Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EY-0xfs9xFI3O3ZSBNHZi2VINVw.roa
File: EY-0xfs9xFI3O3ZSBNHZi2VINVw.roa (raw, json)
Hash identifier: ry2YREz8H83kBiTEvk6Yocwja4nzS3MGrtX0kC8RiEY=
Subject key identifier: 11:8F:B4:C5:FB:3D:C4:52:37:3B:76:52:04:D1:D9:8B:65:48:35:5C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184148931D04D3BC5A126458670602CECEC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EY-0xfs9xFI3O3ZSBNHZi2VINVw.roa
Signing time: Wed 26 Oct 2022 13:44:06 +0000
ROA not before: Wed 26 Oct 2022 13:44:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8441
IP address blocks: 80.253.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:89:31:d0:4d:3b:c5:a1:26:45:86:70:60:2c:ec:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 13:44:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=118fb4c5fb3dc452373b765204d1d98b6548355c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:3f:08:a3:de:27:65:97:5f:da:2d:38:fb:
51:dc:e0:3f:94:73:9d:8d:b8:aa:81:a7:30:16:e5:
c0:44:13:15:40:2d:cc:b2:55:dd:f6:f4:7a:2d:cc:
27:05:ac:13:14:aa:8b:77:98:b5:b5:17:af:af:ed:
bc:75:89:5e:99:28:ad:06:a5:72:70:c9:26:68:09:
84:6f:81:4d:e0:8e:92:46:3d:bb:91:b2:b8:2f:9f:
35:28:02:4a:b8:bb:5e:f0:a5:13:d3:b9:45:73:dd:
68:36:e8:dd:a4:db:7f:10:44:b6:b1:80:40:90:29:
9c:a3:de:fe:2c:62:41:f3:a6:89:ea:17:62:23:fc:
16:96:b5:ab:f3:c6:94:f3:72:6b:b1:e8:1d:2c:d0:
70:8d:54:96:5e:1f:0a:14:c4:4b:27:5f:3d:6d:53:
2b:96:20:5e:c4:10:e4:53:a7:0e:3f:55:d6:53:18:
1a:ae:1a:22:92:53:5d:bf:7c:1d:aa:6d:37:b9:41:
be:73:51:69:40:c2:0d:94:f6:eb:d4:93:a0:74:ec:
b0:72:13:94:4f:88:1a:ae:c8:38:57:02:80:96:07:
6a:cd:e3:2d:44:3d:5c:58:7f:e4:e5:b7:92:e5:cf:
fc:fb:a6:d4:03:b1:1b:57:50:5c:e7:f6:ff:23:ff:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:B4:C5:FB:3D:C4:52:37:3B:76:52:04:D1:D9:8B:65:48:35:5C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EY-0xfs9xFI3O3ZSBNHZi2VINVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.4.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:05:dc:cf:79:0f:22:1c:d6:62:e1:28:5f:32:b2:00:5f:6e:
28:f0:89:15:a1:d4:d3:dc:76:46:72:a5:09:47:91:32:21:ae:
5c:21:a2:2b:76:84:e0:c2:49:79:b8:10:84:c3:16:40:b0:8a:
a2:24:03:36:d6:b2:1b:69:ce:76:24:99:03:34:2b:41:8f:8f:
64:68:59:ef:b1:fe:24:bd:c9:58:48:0a:e6:3f:24:80:00:6c:
56:2a:0f:1d:46:f4:34:19:ad:2e:b5:1d:32:00:9f:6a:7c:7b:
d1:c4:48:ff:23:6e:a0:e8:b2:c9:3e:6a:11:d1:fc:db:b0:33:
94:70:bf:54:cf:69:02:75:d1:d8:19:56:90:3f:53:10:a7:f1:
48:a5:42:92:e0:79:f1:3c:f3:19:2e:a0:8f:2a:28:41:95:bd:
30:a0:28:2a:0d:8a:2d:ee:f4:c1:7c:25:1e:c6:61:13:9a:12:
58:d4:b5:5e:aa:32:c3:d6:4b:f6:ab:87:4b:8f:87:1c:9a:52:
93:d2:fa:5d:bd:17:19:8a:39:7a:0d:a3:64:3c:6f:b1:84:93:
3f:b3:8b:16:2c:27:71:16:a0:66:8a:36:b8:47:9d:d9:fb:83:
de:d9:a8:78:87:ce:d9:03:52:10:c1:24:f1:14:30:60:1b:78:
ff:aa:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:20 2025 by rpki-client