Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/bSfe67V2ybf7wxLn-CZjXMSIHxs.roa
File: bSfe67V2ybf7wxLn-CZjXMSIHxs.roa (raw, json)
Hash identifier: YVlQqNcg88dPD4FqCnYLlgsIUMDHBEvpW6CYB4hzwhs=
Subject key identifier: 6D:27:DE:EB:B5:76:C9:B7:FB:C3:12:E7:F8:26:63:5C:C4:88:1F:1B
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 05033F3C
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/bSfe67V2ybf7wxLn-CZjXMSIHxs.roa
Signing time: Sat 01 Jan 2022 10:00:36 +0000
ROA not before: Sat 01 Jan 2022 10:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60479
IP address blocks: 185.17.80.0/24 maxlen: 24
185.17.80.0/22 maxlen: 24
185.17.83.0/24 maxlen: 24
185.17.82.0/24 maxlen: 24
185.17.82.0/23 maxlen: 24
185.17.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84098876 (0x5033f3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Jan 1 10:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d27deebb576c9b7fbc312e7f826635cc4881f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:f5:f0:ba:b7:68:ea:53:64:ee:ad:c9:0b:
89:35:d6:92:c7:c1:d0:34:05:79:9f:cb:5d:07:73:
91:2a:01:b5:d5:9d:d2:44:ca:ba:0f:c0:ab:90:01:
1a:78:5b:e6:45:11:0b:9a:a2:22:87:24:d9:36:99:
9a:6d:f9:80:c1:e8:d5:0f:e5:24:43:2b:68:08:b5:
b8:86:52:e2:95:34:3f:9a:9b:f0:bb:25:4d:0b:db:
18:a1:e8:16:5d:12:19:e1:37:ae:b0:e0:1f:41:68:
6c:27:1b:28:23:1d:5f:7a:a3:12:59:80:b5:4d:a3:
4a:74:1b:d5:2b:18:a9:57:1e:37:5f:f4:23:4b:8d:
5a:1d:5f:54:0e:9e:be:b6:5e:09:9b:3c:62:94:9d:
a0:1c:41:7c:86:25:87:02:04:18:21:9c:39:41:48:
c9:36:87:6b:2f:64:c6:c9:87:a6:63:cf:9c:4e:8a:
dd:b5:ec:7f:97:f0:c9:61:85:ae:0c:90:bd:89:2a:
7d:e7:5b:8b:7e:b2:80:74:70:da:79:5b:7e:2b:f7:
37:9e:fa:d9:bc:10:40:d9:ca:ee:74:1b:f6:ed:f6:
61:0c:52:cf:0c:5f:c5:98:fd:3f:00:83:28:c3:9c:
bd:e6:4d:52:62:e6:b8:fc:5a:c2:95:4d:a7:b7:2e:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:27:DE:EB:B5:76:C9:B7:FB:C3:12:E7:F8:26:63:5C:C4:88:1F:1B
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/bSfe67V2ybf7wxLn-CZjXMSIHxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.80.0/22
Signature Algorithm: sha256WithRSAEncryption
be:2d:74:c2:4b:88:53:4f:33:bc:89:d0:1b:06:13:6b:66:42:
90:b2:e5:65:cb:0d:d9:29:54:5e:28:d5:f6:bf:f8:b2:70:96:
ca:fe:95:ae:d6:1c:f7:2f:47:3d:96:5a:8c:0b:77:2e:5d:e5:
e4:6f:5b:4e:37:28:3a:c1:1e:8c:fd:f2:0c:4a:21:96:c6:79:
b4:b6:cb:6e:70:c6:20:47:fb:70:39:60:6e:76:f3:c6:66:c6:
8d:a0:db:52:8e:23:d8:50:f6:a3:76:38:b2:76:fa:6d:58:0d:
cb:41:66:38:a4:ba:5d:4c:04:ee:81:46:96:0f:0d:48:03:93:
64:a9:6a:3e:10:1f:b1:6c:d2:61:69:b9:43:c5:b0:6a:49:79:
46:4a:ef:28:48:f9:45:1c:10:d2:b9:42:4c:e8:9d:7d:3c:39:
bb:fd:ce:85:02:1e:58:ef:05:65:f6:5f:9a:42:0e:fb:47:d5:
b1:c1:bb:e8:35:30:fe:f8:52:9e:f4:e0:39:0e:a5:a2:c0:46:
1f:38:53:e5:92:14:a9:0c:47:8c:f4:21:b8:f8:5f:04:8d:34:
21:3d:21:e2:2b:90:85:40:0c:11:d7:d3:2e:0c:2a:e2:19:d8:
62:88:13:01:2b:e1:1e:73:8c:b2:c3:6a:a9:3f:5b:13:f0:37:
68:73:ee:15
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBQM/PDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OTBkNTBhYjBmNjc4ODdjNWY1ZWQxZTg4N2U3OGRkMmYzNTkyNmZkMB4XDTIyMDEw
MTEwMDAzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmQyN2RlZWJiNTc2
YzliN2ZiYzMxMmU3ZjgyNjYzNWNjNDg4MWYxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIwm9fC6t2jqU2TurckLiTXWksfB0DQFeZ/LXQdzkSoBtdWd
0kTKug/Aq5ABGnhb5kURC5qiIock2TaZmm35gMHo1Q/lJEMraAi1uIZS4pU0P5qb
8LslTQvbGKHoFl0SGeE3rrDgH0FobCcbKCMdX3qjElmAtU2jSnQb1SsYqVceN1/0
I0uNWh1fVA6evrZeCZs8YpSdoBxBfIYlhwIEGCGcOUFIyTaHay9kxsmHpmPPnE6K
3bXsf5fwyWGFrgyQvYkqfedbi36ygHRw2nlbfiv3N5762bwQQNnK7nQb9u32YQxS
zwxfxZj9PwCDKMOcveZNUmLmuPxawpVNp7curpsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRtJ97rtXbJt/vDEuf4JmNcxIgfGzAfBgNVHSMEGDAWgBQJDVCrD2eIfF9e
0eiH543S81km/TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NRMVFxdzluaUh4Zlh0SG9oLWVOMHZOWkp2MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvN2VmY2RjLWY4NmItNDFmZC1hZDkzLWFkMTM3ODI4OWExMy8x
L2JTZmU2N1YyeWJmN3d4TG4tQ1pqWE1TSUh4cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
N2VmY2RjLWY4NmItNDFmZC1hZDkzLWFkMTM3ODI4OWExMy8xL0NRMVFxdzluaUh4
Zlh0SG9oLWVOMHZOWkp2MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkRUDANBgkqhkiG9w0BAQsFAAOC
AQEAvi10wkuIU08zvInQGwYTa2ZCkLLlZcsN2SlUXijV9r/4snCWyv6VrtYc9y9H
PZZajAt3Ll3l5G9bTjcoOsEejP3yDEohlsZ5tLbLbnDGIEf7cDlgbnbzxmbGjaDb
Uo4j2FD2o3Y4snb6bVgNy0FmOKS6XUwE7oFGlg8NSAOTZKlqPhAfsWzSYWm5Q8Ww
akl5RkrvKEj5RRwQ0rlCTOidfTw5u/3OhQIeWO8FZfZfmkIO+0fVscG76DUw/vhS
nvTgOQ6losBGHzhT5ZIUqQxHjPQhuPhfBI00IT0h4iuQhUAMEdfTLgwq4hnYYogT
ASvhHnOMssNqqT9bE/A3aHPuFQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:23 2025 by rpki-client