Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/FCm30yEWM-RvoaznFurzBh_xpxs.roa
File: FCm30yEWM-RvoaznFurzBh_xpxs.roa (raw, json)
Hash identifier: upDsDRXp14F9ETHOoDMQlET6lnkzt/xNgNOh/kTlxIE=
Subject key identifier: 14:29:B7:D3:21:16:33:E4:6F:A1:AC:E7:16:EA:F3:06:1F:F1:A7:1B
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 01851B87C7541D09C292036B1DEEFDC4D013
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/FCm30yEWM-RvoaznFurzBh_xpxs.roa
Signing time: Fri 16 Dec 2022 15:22:41 +0000
ROA not before: Fri 16 Dec 2022 15:22:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3209
IP address blocks: 80.68.144.0/24 maxlen: 24
2a06:780::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:87:c7:54:1d:09:c2:92:03:6b:1d:ee:fd:c4:d0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Dec 16 15:22:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1429b7d3211633e46fa1ace716eaf3061ff1a71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:3a:5e:d2:4f:78:0f:34:f0:06:aa:92:23:
d5:6a:f6:89:3e:c0:f8:30:2a:ec:70:62:3d:0a:2b:
aa:53:9a:4b:75:fc:a3:89:0c:5b:ac:e6:04:b0:2e:
90:8a:11:b5:ca:20:e2:99:0f:3d:72:f5:1a:4d:84:
42:7b:fc:9f:47:8e:71:55:6d:1e:a7:8a:4c:1d:41:
74:72:12:51:83:b1:3b:56:d9:a6:a9:bc:6d:d6:5e:
6a:84:a9:db:ed:f8:60:0c:e6:30:7c:1d:67:7b:c4:
0e:d9:9b:c1:86:15:5a:16:b5:85:ed:ba:03:34:32:
09:a7:9e:aa:43:5e:87:85:83:a3:e8:ea:1a:36:a0:
93:b0:f5:9d:ce:34:59:ab:4b:c3:d8:84:64:53:2a:
71:46:71:66:f3:74:5b:07:1b:20:ab:0a:57:d9:98:
cc:95:b7:bd:f2:31:39:45:e1:d1:19:1b:5b:2f:a8:
52:b0:06:05:fe:fd:64:8e:8d:fc:b8:9c:9f:53:eb:
9d:fe:aa:ae:cd:e4:f4:74:b1:61:b0:13:5e:15:70:
de:a5:0f:55:45:33:f5:3f:f9:28:f9:b1:f4:67:a2:
0b:45:42:52:31:79:27:d6:bf:51:6d:50:7d:a0:c6:
c8:81:38:2d:12:23:53:f2:91:fe:67:05:ad:41:03:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:29:B7:D3:21:16:33:E4:6F:A1:AC:E7:16:EA:F3:06:1F:F1:A7:1B
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/FCm30yEWM-RvoaznFurzBh_xpxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.144.0/24
IPv6:
2a06:780::/29
Signature Algorithm: sha256WithRSAEncryption
20:ed:ce:8b:d0:19:1d:1f:4c:31:8f:33:12:07:76:44:20:b9:
b1:f8:8b:34:be:70:de:b0:e3:47:b5:69:8c:0f:08:66:5b:46:
fd:f0:10:6d:e7:fc:bd:79:d8:16:10:53:32:b7:1a:b3:a1:fa:
b2:a0:49:12:30:f6:9e:b0:3a:92:38:d8:5b:bf:53:28:8e:03:
59:03:39:1e:01:d2:f8:8f:40:7d:78:dc:58:9b:48:0e:52:47:
27:70:7a:cf:d7:cf:35:dc:77:e5:40:84:43:29:6b:07:f9:82:
6a:45:1f:22:d9:a0:27:91:93:4f:4f:f3:82:70:95:09:86:79:
21:5a:1c:c3:31:aa:4c:c6:1e:2e:db:f7:d8:ba:00:f9:bd:df:
b3:9c:fd:4a:8b:ae:e0:29:2f:8e:02:ea:68:90:25:76:35:82:
54:aa:19:a1:aa:b0:a0:97:04:87:84:8d:8a:27:c8:53:a7:cc:
7b:01:f1:f9:65:89:e7:11:a4:19:44:0f:35:9c:f8:2f:20:b6:
c3:4f:b9:9c:32:0e:6d:77:fd:43:0c:65:4f:71:a3:e7:22:07:
74:d1:d2:ed:23:68:d6:b2:d3:32:06:d1:26:ea:c1:0d:82:25:
a4:19:fd:e1:24:96:ab:79:0e:dd:71:72:b6:2d:8e:69:e8:56:
4f:df:e3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:11:59 2025 by rpki-client