Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/F5B7cXO7NPa0AQx1riNjnwsl-MU.roa
File: F5B7cXO7NPa0AQx1riNjnwsl-MU.roa (raw, json)
Hash identifier: jdZILQaRbRTL0XGxDIKIHM6gjVNdbAYEnmmFhOrBlUg=
Subject key identifier: 17:90:7B:71:73:BB:34:F6:B4:01:0C:75:AE:23:63:9F:0B:25:F8:C5
Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial: 018571C2FE3E041D56FB92349E11204E8F50
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/F5B7cXO7NPa0AQx1riNjnwsl-MU.roa
Signing time: Mon 02 Jan 2023 09:14:42 +0000
ROA not before: Mon 02 Jan 2023 09:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210993
IP address blocks: 80.85.242.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c2:fe:3e:04:1d:56:fb:92:34:9e:11:20:4e:8f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Validity
Not Before: Jan 2 09:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17907b7173bb34f6b4010c75ae23639f0b25f8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:a5:e3:21:2f:4b:4e:89:d1:18:2d:dd:43:
b1:ea:5a:69:6c:d8:16:19:c1:63:1c:11:08:c1:73:
b6:ae:85:a9:fd:46:7f:ed:cf:86:65:33:59:3f:71:
de:6d:c8:83:23:a4:de:71:ff:3f:69:07:64:94:b9:
9c:be:ce:fb:bb:2c:dc:ab:ad:a2:f8:89:1e:bb:d4:
cf:ae:42:10:36:b5:90:e5:3f:8d:72:c2:f9:0b:9e:
72:3e:12:80:ee:67:22:6b:67:2c:cd:46:1b:a8:45:
66:25:e1:d5:c0:22:fb:cb:f0:76:9f:a8:cd:c9:1b:
59:6b:ec:82:ed:4d:dd:47:3f:3f:eb:f9:cc:23:c4:
d6:fe:63:ae:c5:00:97:c6:3b:39:12:fa:f2:fc:1e:
dc:d7:6b:a5:78:22:62:08:91:27:fb:8f:c9:5f:aa:
2f:7d:ac:2b:32:0a:da:e5:da:f3:9d:68:bd:6b:2d:
73:a6:f0:22:ec:74:b7:47:1d:d1:6f:4a:92:59:4a:
0a:3c:a2:fe:f2:d0:37:8f:69:11:2b:36:09:6a:b7:
95:8a:9d:5f:e8:ab:d7:57:60:cf:bf:eb:be:b1:f2:
2c:87:9e:c8:c3:24:a9:ca:4b:6d:14:84:b2:43:b4:
03:b0:fb:c0:fd:ce:bf:89:f1:87:01:ce:25:8a:ab:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:90:7B:71:73:BB:34:F6:B4:01:0C:75:AE:23:63:9F:0B:25:F8:C5
X509v3 Authority Key Identifier:
keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/F5B7cXO7NPa0AQx1riNjnwsl-MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.242.0/23
Signature Algorithm: sha256WithRSAEncryption
50:76:b2:98:19:19:21:20:19:44:e4:0f:ac:2b:2f:e0:f7:15:
f3:89:ed:ad:ef:fa:2e:91:cc:d2:82:50:b9:bc:39:37:2a:4c:
77:2c:39:58:74:25:8c:7f:bf:19:a1:03:43:fa:67:3e:80:6f:
59:d7:ff:2c:8f:1f:71:15:18:67:47:9c:59:e7:fb:72:b5:37:
8f:29:f3:17:c3:04:46:af:0f:e1:ee:31:77:4a:80:77:bb:78:
3a:73:6d:b3:71:15:a9:1f:91:32:5c:1b:3c:31:df:37:1f:bb:
13:88:b2:8c:62:f9:8d:9f:b0:3f:c4:e7:72:be:66:cb:cc:d0:
44:81:c7:2a:e2:46:94:06:3f:fb:ad:ab:43:43:bc:d8:2d:57:
93:87:f2:e1:fa:8b:c8:93:f5:23:33:77:34:db:b5:23:d1:d6:
75:dc:2f:84:0a:5a:25:34:06:a0:8c:b7:9e:bd:4b:12:4e:bb:
8a:cf:e7:c2:cb:ca:2b:0a:ce:88:80:94:b3:bc:e7:6b:b1:78:
d1:04:07:30:9b:8a:29:ea:09:fd:7b:09:c6:a4:7a:e3:a3:a5:
b1:ca:68:1e:2c:63:6e:3e:96:c4:11:47:87:89:f6:ed:dc:7b:
32:e9:d0:83:e3:1e:cd:f5:35:e2:f2:50:b5:ae:c4:6b:8e:f2:
60:1d:fa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:19 2025 by rpki-client