Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/DpNYuVEthsKLu2uskB6SCZKxr7A.roa
File: DpNYuVEthsKLu2uskB6SCZKxr7A.roa (raw, json)
Hash identifier: 3DPeBw2W9Svi9lxdDq1tN+Z2rn8oHz0+te70b3eRu5I=
Subject key identifier: 0E:93:58:B9:51:2D:86:C2:8B:BB:6B:AC:90:1E:92:09:92:B1:AF:B0
Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial: 01856E01D952F05F8F3D1EBB004260419B6B
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/DpNYuVEthsKLu2uskB6SCZKxr7A.roa
Signing time: Sun 01 Jan 2023 15:44:52 +0000
ROA not before: Sun 01 Jan 2023 15:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60981
IP address blocks: 185.80.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:d9:52:f0:5f:8f:3d:1e:bb:00:42:60:41:9b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Validity
Not Before: Jan 1 15:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e9358b9512d86c28bbb6bac901e920992b1afb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:a9:99:d8:f3:5c:a0:b5:ea:87:52:9d:5f:
e2:a5:8f:25:95:36:cb:85:70:16:1b:81:83:48:04:
b5:bd:1f:f7:30:9b:e4:79:3a:a2:7f:6f:b4:43:81:
10:19:e0:da:96:2e:fc:8d:3c:79:7d:92:e9:b2:8c:
ae:03:40:95:d4:93:65:37:59:2d:9b:6b:1d:73:c6:
cd:31:cb:42:aa:e7:da:65:9d:3d:3a:a9:64:67:64:
b4:27:eb:6d:b4:6b:9a:8f:85:71:7b:45:02:e8:ef:
46:58:e6:f8:59:52:a3:d7:5a:55:b4:c0:95:1a:90:
14:87:9b:03:a9:5b:70:8a:aa:07:f6:31:b7:91:24:
d2:f0:fd:60:c1:57:d0:c6:dd:ed:13:07:d4:6c:1c:
fd:63:9f:75:db:79:9f:f1:27:0d:52:c7:fb:2c:ad:
d0:3a:c1:db:4e:d2:4a:02:e6:1d:6c:ef:e6:ce:db:
86:f1:04:86:fc:53:80:98:09:25:8a:aa:c0:75:9e:
69:3d:45:17:b0:9e:bf:6c:32:b3:31:49:cd:9b:94:
af:d8:3d:af:81:4d:3b:d4:1c:39:9e:4a:30:44:9e:
f4:e0:2d:26:6a:87:9c:55:32:04:a8:4f:4c:e6:20:
e9:bd:9e:a4:46:d8:71:14:b5:4a:37:73:a2:a0:4a:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:93:58:B9:51:2D:86:C2:8B:BB:6B:AC:90:1E:92:09:92:B1:AF:B0
X509v3 Authority Key Identifier:
keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/DpNYuVEthsKLu2uskB6SCZKxr7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.84.0/22
Signature Algorithm: sha256WithRSAEncryption
68:4d:7d:06:b2:21:2e:70:8f:0f:d5:65:6d:15:e9:b0:76:72:
43:4e:86:6f:6e:da:09:7e:e6:d3:69:5d:8d:d5:c3:d5:b4:1b:
ab:4d:f5:4a:18:28:35:29:6d:37:bf:86:ee:12:65:4e:21:c7:
1c:83:64:58:2f:3d:ef:32:2e:ca:f8:c2:67:af:52:69:59:6d:
66:f8:22:e7:a9:d3:22:89:d6:04:c1:a4:e9:ee:37:66:74:54:
c4:27:aa:72:e4:2f:65:d3:6c:1f:84:61:b0:58:0c:83:2d:fb:
5a:61:0d:b2:ec:bf:92:41:e8:70:c1:d4:a1:4b:05:53:88:ee:
a8:38:31:fc:b5:fd:57:4b:c3:ed:a9:19:c9:56:b9:ec:df:d7:
e1:35:49:86:83:83:eb:68:38:4d:5a:97:1e:58:9b:37:24:39:
20:1d:97:73:c4:11:5b:e9:ad:8c:1e:a0:22:50:8a:88:4f:42:
8e:ae:46:b0:60:bf:3c:0a:62:26:19:c9:41:b9:db:17:96:fc:
cf:ef:ea:a7:8c:24:0c:0f:68:4f:d6:3c:22:c4:28:9c:3b:19:
a6:19:9b:f9:b5:ca:b0:5a:a8:9a:91:b7:11:fd:16:a1:c6:6a:
80:0e:09:26:d8:92:3e:f5:3c:c6:a4:55:00:60:04:e6:d9:81:
60:ad:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:27 2025 by rpki-client