Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/lInAY4b3uCT0nQufJrvsSlvRPhc.roa
File: lInAY4b3uCT0nQufJrvsSlvRPhc.roa (raw, json)
Hash identifier: /Pzc/ZuNjcTwLExGbRJrRIOpvsYvuKl4nnx2EiIXfi8=
Subject key identifier: 94:89:C0:63:86:F7:B8:24:F4:9D:0B:9F:26:BB:EC:4A:5B:D1:3E:17
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 0881B8B6
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/lInAY4b3uCT0nQufJrvsSlvRPhc.roa
Signing time: Sat 01 Jan 2022 06:55:41 +0000
ROA not before: Sat 01 Jan 2022 06:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 80.172.222.0/24 maxlen: 24
2001:4cc0:8000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142719158 (0x881b8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jan 1 06:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9489c06386f7b824f49d0b9f26bbec4a5bd13e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:8e:c3:4b:2c:5b:75:93:37:60:53:01:39:
42:3e:5f:15:4c:26:d7:89:1b:d6:0f:a9:98:0f:f4:
b8:aa:78:71:6b:04:2d:98:a1:28:69:6d:f5:c6:b1:
7f:1b:15:8a:de:c8:21:1e:50:36:53:38:b0:c3:b7:
9b:19:4d:5f:b4:c8:00:c7:a1:4b:14:6a:6b:5d:04:
7c:54:96:1f:9b:7e:4e:cd:22:c7:8e:b8:52:93:82:
a9:62:de:db:f2:e6:41:95:b0:2e:4e:c3:62:df:32:
d5:df:eb:e6:ab:e0:64:ff:74:68:fd:a6:96:04:2d:
38:05:9a:0a:c4:a2:a4:d7:31:be:e4:e6:a2:62:7f:
c2:bc:e2:0a:99:8b:e7:ed:81:98:33:ab:b0:af:2b:
c9:e9:ca:52:42:a8:0b:a7:d7:82:5d:6d:47:36:7d:
7e:8a:3c:4c:87:74:1f:c1:a6:c0:a6:44:c1:6d:fe:
d4:37:c5:b0:95:13:0c:2a:5e:63:52:fd:bb:d4:a8:
b8:ce:60:07:3e:9f:7d:e1:9b:10:5e:a5:2b:61:41:
0a:7b:e0:ad:e3:98:33:43:1e:12:ed:69:40:ce:77:
e7:e7:fc:b4:ab:90:0a:37:1a:0f:89:90:95:99:47:
cf:ec:dc:42:da:36:9d:81:cb:2b:9f:6a:8e:59:3a:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:89:C0:63:86:F7:B8:24:F4:9D:0B:9F:26:BB:EC:4A:5B:D1:3E:17
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/lInAY4b3uCT0nQufJrvsSlvRPhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.172.222.0/24
IPv6:
2001:4cc0:8000::/48
Signature Algorithm: sha256WithRSAEncryption
72:e5:e4:2b:68:97:b0:55:f1:5d:5e:34:64:57:60:5b:f6:a1:
3e:44:b4:8b:46:34:bd:51:36:4b:43:ad:ce:43:20:5d:8b:d5:
01:a9:18:f4:23:80:3a:8b:df:0f:bc:48:5d:d3:c8:fd:1c:7e:
6e:a5:ed:54:aa:9c:95:e9:01:26:96:b8:93:fe:17:f7:1b:58:
38:c0:05:8e:50:16:1a:e3:93:75:c3:77:dd:23:38:54:7a:b0:
65:a6:90:40:9d:25:9d:ef:a2:9a:89:50:8a:c0:a9:b8:95:ca:
92:94:1a:91:94:3e:03:ff:5d:cf:37:dc:a7:a0:a2:90:cb:c7:
3b:6c:d5:16:a5:26:59:b1:3e:c1:9f:27:d0:09:e6:4d:98:ff:
65:ba:c4:ee:92:e3:a5:13:52:6b:62:0a:76:89:83:5a:d5:84:
50:db:c1:e7:1a:ee:6b:17:26:4d:bc:f2:29:bf:b2:84:42:1c:
5b:70:20:ea:ed:50:92:59:2b:ad:5d:b0:df:3b:ad:83:cf:d8:
52:93:dc:ba:b8:07:15:58:1c:f7:48:72:de:ee:db:78:25:9b:
ad:c2:36:0b:50:1b:7c:cf:64:2b:df:a9:72:9e:89:6c:b2:ae:
b0:73:b0:ff:57:9b:62:2f:93:29:7c:09:37:29:82:c3:f5:2e:
51:c7:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:21 2025 by rpki-client