Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/1-ZbFYiHKhUQrlWW7VR59jH3Z3A8.roa
File: 1-ZbFYiHKhUQrlWW7VR59jH3Z3A8.roa (raw, json)
Hash identifier: iD/V8+DkGJkUFZZRa/EvQHD1dcL3HtJt03JVxUB51bs=
Subject key identifier: F9:96:C5:62:21:CA:85:44:2B:95:65:BB:55:1E:7D:8C:7D:D9:DC:0F
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018571278D630F8C292591DE1D9AE6BF5A37
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/1-ZbFYiHKhUQrlWW7VR59jH3Z3A8.roa
Signing time: Mon 02 Jan 2023 06:24:55 +0000
ROA not before: Mon 02 Jan 2023 06:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60413
IP address blocks: 80.79.249.7/32 maxlen: 32
80.79.249.6/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:8d:63:0f:8c:29:25:91:de:1d:9a:e6:bf:5a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 06:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f996c56221ca85442b9565bb551e7d8c7dd9dc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:f0:7b:f8:c7:aa:63:0b:9d:0e:ed:3a:35:
f8:f6:16:8a:f3:08:fd:a4:2a:90:06:a0:e9:36:8a:
4b:5a:88:b4:30:5e:24:d7:7b:10:2d:0c:57:72:a2:
67:f4:76:97:ca:e2:81:b8:b4:4d:92:03:70:02:22:
93:d2:d8:6a:57:db:fb:2d:3f:fa:d4:bf:71:09:2e:
fa:31:7a:30:80:c0:ce:dc:09:5f:8f:60:a7:8a:2e:
59:a0:91:9b:02:4d:cd:4f:5f:60:af:62:79:f7:ce:
3e:8a:55:51:00:b1:c7:68:20:9c:be:df:94:3d:ca:
3b:ba:a4:45:17:fd:b6:bb:2f:15:21:73:ed:3a:fd:
75:c7:f9:da:48:01:7f:9b:4c:bd:0c:6e:ab:d0:75:
bb:10:a1:aa:c2:22:08:36:92:cc:55:d1:19:17:05:
57:67:e3:45:07:ca:b5:d2:02:41:01:21:3c:0e:ee:
4a:10:ee:7c:86:b1:0e:ab:f6:10:cd:04:c8:98:24:
45:88:26:34:18:b1:dd:9c:3b:c0:00:a2:d4:90:75:
22:33:50:0c:ce:e5:98:c3:fe:26:dd:41:0a:f6:bf:
05:2c:ab:73:6a:f3:d7:f3:83:f8:6a:43:d8:78:84:
aa:a6:98:14:4d:6e:1c:0b:80:40:30:04:0a:2c:9a:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:C5:62:21:CA:85:44:2B:95:65:BB:55:1E:7D:8C:7D:D9:DC:0F
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/1-ZbFYiHKhUQrlWW7VR59jH3Z3A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.249.6/31
Signature Algorithm: sha256WithRSAEncryption
37:e7:0b:ab:ec:b6:40:40:43:5e:8c:87:66:93:91:33:2d:0c:
20:45:d2:02:d8:88:d6:aa:32:f8:65:fa:11:34:41:31:62:d9:
b9:fb:ff:97:ca:47:52:ca:86:dd:91:77:9f:2f:a2:ab:93:10:
2c:0b:ec:76:47:27:62:98:05:1b:2d:94:af:0f:ed:79:94:1a:
65:19:fd:7f:72:b2:c7:2a:ce:11:c3:b6:1b:d9:58:d8:bd:f6:
26:9d:20:4d:bd:05:ca:28:1b:18:44:96:92:a7:bf:f3:98:b9:
e9:d3:c9:98:6b:22:d3:f1:50:32:2b:a9:b5:f7:87:6a:b7:06:
1e:58:24:88:0f:eb:85:78:50:b2:f0:2f:b0:7d:4f:33:5b:42:
08:c4:f3:d1:c6:f3:62:e7:b7:d2:8d:1a:70:9b:d9:c1:6d:38:
fd:4c:9e:36:de:25:e0:0f:74:4a:a6:0a:93:f1:df:01:b1:b8:
2c:bc:32:d1:62:96:a6:a1:d2:ef:e4:4e:19:65:06:2d:b2:4c:
eb:5c:c8:10:54:8a:2c:03:cc:9e:2b:e3:e9:d6:d7:5c:30:7c:
5d:81:f6:ea:e7:c1:b6:42:55:44:48:52:f8:a8:cd:60:7c:d1:
7b:30:70:78:2b:ec:b9:ea:0b:1e:7c:57:1f:35:3e:08:d5:db:
12:15:8c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:04 2025 by rpki-client