Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/v5Ai8VFAw0WoB0VSSdJoBtEUq3E.roa
File: v5Ai8VFAw0WoB0VSSdJoBtEUq3E.roa (raw, json)
Hash identifier: dY7AYT6sER7g5steEiyRF3VAaIgaE7ESYKP4Tu5AZgA=
Subject key identifier: BF:90:22:F1:51:40:C3:45:A8:07:45:52:49:D2:68:06:D1:14:AB:71
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 01856C65EFAC42968AFE4C9B4CDCD968FFD3
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/v5Ai8VFAw0WoB0VSSdJoBtEUq3E.roa
Signing time: Sun 01 Jan 2023 08:14:57 +0000
ROA not before: Sun 01 Jan 2023 08:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56605
IP address blocks: 80.84.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:ef:ac:42:96:8a:fe:4c:9b:4c:dc:d9:68:ff:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Jan 1 08:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf9022f15140c345a807455249d26806d114ab71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:07:09:5f:08:3b:f2:cb:7a:6b:9d:da:45:bc:
c9:66:19:26:3b:89:db:d9:8e:7e:d4:d8:46:ab:ac:
ae:34:01:a4:8a:ac:9f:59:41:21:3f:ed:02:8e:ec:
e3:05:c8:38:b2:bd:6d:51:a7:9a:a8:91:5a:d8:e1:
97:cd:50:e7:ef:72:78:67:d8:e8:07:ec:6d:20:f7:
1d:d7:e3:9e:7a:79:11:e0:7f:47:44:da:bc:5a:9a:
8e:62:5a:4b:5c:3f:57:79:59:9f:2d:91:dc:a3:77:
05:2c:1b:ab:3b:87:98:e9:03:51:db:90:b3:b8:86:
69:7c:19:24:7a:58:0b:52:bf:29:1c:48:90:af:3a:
e3:b5:c7:6a:38:b7:ef:80:1f:af:54:0b:a6:00:3e:
dd:19:b8:ff:67:06:ac:af:ee:03:b7:da:37:2f:91:
91:b7:f3:4a:2a:72:cb:9f:50:7d:49:2a:7c:fc:65:
cc:eb:56:a1:59:37:e1:21:10:6b:c7:de:c4:87:a1:
df:08:c1:de:72:c5:a5:37:2f:a1:e5:b0:b4:8a:b1:
8a:77:af:38:8a:4d:5a:30:67:be:ee:26:c5:81:43:
55:13:61:54:07:6b:cc:21:f5:64:0e:7f:80:71:f8:
32:9b:44:98:69:df:94:ec:de:b5:b5:19:e2:ed:2b:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:90:22:F1:51:40:C3:45:A8:07:45:52:49:D2:68:06:D1:14:AB:71
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/v5Ai8VFAw0WoB0VSSdJoBtEUq3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:07:b8:2b:a8:ea:6c:57:a1:3c:f3:25:55:17:a9:44:69:65:
60:ed:a1:a4:cc:22:44:ea:59:fc:0d:86:e3:fd:f4:c5:1e:20:
c6:f5:c1:c2:d3:ee:0c:8f:ae:75:34:73:cf:bc:3a:98:3b:06:
15:be:ce:82:82:39:53:f8:43:fc:33:4b:d2:b9:ad:c1:45:15:
29:5f:8b:8d:cb:29:2e:31:99:91:54:99:7e:0d:14:a5:a3:3f:
83:ec:35:54:ff:24:d4:12:d0:c7:5e:fb:de:ce:1e:64:a8:c6:
93:60:51:6c:be:e3:4d:9a:99:7d:3e:07:7d:4c:e8:16:9f:39:
e9:d4:c7:37:33:6e:5b:e5:12:a1:68:ac:66:9b:9b:32:55:b1:
56:a7:6a:51:2f:0c:94:fe:f3:68:52:c8:89:7c:da:d9:c1:78:
2d:b1:ef:16:36:7c:dd:89:b4:8d:60:ef:0f:81:3f:0c:65:cc:
8b:0b:56:bf:f2:bc:86:21:7a:cf:fd:f5:67:7a:d8:6f:e1:2c:
2b:69:d2:a4:2a:0c:e2:61:8d:dd:c2:be:fa:c0:88:26:47:95:
90:4e:ad:7f:2f:ab:fa:71:73:d9:01:3d:31:9e:23:93:cf:b9:
9d:b7:8e:d0:67:ba:05:d1:17:4a:c7:fa:39:9c:73:3f:cb:95:
95:54:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:08 2025 by rpki-client