Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/1-MAb6Po-wccnid9Fhcdgo2R_F9w.roa
File: 1-MAb6Po-wccnid9Fhcdgo2R_F9w.roa (raw, json)
Hash identifier: ZiqCuRrULLySSxVHw/vBPR9/ym6WiP1ZVfQ4a1J5++M=
Subject key identifier: F8:C0:1B:E8:FA:3E:C1:C7:27:89:DF:45:85:C7:60:A3:64:7F:17:DC
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 06C27073
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/1-MAb6Po-wccnid9Fhcdgo2R_F9w.roa
Signing time: Sat 01 Jan 2022 14:06:25 +0000
ROA not before: Sat 01 Jan 2022 14:06:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200751
IP address blocks: 80.247.92.0/23 maxlen: 23
80.247.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113406067 (0x6c27073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jan 1 14:06:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8c01be8fa3ec1c72789df4585c760a3647f17dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:be:3b:b7:65:86:b7:6c:85:18:25:7d:bb:
2e:77:05:ff:72:43:ef:58:59:0c:9c:13:d5:39:36:
e5:44:4b:0c:eb:88:2c:61:d6:55:d1:aa:30:5f:5e:
71:da:e7:30:7b:25:02:57:18:44:2e:a8:b6:0c:9c:
91:37:33:be:be:74:60:6f:c9:64:e7:c4:ca:89:ed:
6b:f9:fd:cf:37:ab:7d:b9:6c:19:cc:a4:34:df:76:
49:f1:ae:5c:a0:86:fe:e0:63:cd:8d:f2:b9:6d:c7:
3b:43:8f:63:bb:06:ed:b3:63:a5:b8:6e:ea:a4:82:
eb:1a:f7:82:46:4e:1f:40:05:ce:83:e5:8f:2f:34:
d3:01:8d:d3:af:00:2c:39:ef:ba:dd:2a:0f:e1:5e:
57:e7:20:ef:f3:a7:99:b3:02:ab:b1:2e:d3:4f:7b:
1e:43:58:87:9e:51:58:12:a9:3b:22:86:b1:3e:f8:
3d:ee:db:65:05:f2:07:59:0c:38:0c:ed:42:c0:90:
1a:de:c5:55:cb:09:11:68:41:89:f2:96:d3:33:0a:
61:d1:a7:b1:5e:ff:02:c3:b5:20:77:da:6d:39:86:
72:7c:91:b9:6a:10:48:74:02:a9:44:c4:f1:9f:89:
64:88:64:67:e5:7d:6d:6e:36:d4:01:ff:b2:03:8b:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:1B:E8:FA:3E:C1:C7:27:89:DF:45:85:C7:60:A3:64:7F:17:DC
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/1-MAb6Po-wccnid9Fhcdgo2R_F9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.92.0-80.247.94.255
Signature Algorithm: sha256WithRSAEncryption
16:3d:98:70:ad:b6:f0:e0:ac:ec:46:54:95:9b:b6:7d:9f:1f:
fd:e2:6a:15:84:d0:90:d9:8b:c0:98:de:52:0b:3c:05:e8:64:
92:45:ec:af:b1:ae:0b:48:04:38:4d:d7:2c:01:ae:c3:3e:ab:
ea:30:31:eb:77:39:84:52:f0:7e:da:38:89:33:80:06:b3:97:
78:9e:12:c6:7a:b4:77:78:1d:96:cf:79:03:48:4f:0b:3c:e5:
0c:14:f4:05:79:63:c4:4d:d7:08:02:49:2f:30:8a:d2:4c:82:
88:74:07:85:a8:1d:ce:ee:1e:bd:a2:08:85:c0:90:87:b9:b1:
7d:42:7b:92:f8:71:96:26:8f:53:eb:7b:88:5b:90:4d:f1:d6:
0a:37:9b:29:1e:93:16:e3:97:b3:be:c8:e5:72:3c:d0:a8:17:
93:a0:4f:ee:33:21:f3:5b:9a:02:ca:0c:75:4b:87:e6:04:de:
ac:ff:7b:51:c5:6d:8c:60:1d:8f:a8:0f:23:6d:01:e8:5a:93:
72:76:ef:55:07:60:cd:9c:f7:a0:ee:1c:44:8d:aa:eb:07:c8:
9a:72:71:b2:81:a6:9e:e3:44:ff:ea:7f:aa:53:89:cc:f4:1f:
ea:e6:00:71:77:b1:b2:f3:97:59:48:4a:11:8d:85:2d:a2:a0:
33:78:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:04 2025 by rpki-client