Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/yWy65fSgbpFniA1vCTxmJhYO4Kw.roa
File: yWy65fSgbpFniA1vCTxmJhYO4Kw.roa (raw, json)
Hash identifier: hVpEl6NnkEBx3KjJXTV5x+os7aLRG3KhgYBgM7Qz13U=
Subject key identifier: C9:6C:BA:E5:F4:A0:6E:91:67:88:0D:6F:09:3C:66:26:16:0E:E0:AC
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 0184185228C524D80A7E391F326EAAC2BD7D
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/yWy65fSgbpFniA1vCTxmJhYO4Kw.roa
Signing time: Thu 27 Oct 2022 07:22:28 +0000
ROA not before: Thu 27 Oct 2022 07:22:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60413
IP address blocks: 80.79.249.7/32 maxlen: 32
80.79.249.6/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:52:28:c5:24:d8:0a:7e:39:1f:32:6e:aa:c2:bd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Oct 27 07:22:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c96cbae5f4a06e9167880d6f093c6626160ee0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e9:8f:1d:dc:e8:4d:49:75:51:6f:2f:2c:ef:
b1:69:cc:8a:51:57:eb:2b:62:9a:02:60:6f:16:69:
db:77:15:7d:b7:a3:a5:ae:ea:d6:97:84:94:64:f5:
c1:5a:df:5d:9b:00:69:30:00:c8:e2:37:4a:90:a4:
0b:d1:90:a1:13:93:e8:8b:db:db:9f:da:46:a6:65:
29:bb:78:3a:d7:da:3f:45:2f:05:72:44:53:3f:21:
74:92:8b:dc:2f:69:65:9f:53:e4:b1:99:5c:22:fa:
3e:5d:e2:a3:90:8c:c3:67:19:23:44:81:48:e9:e9:
98:98:82:de:c8:ac:54:14:45:c9:7d:d9:34:e6:4a:
4d:9b:29:be:c3:21:56:f3:4e:ae:6f:87:33:19:14:
cd:bf:0d:21:d9:33:3a:f3:af:7c:e8:27:f3:f6:e6:
2c:69:ad:a0:92:14:b2:45:7f:46:1e:b2:70:aa:66:
f9:87:0c:ff:30:1d:df:40:5b:c9:ce:55:1e:8c:02:
fb:88:92:62:17:d4:56:19:ef:d3:2f:4b:c3:60:16:
18:a6:8c:2f:b6:32:6b:d5:1c:f6:4e:c8:0a:44:c4:
92:f1:07:8f:2f:60:eb:af:83:e6:e7:ee:a8:17:67:
ec:42:fe:fc:14:29:68:5b:ec:18:c3:c4:f1:54:26:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:BA:E5:F4:A0:6E:91:67:88:0D:6F:09:3C:66:26:16:0E:E0:AC
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/yWy65fSgbpFniA1vCTxmJhYO4Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.249.6/31
Signature Algorithm: sha256WithRSAEncryption
8c:9f:20:97:04:5c:2a:3a:de:6a:1a:c1:10:d2:54:63:0a:35:
73:8d:f6:d3:c5:d9:b3:59:29:1d:94:77:50:f4:d0:12:79:2c:
91:40:d5:f7:2f:fc:1b:07:5c:ee:36:59:9d:f6:b5:71:9e:cf:
74:33:76:fb:3a:98:16:8a:ce:3d:8d:57:6f:85:74:bd:c2:b8:
44:fa:d5:24:00:84:0d:cd:72:13:ad:5e:48:79:01:5e:56:fb:
da:9d:5a:1b:84:ad:95:26:95:36:db:cd:92:8f:96:ab:58:c6:
fe:9a:94:d7:00:64:a1:d7:b0:ad:fe:b1:d9:3c:94:dd:e4:c6:
ec:ae:b1:43:b3:3a:ae:bd:e4:e8:b1:1a:3d:c0:1a:bc:e4:c5:
82:ac:b9:df:c9:d1:61:1e:69:6a:0e:f0:40:7f:a2:a9:6d:9a:
80:00:33:17:a0:8b:bd:29:fe:75:0e:da:c3:b2:b0:53:d3:67:
95:0e:eb:56:9b:b2:63:6f:59:01:da:79:ea:ab:32:b3:4f:8b:
d2:70:00:de:5c:53:94:14:e0:d3:c1:56:b8:af:99:29:3f:26:
f4:4c:8d:16:93:72:b4:43:00:1e:2c:8d:e9:9b:53:2e:01:d5:
ea:a2:a0:1f:9d:4e:58:b4:c9:fb:4e:b2:40:9d:0c:a6:d2:be:
33:7b:95:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:42 2025 by rpki-client