Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/k9nZ6e674m5kEJBNZ3kLqdTi_Xw.roa
File: k9nZ6e674m5kEJBNZ3kLqdTi_Xw.roa (raw, json)
Hash identifier: P3IuCqx2cTXkq0TYBP7nvqXZMKn4sYoEhbJMnmG6ZxI=
Subject key identifier: 93:D9:D9:E9:EE:BB:E2:6E:64:10:90:4D:67:79:0B:A9:D4:E2:FD:7C
Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial: 018B70C27CAECEEFCE39BFCEA390640E1B1A
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/k9nZ6e674m5kEJBNZ3kLqdTi_Xw.roa
Signing time: Fri 27 Oct 2023 10:51:15 +0000
ROA not before: Fri 27 Oct 2023 10:51:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 80.67.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:c2:7c:ae:ce:ef:ce:39:bf:ce:a3:90:64:0e:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Validity
Not Before: Oct 27 10:51:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93d9d9e9eebbe26e6410904d67790ba9d4e2fd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bf:22:df:7c:17:b8:14:f8:d9:6b:60:96:67:
11:47:5c:1e:06:78:96:d0:6d:81:23:17:49:b2:c3:
e3:19:9b:fc:5c:8e:6f:b8:f0:45:7e:44:af:66:d0:
db:5f:64:72:61:e2:11:d6:96:9f:ae:61:cf:e1:c3:
b8:5b:d9:32:a8:59:90:c3:6b:85:82:08:d9:1b:2c:
7a:55:24:98:b6:c3:36:27:24:f0:79:b3:fa:c1:d1:
77:cd:f0:85:8d:40:a3:72:db:5b:fa:9d:3e:97:74:
7b:88:96:0d:22:bd:8f:d6:4b:4b:ee:0b:22:e7:b7:
3c:3e:c4:e5:bc:60:f4:95:57:4d:88:98:3f:b2:68:
9d:6d:ce:b9:6c:40:5f:ba:20:a8:1d:3b:29:b6:3d:
d3:54:ab:53:6e:af:f2:ed:c6:b2:6f:62:c8:bf:7c:
e3:d9:67:f8:34:38:90:57:22:87:a2:11:8f:e4:d0:
20:98:74:23:7f:2a:9b:fc:b1:3e:74:4a:03:fc:b3:
ca:7e:b0:ba:a5:05:d4:dc:18:8e:89:13:49:58:ea:
2b:03:74:6e:17:8c:a4:f8:fd:46:15:25:ea:ec:1a:
c2:f0:b0:89:42:f5:c4:a3:a3:cf:dc:e9:ef:6a:6f:
c9:67:07:60:7b:0f:8b:ee:e8:75:f0:9a:79:dd:ea:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D9:D9:E9:EE:BB:E2:6E:64:10:90:4D:67:79:0B:A9:D4:E2:FD:7C
X509v3 Authority Key Identifier:
keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/k9nZ6e674m5kEJBNZ3kLqdTi_Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:c0:a4:ef:5f:33:e2:6d:9c:85:aa:c1:7a:f5:a7:c8:d3:2f:
7f:4d:29:13:61:7b:26:df:74:0e:4f:8e:20:0c:6d:87:ca:2a:
a4:78:f2:71:34:d5:3c:5c:a0:5c:fa:a1:74:1e:e4:cc:4b:e6:
59:a5:32:ee:4b:85:73:d9:7d:ac:0b:3b:b0:37:34:81:10:f4:
32:4d:66:93:98:2c:e4:8b:18:e7:2b:c3:63:e8:58:a4:8a:df:
1e:4e:97:83:a9:43:f9:5b:5d:3e:89:c8:fa:9a:97:9f:c3:89:
f5:b5:a5:c5:5c:8b:65:c1:be:94:2c:c2:84:07:b0:3f:00:e9:
57:63:24:90:f1:e2:3f:a9:b5:a6:2a:40:51:64:d5:6c:01:20:
4e:c2:00:d5:ac:17:60:60:b9:90:35:4d:ec:19:00:da:9b:84:
16:33:2c:d2:bb:a1:b0:d9:69:dd:37:e2:ad:da:da:52:51:ce:
fe:78:bf:a1:b1:cf:31:14:c5:ad:d1:8d:31:6a:a5:06:d5:7b:
5b:87:d0:16:0c:cc:28:2f:aa:49:63:e0:9e:b0:c4:d7:fa:96:
40:ee:97:30:bf:3a:82:11:0c:08:b2:2e:28:45:69:0f:cf:e6:
92:60:ab:07:8c:67:88:8c:dc:ef:3e:ba:15:4b:2b:15:ac:9d:
bb:a7:b3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:12 2025 by rpki-client