Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/gSjmcDLYK2CRkY2EFyVSF9yRkmM.roa
File: gSjmcDLYK2CRkY2EFyVSF9yRkmM.roa (raw, json)
Hash identifier: 9bte7YZf0nPPX3bbRobPDrMZBg2XCB852fynH+nghUI=
Subject key identifier: 81:28:E6:70:32:D8:2B:60:91:91:8D:84:17:25:52:17:DC:91:92:63
Certificate issuer: /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial: 0189788E1E0DF73816818EA5831C8538B61D
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/gSjmcDLYK2CRkY2EFyVSF9yRkmM.roa
Signing time: Fri 21 Jul 2023 13:05:26 +0000
ROA not before: Fri 21 Jul 2023 13:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30720
IP address blocks: 80.85.175.0/24 maxlen: 24
80.85.160.0/24 maxlen: 24
2a01:6a40:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:8e:1e:0d:f7:38:16:81:8e:a5:83:1c:85:38:b6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Validity
Not Before: Jul 21 13:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8128e67032d82b6091918d8417255217dc919263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:4a:5a:e6:a7:2b:b2:f8:7a:13:31:db:cf:
ac:b5:7f:9d:ab:c9:e5:d5:f9:69:14:17:16:a8:77:
9e:01:7d:fb:14:93:17:92:bd:a4:d3:e0:27:ed:28:
23:7a:94:ee:b2:7f:13:5b:be:43:00:be:10:9a:a5:
c7:49:05:04:62:ff:fc:44:0d:77:20:ad:cb:7a:64:
62:56:bd:99:73:21:1c:b1:22:34:d1:54:3c:4e:16:
0a:ad:d4:9c:5c:89:44:89:2d:71:be:01:5e:f3:2b:
4c:c9:f3:d7:5b:ec:e4:b2:74:e7:3f:d3:20:f3:6f:
2d:36:01:7c:d0:d5:81:2a:b1:3f:f8:57:52:7a:71:
6d:18:b9:f8:02:a9:f9:da:6d:12:42:4a:a4:a3:82:
98:a8:55:89:01:eb:78:b1:98:b8:56:1f:59:a4:ca:
3e:eb:09:c2:9f:71:d7:fb:57:33:fb:af:d4:72:ea:
20:2a:ed:0d:53:3c:ce:89:97:2b:c8:45:5e:02:47:
10:c4:52:3e:8f:58:f3:da:b5:4b:e2:45:1b:f1:43:
21:c6:3f:7f:a3:00:2c:d3:12:7e:ad:af:48:8a:26:
7d:ce:ac:c9:1d:e6:56:8d:60:a1:cd:10:d4:1f:c9:
6a:35:ef:6d:8b:48:63:4a:d1:be:3f:bc:e4:59:ca:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:28:E6:70:32:D8:2B:60:91:91:8D:84:17:25:52:17:DC:91:92:63
X509v3 Authority Key Identifier:
keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/gSjmcDLYK2CRkY2EFyVSF9yRkmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.160.0/24
80.85.175.0/24
IPv6:
2a01:6a40:1::/48
Signature Algorithm: sha256WithRSAEncryption
b0:39:01:16:e7:ec:4b:eb:2e:7e:14:0f:d1:f1:bc:05:fa:24:
f0:ca:88:99:c2:fa:d1:a4:ef:77:6b:ad:f9:1b:5d:9b:d3:cf:
aa:91:06:46:9b:05:90:c0:c7:64:af:29:a9:d5:bd:65:b7:5b:
df:7c:c3:a6:8e:dc:45:af:fc:84:1e:b0:57:d9:c8:db:c5:57:
98:c3:a8:30:2b:31:2a:3c:f7:39:10:3c:ab:74:f4:f5:b8:12:
55:f5:c9:4c:9f:f8:4b:00:a3:1f:6b:99:19:45:03:b1:c0:d7:
87:f2:5e:f1:c9:fe:5e:9b:bb:85:f5:7a:00:5b:23:a5:04:09:
46:9b:be:59:a6:12:08:37:ea:ca:f7:e3:da:7b:8b:12:4d:23:
d8:fa:38:39:c5:7c:e5:59:b5:1a:7e:78:7b:eb:4c:31:09:23:
d2:22:ca:fc:93:9e:a3:73:4c:82:88:84:5a:31:71:ab:fa:71:
f4:e1:b3:90:5f:05:d2:56:49:ee:23:d7:ef:92:40:4a:63:03:
ce:0d:13:cf:67:0d:48:64:54:f4:79:bd:1a:6d:49:3f:8b:cb:
d4:d0:35:3c:c7:8b:b8:1d:73:d1:f0:71:f8:f7:0a:e6:4f:61:
c5:4f:b6:5c:71:70:c3:3b:06:0c:a5:4c:77:23:8b:e4:08:16:
68:ae:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:43:56 2025 by rpki-client