Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/On0vzd4k1jd0hZWS0N83c0GL_Fs.roa
File: On0vzd4k1jd0hZWS0N83c0GL_Fs.roa (raw, json)
Hash identifier: ur6Fm6J6eC5LfeJ3CMpmadlgzSI5fhmU9KQquzfdNxg=
Subject key identifier: 3A:7D:2F:CD:DE:24:D6:37:74:85:95:92:D0:DF:37:73:41:8B:FC:5B
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 01856F26DEBBFA0CFCA7AAA1D7295A9849D0
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/On0vzd4k1jd0hZWS0N83c0GL_Fs.roa
Signing time: Sun 01 Jan 2023 21:04:56 +0000
ROA not before: Sun 01 Jan 2023 21:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9145
IP address blocks: 80.69.112.0/20 maxlen: 20
2a03:1e01::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:de:bb:fa:0c:fc:a7:aa:a1:d7:29:5a:98:49:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Jan 1 21:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a7d2fcdde24d63774859592d0df3773418bfc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e2:97:ff:5d:1e:9f:11:f7:dd:26:12:53:42:
f1:36:3c:12:1d:98:c5:f5:be:a8:0f:3a:37:b8:68:
1c:67:52:e0:5f:fd:d6:bd:56:fe:e3:21:73:fb:71:
d1:69:7d:50:3f:29:db:e3:8b:5d:34:ec:2e:ad:17:
20:f5:b3:e1:d7:5a:35:96:83:61:6c:ba:c5:0e:75:
20:57:ae:f3:eb:61:1f:fb:b6:22:e8:be:74:d7:46:
8f:3d:3c:5d:ee:be:07:ec:92:f3:f4:08:2c:e5:06:
35:32:83:6f:28:ee:a2:25:0f:12:ad:45:36:6b:b5:
21:8b:84:c1:a9:91:41:e7:e0:58:03:11:46:b5:82:
d9:c9:30:55:5a:5f:10:73:e2:83:f7:c4:1f:b7:80:
a9:ba:f5:ee:9b:3f:e5:6e:16:b3:07:14:49:df:e6:
28:0b:03:72:3d:52:5a:75:7e:af:bc:27:ae:7c:6f:
5e:e8:bf:65:4b:51:cf:7a:a1:fb:c8:37:97:2f:66:
c0:4e:89:5c:56:15:a4:37:9e:74:0f:39:68:34:88:
74:ee:46:11:a3:22:a0:fd:02:03:aa:ba:b8:75:06:
bb:27:e8:81:bd:d5:43:36:dd:a7:f6:30:51:ff:a8:
4a:e5:9a:64:e9:58:36:a1:e2:db:7a:57:29:47:d3:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7D:2F:CD:DE:24:D6:37:74:85:95:92:D0:DF:37:73:41:8B:FC:5B
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/On0vzd4k1jd0hZWS0N83c0GL_Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.112.0/20
IPv6:
2a03:1e01::/32
Signature Algorithm: sha256WithRSAEncryption
b1:df:6d:54:65:32:35:37:d4:b7:52:93:a6:29:53:57:f3:5d:
bc:ce:55:83:bd:9f:d9:8c:42:07:0a:d9:c6:89:7f:0d:f1:8b:
b1:e0:99:10:33:3e:cd:d0:e4:73:59:fd:7d:b8:fd:94:3c:0a:
52:08:73:74:81:b6:39:79:e6:a5:d8:a5:ff:a1:5d:3e:0d:c9:
14:f4:e8:3a:32:61:47:2c:02:b3:96:da:dd:28:82:bc:f9:8f:
02:04:06:37:b0:9f:ac:d7:ba:61:7d:f6:54:82:77:f5:7f:cc:
35:ae:23:85:52:67:6c:9d:e4:1a:7f:47:f9:4c:c6:bd:fa:da:
46:3e:ec:73:ca:29:0a:50:9e:68:07:39:13:12:c0:38:b0:84:
cd:0c:30:17:e7:04:e0:35:ca:58:66:46:1a:8a:57:cb:e9:63:
7e:1c:10:0b:f0:44:a6:75:00:c0:5c:54:24:be:77:64:f5:f2:
f4:b1:e7:0e:f9:f9:38:44:b2:aa:da:03:1e:b2:d5:4e:00:b7:
0a:83:ac:21:a4:b3:73:ca:ef:5a:04:76:b9:ff:71:a5:b1:10:
1d:84:a4:07:c0:3f:49:41:88:0f:f8:c8:43:25:1c:a2:ca:75:
3f:1e:0c:46:c2:27:52:ea:e6:f1:6c:23:76:87:a0:ec:9e:da:
dc:03:d2:92
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvJt67+gz8p6qh1ylamEnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjQ5MzQ1N2IyZjAyZTY5Yjg1ZjcxOGRjYzE2YTlhOWVm
MGZjZDEwHhcNMjMwMTAxMjEwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTdkMmZjZGRlMjRkNjM3NzQ4NTk1OTJkMGRmMzc3MzQxOGJmYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+KX/10enxH33SYSU0LxNjwSHZjF
9b6oDzo3uGgcZ1LgX/3WvVb+4yFz+3HRaX1QPynb44tdNOwurRcg9bPh11o1loNh
bLrFDnUgV67z62Ef+7Yi6L5010aPPTxd7r4H7JLz9Ags5QY1MoNvKO6iJQ8SrUU2
a7Uhi4TBqZFB5+BYAxFGtYLZyTBVWl8Qc+KD98Qft4CpuvXumz/lbhazBxRJ3+Yo
CwNyPVJadX6vvCeufG9e6L9lS1HPeqH7yDeXL2bATolcVhWkN550DzloNIh07kYR
oyKg/QIDqrq4dQa7J+iBvdVDNt2n9jBR/6hK5Zpk6Vg2oeLbelcpR9MqzwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDp9L83eJNY3dIWVktDfN3NBi/xbMB8GA1UdIwQY
MBaAFL+0k0V7LwLmm4X3GNzBapqe8PzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMt
MWY2NDA5ODQ4MTUwLzEvT24wdnpkNGsxamQwaFpXUzBOODNjMEdMX0ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMtMWY2NDA5ODQ4MTUw
LzEvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUEVwMA0E
AgACMAcDBQAqAx4BMA0GCSqGSIb3DQEBCwUAA4IBAQCx321UZTI1N9S3UpOmKVNX
8128zlWDvZ/ZjEIHCtnGiX8N8Yux4JkQMz7N0ORzWf19uP2UPApSCHN0gbY5eeal
2KX/oV0+DckU9Og6MmFHLAKzltrdKIK8+Y8CBAY3sJ+s17phffZUgnf1f8w1riOF
UmdsneQaf0f5TMa9+tpGPuxzyikKUJ5oBzkTEsA4sITNDDAX5wTgNcpYZkYailfL
6WN+HBAL8ESmdQDAXFQkvndk9fL0secO+fk4RLKq2gMestVOALcKg6whpLNzyu9a
BHa5/3GlsRAdhKQHwD9JQYgP+MhDJRyiynU/HgxGwidS6ubxbCN2h6DsntrcA9KS
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:51 2025 by rpki-client