Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/hCycYrBanLBtCpSUb1IOfbwCFhk.roa
File: hCycYrBanLBtCpSUb1IOfbwCFhk.roa (raw, json)
Hash identifier: 9UEOFAii2KHlSlNHLot7fStDYrJNBickKl2Oynm3WY4=
Subject key identifier: 84:2C:9C:62:B0:5A:9C:B0:6D:0A:94:94:6F:52:0E:7D:BC:02:16:19
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018571278E9C159AB71C8B27DCDDDFA55913
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/hCycYrBanLBtCpSUb1IOfbwCFhk.roa
Signing time: Mon 02 Jan 2023 06:24:55 +0000
ROA not before: Mon 02 Jan 2023 06:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202082
IP address blocks: 80.79.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:8e:9c:15:9a:b7:1c:8b:27:dc:dd:df:a5:59:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 06:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=842c9c62b05a9cb06d0a94946f520e7dbc021619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:d9:ff:d6:df:6d:07:49:e9:0f:b8:2d:14:
d9:c3:00:f8:e1:21:a3:9c:c9:52:62:23:62:41:03:
a3:a4:3c:5b:94:e2:b7:dc:ee:cc:3d:df:61:c1:69:
91:81:22:47:87:31:37:44:aa:6a:e6:2b:ad:9e:49:
9c:ea:22:a2:ea:25:92:1e:fc:b6:56:a8:8f:6d:16:
82:b0:cf:db:2c:95:ce:4c:6d:03:c9:b0:ea:1a:ae:
4e:1f:6e:64:2a:29:84:7c:04:3d:4c:ec:1a:4f:d5:
fe:2d:06:46:fd:1e:bd:6b:84:eb:c8:7c:af:fa:95:
70:8d:b5:ad:fa:e3:cf:f2:e3:2e:14:57:23:92:e8:
06:2e:5c:58:0a:6a:60:33:fa:84:25:01:1d:33:ea:
78:14:a9:7a:45:ff:df:5d:16:32:5f:7f:57:81:36:
21:12:06:3c:51:a8:67:f2:99:94:44:23:9f:c4:c3:
23:1c:20:7f:13:25:3f:d4:1c:42:19:d4:25:91:74:
c7:b7:80:df:d1:1a:17:ea:12:0c:8d:37:b1:5a:23:
08:0d:d4:a0:f1:9e:c5:20:8d:ce:70:b3:69:71:97:
73:f6:1f:3b:83:ce:7a:23:5c:9a:63:bf:e3:45:c5:
bc:68:31:9b:d5:46:18:70:9e:bd:17:2f:7c:0e:25:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:9C:62:B0:5A:9C:B0:6D:0A:94:94:6F:52:0E:7D:BC:02:16:19
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/hCycYrBanLBtCpSUb1IOfbwCFhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.249.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6e:3e:10:7f:97:ac:57:c6:cf:7e:1e:82:6e:4e:fd:9d:da:
2b:9e:84:1b:7c:bd:e1:06:8a:c5:04:3e:cc:b8:81:a0:57:8e:
32:f5:80:4d:60:c0:09:72:42:06:f1:38:6a:1a:32:f3:61:02:
e5:f1:60:ee:17:3f:61:e7:fe:c5:2f:76:8a:3e:95:74:06:62:
ac:59:d5:a5:2f:46:61:c1:54:4d:bd:c7:6b:3b:85:1b:82:f8:
41:a9:05:d2:40:43:7b:3b:7b:36:c4:00:a1:93:2a:1c:62:df:
0f:67:66:c6:ba:0f:30:16:71:c5:e0:8b:2c:6b:34:b8:00:5d:
9b:bb:9c:0f:4f:08:b1:8b:d5:66:da:d3:a2:8e:0e:bc:a8:9a:
1d:bd:19:aa:a2:d1:8a:d7:67:f9:dd:c9:32:e9:d3:52:2d:d5:
5d:1a:99:65:c7:85:8c:17:f9:d4:04:bc:d0:ed:2f:6d:aa:a7:
e0:97:db:a9:3e:8f:07:96:d9:61:29:56:0a:5b:69:08:5e:f2:
46:05:b0:2e:ea:bb:46:98:c4:b9:32:b3:05:8f:d9:b1:fa:e3:
19:40:ad:3e:90:d6:2b:ab:ee:57:c6:b8:a4:6a:bf:d8:fc:af:
3b:33:90:6c:9b:8c:14:22:a6:9a:2e:7a:3e:c3:cb:28:66:e8:
5f:a2:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:21 2025 by rpki-client