:2f:31:8f:
71:2b:99:46:0d:2d:37:42:0a:a6:27:c5:57:ec:4b:
ff:be:cd:d4:e5:77:91:e5:76:6a:74:60:60:cf:09:
0d:e9:02:d8:00:04:e6:35:99:02:50:f5:79:97:0e:
ba:68:3f:af:e2:95:3c:6a:a6:6b:f7:ac:3c:90:1a:
5b:92:6f:6e:f6:15:c2:6f:57:8d:ab:48:15:53:1d:
2b:69:70:cf:40:9f:32:08:04:4e:20:f9:f6:c0:fa:
17:d0:11:55:5f:75:94:27:ad:3a:ce:83:a6:01:2b:
d0:72:f1:fc:13:ad:34:af:62:f5:26:1b:89:b9:5c:
25:5c:a3:f4:a0:54:b7:20:f0:3b:6e:5a:38:9c:6b:
07:47:95:37:4a:1f:06:69:15:c5:db:01:c3:0a:58:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C4:8C:41:DA:B4:55:46:51:A2:0E:4F:EC:0C:05:34:6A:9D:15:FB
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/v8SMQdq0VUZRog5P7AwFNGqdFfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.72.0/22
Signature Algorithm: sha256WithRSAEncryption
11:93:bb:c4:05:b0:bd:07:d6:94:23:6a:d3:2d:d1:65:23:53:
bd:8a:a2:4c:ae:97:f2:c9:ba:90:94:74:7a:ba:ec:44:4e:98:
27:ec:51:13:cf:71:3a:c8:d0:04:26:3e:21:9d:09:85:58:2c:
e9:da:20:58:7a:7a:d0:64:77:0e:4f:30:ca:d2:8c:9b:60:01:
03:4e:9e:98:af:de:69:ed:5f:d4:3f:b9:54:e6:c9:3f:77:55:
fe:90:2b:16:4a:5a:99:02:4c:d7:e4:9f:a7:76:1a:58:e5:b2:
5c:8c:07:3e:7a:39:36:95:e7:1f:20:e1:d6:77:4a:7e:62:55:
72:e5:25:94:10:bd:08:85:27:3b:18:b0:a9:99:5d:a0:20:cb:
50:63:a9:d4:e1:28:f4:4f:79:28:ab:a3:a1:f1:f1:5c:ae:82:
31:e7:a6:a0:50:ee:b6:5b:d9:0f:25:ed:20:9b:34:82:cf:76:
4e:2c:59:cc:bd:4d:92:58:96:59:03:c1:d9:37:74:e1:a6:cd:
5d:a7:11:54:38:94:ae:5d:9e:5f:e4:ce:b4:53:3e:c7:fd:11:
27:51:dd:1e:2e:70:99:76:5a:33:3c:db:5a:a2:a9:ed:08:a7:
8b:ae:84:de:bb:64:35:14:ff:03:80:03:8c:58:aa:c1:25:7f:
7a:18:c0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:44:27 2025 by rpki-client