Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/8s6bC_NJNFHv6onF8y1funGHEWE.roa
File: 8s6bC_NJNFHv6onF8y1funGHEWE.roa (raw, json)
Hash identifier: Bt+NjYjbMyjtzjLokm5VTsEeE6awekzK/LY2bgHCC5U=
Subject key identifier: F2:CE:9B:0B:F3:49:34:51:EF:EA:89:C5:F3:2D:5F:BA:71:87:11:61
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 360AB6D8
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/8s6bC_NJNFHv6onF8y1funGHEWE.roa
Signing time: Fri 11 Feb 2022 09:35:00 +0000
ROA not before: Fri 11 Feb 2022 09:35:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208615
IP address blocks: 80.79.248.80/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906671832 (0x360ab6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Feb 11 09:35:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2ce9b0bf3493451efea89c5f32d5fba71871161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:4d:45:7b:c7:bd:ab:6e:8c:6c:50:4f:29:
ef:3d:9e:91:26:60:f9:5d:e9:83:ca:1a:f5:80:1a:
7d:29:a5:7f:8e:a7:9e:65:d9:c9:fc:5e:91:33:3c:
d8:ac:fa:09:fd:7d:e4:d7:f6:dc:07:8d:0d:15:91:
00:20:31:c2:a4:76:70:7b:e3:0e:96:12:74:3c:45:
51:fd:de:f2:32:72:8f:f6:32:02:92:24:b2:ef:93:
d8:2f:2c:73:bf:8b:46:c2:d5:77:60:ba:82:d6:6e:
61:09:ac:06:87:7f:df:39:09:89:0b:c7:63:ab:ea:
59:06:90:e0:9c:47:64:18:94:84:62:ac:17:56:45:
a5:44:64:7c:91:d5:06:a8:a3:e1:6f:55:f9:da:2b:
c7:37:22:5d:32:f7:c7:64:6f:2b:35:5a:f0:09:63:
fc:ca:a3:71:59:0d:30:50:5e:90:63:0a:0d:32:af:
b0:35:d6:c1:3e:02:92:b0:08:df:4e:6b:c8:ce:b1:
6d:05:4d:1d:22:31:90:df:cf:fd:d7:0f:21:56:cb:
6b:5f:e8:79:5e:c8:93:b4:43:9c:a8:14:9d:85:2d:
60:8a:c2:07:af:02:1f:26:56:4c:07:01:ac:87:e8:
d8:59:e8:14:e6:77:61:fa:f6:c8:8c:a2:1f:64:16:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:9B:0B:F3:49:34:51:EF:EA:89:C5:F3:2D:5F:BA:71:87:11:61
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/8s6bC_NJNFHv6onF8y1funGHEWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.248.80/28
Signature Algorithm: sha256WithRSAEncryption
88:c6:80:ea:a0:f1:16:f8:df:8d:f6:54:ab:52:2f:ec:bf:57:
12:c7:e4:f1:9a:26:9b:0a:08:56:b8:fe:3f:eb:05:24:84:59:
89:9e:9e:d1:8e:40:ee:e1:a6:b6:b7:b3:28:aa:06:7e:76:a6:
ac:8f:5d:d8:41:f9:94:05:24:36:dd:19:87:88:16:26:de:34:
ef:f2:b6:ec:f4:ed:b7:46:ca:3b:1a:08:e9:02:3a:3e:be:57:
bc:b6:01:88:aa:47:f5:15:77:d6:ca:d1:99:ef:c3:09:8d:86:
cc:78:c4:02:65:96:c6:5f:41:c1:84:1d:5e:77:1d:33:89:0c:
ed:41:cc:7a:5c:3f:e7:52:ea:ca:ef:c4:5f:97:a2:5a:a4:e8:
89:d1:dc:ae:8f:ae:7a:41:b1:48:c0:12:4d:3e:59:1b:d7:a1:
d7:4a:e6:3e:cc:50:d0:f7:e7:11:bb:87:de:b0:7a:a3:46:62:
8e:8e:56:f3:d7:5c:d0:7c:b3:c6:7b:ab:03:40:8a:d3:67:9d:
e2:c0:28:8e:08:7c:2b:ee:ca:b2:a5:b0:92:59:0f:84:09:54:
16:b6:44:8f:1f:71:99:63:10:b7:6c:e1:6b:3b:9a:e6:3c:4c:
0f:95:bc:e3:0d:2d:ef:63:60:ca:db:6d:ad:ef:6c:25:28:a2:
f8:38:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:53 2025 by rpki-client