Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/CVhrFDdTKlTPocnoCTCciNT7RyY.roa
File: CVhrFDdTKlTPocnoCTCciNT7RyY.roa (raw, json)
Hash identifier: uIPQwmhgrkiOolgq1YfG7/vGdk3Mv6m+q7s4f8hnjvo=
Subject key identifier: 09:58:6B:14:37:53:2A:54:CF:A1:C9:E8:09:30:9C:88:D4:FB:47:26
Certificate issuer: /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial: 07125FBD
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/CVhrFDdTKlTPocnoCTCciNT7RyY.roa
Signing time: Sat 01 Jan 2022 15:03:07 +0000
ROA not before: Sat 01 Jan 2022 15:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204649
IP address blocks: 185.244.12.0/22 maxlen: 22
80.73.208.0/21 maxlen: 21
80.73.216.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118644669 (0x7125fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Validity
Not Before: Jan 1 15:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09586b1437532a54cfa1c9e809309c88d4fb4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:c1:a2:65:da:f7:ab:94:0d:3c:00:0c:da:
b2:c4:fa:e5:99:f2:7d:d0:1f:65:14:39:5c:bc:fb:
0b:d2:e8:45:eb:02:d8:3e:a2:23:90:7f:c5:31:9c:
f7:9c:28:8e:fb:0b:65:a5:9b:b0:29:4f:45:2f:aa:
fb:10:93:15:3a:b9:9a:49:c0:b9:ee:c6:e0:df:90:
6c:f0:0a:3a:98:36:67:92:46:1f:3b:f7:d5:fe:cd:
bc:d5:9b:4b:c5:73:65:ef:f2:9d:79:11:f9:7b:74:
72:c0:51:75:56:47:e1:18:ba:af:75:14:28:56:22:
67:49:1d:91:3b:34:3c:36:da:14:7e:c7:35:fb:a6:
8e:f7:a5:04:32:db:5e:37:8d:d8:9e:63:41:de:53:
4f:2c:27:8b:e7:2f:70:9b:bc:8a:8c:1d:78:18:64:
73:b7:70:11:26:8e:07:ed:6d:57:11:f5:59:11:9c:
16:93:3d:c1:99:a4:80:05:68:63:35:05:c9:b6:68:
12:74:26:38:8a:81:8b:d2:f0:62:a0:f6:39:10:f5:
9f:61:48:4d:c1:36:61:d4:f5:b8:dc:cf:06:ae:46:
4d:42:b8:c7:13:dc:5b:76:57:8b:99:47:29:20:b5:
1f:26:b5:54:0d:b3:03:f2:57:13:fc:00:bb:3f:85:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:6B:14:37:53:2A:54:CF:A1:C9:E8:09:30:9C:88:D4:FB:47:26
X509v3 Authority Key Identifier:
keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/CVhrFDdTKlTPocnoCTCciNT7RyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.208.0-80.73.217.255
185.244.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:cb:36:ce:74:2c:be:36:fa:4f:e5:5b:3c:a0:9b:eb:b6:f5:
d1:d7:5e:66:a5:1f:ca:f7:27:dc:6c:0f:51:05:1a:0e:28:3c:
62:68:38:24:55:61:5f:5a:fa:3a:11:5a:f9:5e:c4:db:32:f0:
91:df:f6:42:6b:b8:5d:b5:87:e4:8d:72:68:71:c0:e1:c8:6c:
c4:91:7b:d6:0f:47:16:79:3f:4c:9c:8d:60:26:f9:dd:c7:c3:
3c:ef:6f:68:c6:c3:ad:c1:1f:7f:f0:0b:08:a1:a5:cf:fe:3d:
0d:2b:fb:01:ca:8a:60:d6:df:3b:06:0c:17:66:ff:b9:22:9a:
5e:c7:12:8e:91:bf:7e:27:a8:6c:0e:c5:20:68:6d:a7:5a:4e:
0d:46:63:4a:39:25:0f:ac:bf:72:5d:31:81:37:b9:e9:54:2a:
20:47:c6:7e:c7:5f:31:91:99:98:f1:4f:85:4e:e9:6f:8f:98:
43:ac:ed:e9:9d:2c:70:56:ec:e1:07:13:a8:98:f7:c6:a7:9c:
83:57:8d:0c:d6:f2:05:c8:18:96:d3:fc:f0:6c:cb:d8:37:f5:
d7:52:9d:78:9f:6c:d6:31:18:cf:5f:8d:b6:4a:1f:67:d8:65:
de:18:3a:e4:16:33:d0:b3:b7:84:90:c1:df:a1:3d:e9:4e:2f:
7c:d9:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:06:54 2025 by rpki-client