Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/A9I5UKKwW83HasT4CD2KSvzhaVI.roa
File: A9I5UKKwW83HasT4CD2KSvzhaVI.roa (raw, json)
Hash identifier: 5MPh32ssX+obnikTNS0xPv6kre0x/9QygHhXxIBwIMA=
Subject key identifier: 03:D2:39:50:A2:B0:5B:CD:C7:6A:C4:F8:08:3D:8A:4A:FC:E1:69:52
Certificate issuer: /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial: 018570152772D924FC248F668E7BAA869C01
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/A9I5UKKwW83HasT4CD2KSvzhaVI.roa
Signing time: Mon 02 Jan 2023 01:25:12 +0000
ROA not before: Mon 02 Jan 2023 01:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9051
IP address blocks: 80.79.144.0/20 maxlen: 24
80.79.145.0/24 maxlen: 24
185.125.158.0/24 maxlen: 24
185.125.159.0/24 maxlen: 24
185.125.156.0/24 maxlen: 24
185.125.156.0/22 maxlen: 24
185.125.157.0/24 maxlen: 24
80.79.150.0/24 maxlen: 24
80.79.151.0/24 maxlen: 24
80.79.149.0/24 maxlen: 24
80.79.147.0/24 maxlen: 24
80.79.148.0/24 maxlen: 24
80.79.152.0/21 maxlen: 21
80.79.146.0/24 maxlen: 24
80.79.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:27:72:d9:24:fc:24:8f:66:8e:7b:aa:86:9c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Validity
Not Before: Jan 2 01:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03d23950a2b05bcdc76ac4f8083d8a4afce16952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:17:c5:54:9a:7a:bc:ac:eb:ff:a3:5f:21:
96:df:48:df:0f:17:7c:76:b2:94:85:ee:69:22:47:
7b:33:88:77:4c:e1:c5:e5:40:1a:fa:60:5e:fe:11:
3d:f9:e4:db:20:02:26:64:ca:4e:54:c8:70:c5:7d:
44:0a:73:0c:d5:5f:60:77:3c:d8:ff:21:f4:3a:df:
87:9d:8c:fe:a3:f7:f3:35:46:5f:37:19:37:c1:b9:
83:c5:cb:6f:07:01:de:b1:00:44:21:0a:91:db:7c:
07:2f:1d:0c:74:27:78:2a:98:dc:e1:49:78:f1:90:
7b:58:b9:c4:34:a6:e0:1a:ac:24:c6:db:d9:1c:c9:
03:e8:a1:59:7e:e7:e5:81:ee:71:b4:04:7e:9c:5d:
8e:8b:30:e5:bd:5b:20:d1:88:01:af:b5:80:15:f4:
b9:2d:08:7e:5a:a5:25:66:18:fd:30:63:87:a1:47:
fe:b7:d9:7c:9b:7d:84:3e:7d:39:6c:fa:73:76:a7:
6e:83:4e:4d:29:4b:d0:27:8f:08:ed:3d:7a:af:80:
3f:9f:7e:d2:12:64:2b:e7:1e:bc:ba:35:73:ec:15:
b8:36:03:5a:78:76:8f:14:70:7d:40:9b:44:af:db:
cf:6a:36:8b:fe:78:fc:94:3f:ef:0e:8e:48:f7:16:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D2:39:50:A2:B0:5B:CD:C7:6A:C4:F8:08:3D:8A:4A:FC:E1:69:52
X509v3 Authority Key Identifier:
keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/A9I5UKKwW83HasT4CD2KSvzhaVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.144.0/20
185.125.156.0/22
Signature Algorithm: sha256WithRSAEncryption
25:e1:93:24:fa:0e:c6:a4:25:51:70:aa:6b:41:3b:b6:23:b7:
e7:3f:85:03:32:30:f1:5c:cf:2b:42:12:37:7f:03:94:2d:ce:
07:3e:a6:bb:35:17:07:04:cc:7c:c7:2c:26:f4:cf:91:9c:cc:
f0:aa:68:29:0a:c7:d9:83:81:c0:27:8a:d1:87:21:90:f1:e7:
1a:a8:2c:f2:45:87:fa:b3:97:de:92:13:11:7e:05:e0:97:75:
c9:05:3a:7d:97:52:e3:b0:93:7d:18:d6:2f:e4:82:ac:92:96:
28:df:fb:90:53:7c:04:e4:79:e8:b2:0f:b9:51:f7:64:cd:28:
1f:6d:60:ec:19:b1:b0:bb:4d:a4:c9:db:21:35:c3:a8:bf:35:
b1:f2:0b:7a:e0:8a:c0:3a:3a:8f:bb:6c:a1:93:98:32:c2:ba:
39:a6:90:48:00:ef:0c:17:f0:39:83:01:e7:f5:79:16:1c:42:
8b:3e:06:b5:ec:51:54:fc:9f:c3:56:2c:fb:46:f6:00:cc:21:
69:a5:ff:19:86:e2:db:38:05:66:f8:dd:f0:06:d8:87:ee:83:
55:19:46:d6:bb:d5:97:93:cc:67:cc:49:b2:5f:70:db:4a:7d:
8a:53:cf:17:3e:62:c5:26:c3:bb:39:73:04:71:83:9f:96:1d:
8e:ef:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:50:52 2025 by rpki-client