Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/9_ancxevuzW5auu_YL7MpZRtrPg.roa
File: 9_ancxevuzW5auu_YL7MpZRtrPg.roa (raw, json)
Hash identifier: mzzYK1eLyq8VYgTyqFN+2PrRH3cnHTfg946xHzIaw4w=
Subject key identifier: F7:F6:A7:73:17:AF:BB:35:B9:6A:EB:BF:60:BE:CC:A5:94:6D:AC:F8
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 01856D6F6D5F239267923A3AA37DDA78419F
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/9_ancxevuzW5auu_YL7MpZRtrPg.roa
Signing time: Sun 01 Jan 2023 13:04:57 +0000
ROA not before: Sun 01 Jan 2023 13:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55222
IP address blocks: 185.80.124.0/22 maxlen: 24
2a05:7c40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:6d:5f:23:92:67:92:3a:3a:a3:7d:da:78:41:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Jan 1 13:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f6a77317afbb35b96aebbf60becca5946dacf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:15:9b:46:75:83:2a:1d:ca:5e:29:5a:ad:
f6:be:20:1c:fa:41:ae:06:18:bc:72:c2:ef:d9:69:
fc:99:19:c9:94:cf:a7:33:75:55:0f:eb:43:77:3e:
bc:32:c1:84:77:ae:c3:7c:35:97:4d:e3:da:ba:87:
de:7b:26:80:37:d1:bc:3b:1e:a3:83:f7:b1:73:64:
6f:63:b8:5c:12:52:2f:61:08:94:6f:e6:29:e6:31:
e5:68:71:d9:2a:02:7c:2e:52:08:9b:a6:28:c8:82:
b1:99:b4:bc:2c:ff:d8:7d:df:5d:88:02:e2:9e:28:
d3:a6:f8:b5:c5:7e:9c:1a:9e:dd:37:8c:9f:57:a9:
41:fd:c1:b2:7c:f4:c3:52:ac:f2:d2:66:90:4c:4a:
df:dd:49:82:6d:d6:f4:3c:a1:bc:7c:b3:79:c0:70:
39:4b:1f:82:f4:87:fe:aa:de:3b:de:48:4f:88:dd:
f6:50:49:79:7a:39:ca:01:40:c2:11:07:eb:36:a7:
57:b4:89:4d:03:06:f7:40:54:9d:e4:43:3e:75:fb:
bb:4b:ef:92:6b:7d:18:de:79:f8:25:50:e8:92:21:
47:64:9f:e2:eb:b2:61:f4:29:0c:0d:e6:d5:c1:fa:
f4:43:42:47:6d:47:55:cd:9b:a8:a0:3d:2e:ff:4e:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F6:A7:73:17:AF:BB:35:B9:6A:EB:BF:60:BE:CC:A5:94:6D:AC:F8
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/9_ancxevuzW5auu_YL7MpZRtrPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.124.0/22
IPv6:
2a05:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
27:8d:90:87:1c:ea:ef:6e:29:e3:7c:23:a4:23:77:24:de:be:
fd:df:10:fd:00:7b:e6:0a:f2:3f:bf:00:19:26:c1:16:a8:c0:
ff:37:a3:d0:26:f3:4d:5f:43:d4:65:01:86:d1:d4:16:54:c4:
4a:3e:26:53:56:b0:84:7a:ae:7d:c1:9b:f9:54:7c:e9:c3:a9:
a9:73:4d:23:6e:cb:6a:c9:5b:a4:f9:c1:53:ca:ca:9e:d1:23:
0e:2f:b9:a2:39:f4:be:70:45:5d:22:e7:57:03:2f:dd:9c:27:
b1:e0:43:bb:ed:43:cf:61:8a:cc:94:79:f4:f8:96:d8:55:d2:
86:ec:33:11:8b:f3:05:34:58:0e:97:5a:0c:db:4e:78:bf:44:
81:3b:fc:84:59:64:f6:db:51:95:b2:82:30:e8:32:5f:28:03:
02:4b:36:33:5a:4b:cf:d0:81:4e:a1:1d:f7:d0:8c:7c:1a:4f:
dc:fd:46:4f:fb:22:82:cf:aa:5d:57:20:fe:b2:91:7b:96:22:
ae:7f:f2:54:78:6c:fc:9b:2b:87:f6:f1:01:f7:f6:8d:a3:fd:
7e:8b:ff:93:1d:24:ed:15:f1:bc:d2:c8:26:ac:db:48:71:11:
ce:0d:75:42:bd:06:3e:55:a5:be:45:3e:35:ff:dc:fe:1c:b1:
c5:24:6d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 08:26:48 2025 by rpki-client