Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/bmiHWxgoq6ibkgE8DOFFdZcl0nQ.roa
File: bmiHWxgoq6ibkgE8DOFFdZcl0nQ.roa (raw, json)
Hash identifier: MpI0Gr8gxfzhR7L8Qm6Ep3CTMN8i8tHQ/qwVPD+BiHs=
Subject key identifier: 6E:68:87:5B:18:28:AB:A8:9B:92:01:3C:0C:E1:45:75:97:25:D2:74
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 018572B3FF3E1EFD9B2895770171F2F79272
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/bmiHWxgoq6ibkgE8DOFFdZcl0nQ.roa
Signing time: Mon 02 Jan 2023 13:37:56 +0000
ROA not before: Mon 02 Jan 2023 13:37:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34785
IP address blocks: 193.186.80.0/22 maxlen: 22
193.186.84.0/23 maxlen: 23
193.228.112.0/21 maxlen: 21
193.228.122.0/24 maxlen: 24
193.228.120.0/23 maxlen: 23
80.80.240.0/20 maxlen: 20
193.186.72.0/21 maxlen: 21
2a01:af80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b3:ff:3e:1e:fd:9b:28:95:77:01:71:f2:f7:92:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Jan 2 13:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e68875b1828aba89b92013c0ce145759725d274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:28:f9:6c:9a:26:13:63:0c:bb:54:e7:0b:91:
9a:ee:8c:20:e0:d0:9f:23:32:96:c5:73:71:2c:28:
eb:c6:6f:15:f3:a5:e2:b8:2c:ec:e8:94:52:e9:b4:
d0:37:04:d1:19:9a:e5:b5:f5:e2:b4:58:95:4b:d8:
94:4b:fd:97:49:0c:16:80:3b:5a:03:0f:95:13:91:
5a:9d:87:b0:aa:95:be:e2:dc:75:29:22:83:68:0f:
b3:72:05:a9:93:8e:10:b5:ce:27:57:66:36:4f:2b:
63:33:64:fb:dc:1b:4c:8b:af:4f:70:b9:80:07:16:
ff:16:a9:25:73:95:1b:0b:38:22:da:c5:86:57:92:
8e:55:ca:d8:39:b6:a1:3e:0d:70:56:5b:81:0c:82:
f7:43:52:e2:19:6a:45:6e:eb:0f:b9:a1:81:28:66:
25:6f:5a:c2:7d:1c:ec:8c:cb:ea:c0:a5:bf:b8:d6:
bf:a4:cf:87:7f:71:4d:27:2b:3e:b5:30:56:13:c5:
ce:bd:f1:cc:5b:7a:cc:57:4a:8e:4e:b9:d5:96:61:
2a:33:77:11:6d:dd:4f:ec:7c:a2:c1:e0:63:80:3c:
63:45:f8:f4:ed:90:d7:94:00:b0:5e:40:83:6a:59:
78:3d:a3:60:a9:7c:b2:c7:22:1c:41:43:69:ba:9f:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:68:87:5B:18:28:AB:A8:9B:92:01:3C:0C:E1:45:75:97:25:D2:74
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/bmiHWxgoq6ibkgE8DOFFdZcl0nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.240.0/20
193.186.72.0-193.186.85.255
193.228.112.0-193.228.122.255
IPv6:
2a01:af80::/32
Signature Algorithm: sha256WithRSAEncryption
7a:15:3c:a4:f5:e1:38:5b:4a:e6:a1:56:bb:c9:9e:97:7b:38:
23:50:2f:2a:29:ed:50:e2:46:ec:0e:74:f8:ac:f0:2a:13:3a:
da:fa:3e:1d:2d:6d:d9:16:a8:3e:06:9a:13:85:d2:ff:aa:09:
36:1b:de:86:3f:0d:f0:e2:4a:e4:fa:54:89:c1:a5:f2:92:a5:
78:49:0f:80:26:a6:4d:10:46:04:4c:32:ce:fc:e4:42:cf:c2:
fb:4c:88:5f:58:b5:4e:46:59:38:fc:69:1f:44:4a:c6:f7:02:
f7:d2:7d:5e:e7:28:9c:87:ac:60:99:59:3f:fd:f1:32:9a:3f:
84:04:f3:c8:46:cd:d9:b4:2d:8b:83:7a:b5:0c:9e:01:b5:8a:
2d:f0:41:5f:22:aa:19:93:5d:28:88:ed:81:98:96:02:c5:c0:
98:6d:8d:92:70:67:e8:6b:67:7b:3e:11:dc:26:aa:fd:d9:74:
09:93:87:1a:14:c9:60:cc:ca:d9:c3:3a:4a:b9:27:24:ec:c3:
83:98:4a:9b:e7:f7:13:5e:95:82:39:c6:a2:fb:de:fd:d8:b4:
17:0e:49:56:93:5a:40:05:96:67:9e:14:5f:b2:1e:ba:8e:7c:
09:24:19:5a:65:8d:d6:af:32:45:5d:70:e4:c8:f6:61:f5:a0:
e3:2b:b5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:34 2025 by rpki-client