Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/1-rLanF9A105XZ4KWdt-EfGDKDtk.roa
File: 1-rLanF9A105XZ4KWdt-EfGDKDtk.roa (raw, json)
Hash identifier: ObNt8WMj9wqjipXqQMj/38v8kxEWmtG19M0pzSC5eZ8=
Subject key identifier: FA:B2:DA:9C:5F:40:D7:4E:57:67:82:96:76:DF:84:7C:60:CA:0E:D9
Certificate issuer: /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial: 8B67B6
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/1-rLanF9A105XZ4KWdt-EfGDKDtk.roa
Signing time: Sat 01 Jan 2022 02:58:16 +0000
ROA not before: Sat 01 Jan 2022 02:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39392
IP address blocks: 185.80.30.0/24 maxlen: 24
2a10:3900::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9136054 (0x8b67b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Validity
Not Before: Jan 1 02:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fab2da9c5f40d74e5767829676df847c60ca0ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:7b:64:5c:40:1a:5b:42:59:c1:93:af:a4:
e3:57:1b:ca:9c:35:d7:bf:b3:1c:6e:a5:60:0c:08:
a9:be:b2:8e:0b:aa:6d:dd:06:ae:9b:d2:40:fe:dc:
ac:43:24:72:ef:85:0b:91:70:02:36:0b:1b:bc:d5:
c5:69:8b:87:20:4a:8e:93:ea:97:4d:73:6f:d3:7f:
0e:03:ea:b7:0d:bc:42:31:6d:03:c1:d1:74:f6:c1:
b9:85:e7:23:aa:03:3c:80:fe:00:79:ea:27:01:ad:
28:e4:ce:1d:3b:1a:ad:a9:db:7d:26:10:84:87:1e:
dd:dd:b9:a7:2f:ab:ab:62:a9:48:80:8d:16:5c:f3:
ae:e1:ef:86:d4:31:b5:41:2b:d4:99:15:9b:ea:32:
7a:fe:94:e0:b8:fb:e0:ab:1e:c2:8d:19:e8:3a:02:
d0:33:f1:54:03:c3:34:b1:c9:f1:14:90:bf:43:50:
05:e8:06:db:70:25:4d:d6:8c:f9:26:33:bf:cc:12:
3f:18:6b:69:ea:71:ce:ad:f0:60:3d:5d:fe:93:57:
55:13:d7:bf:2f:3d:7a:5b:71:9a:28:87:f5:8c:0d:
34:7c:95:cb:20:d1:62:c8:72:a6:0c:c7:0a:05:5b:
b4:c4:78:cd:3c:29:d7:a7:22:fb:12:d5:9c:84:63:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B2:DA:9C:5F:40:D7:4E:57:67:82:96:76:DF:84:7C:60:CA:0E:D9
X509v3 Authority Key Identifier:
keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/1-rLanF9A105XZ4KWdt-EfGDKDtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.30.0/24
IPv6:
2a10:3900::/48
Signature Algorithm: sha256WithRSAEncryption
51:48:b0:4d:21:86:5a:1f:de:02:0d:e9:a7:05:52:61:f6:a5:
87:e0:6e:01:43:f7:17:ac:38:cc:16:b8:01:84:7a:8f:d6:39:
3d:85:49:3a:bd:4e:b6:7f:b6:3c:b6:06:c5:a8:48:52:2d:d6:
ce:d0:cf:c9:b8:7d:d8:a3:07:d4:c8:2c:0f:3e:24:ab:80:f6:
10:32:7c:a5:12:6b:60:2d:35:e2:f5:cc:7a:66:22:f0:36:d5:
ad:a3:fd:9e:a1:07:c3:84:50:40:be:13:4f:fe:c7:bd:8a:89:
82:6a:60:96:73:66:cd:93:3d:89:79:1f:ea:d7:ae:7b:96:26:
55:83:d9:bb:46:f0:3a:e1:3c:48:69:d1:8c:e5:c8:2f:31:d7:
2b:d4:e3:77:17:2f:57:b5:6b:d6:4b:3d:79:f2:09:fa:c8:17:
7c:dd:1a:cf:ed:a0:94:d8:65:0c:e2:29:fc:4f:cb:ec:aa:88:
57:5a:8d:b4:69:08:83:a7:50:64:19:ae:a5:3c:06:72:49:ad:
8c:ae:c4:6a:b1:e1:7c:04:e8:c2:d4:67:a1:1a:ae:2f:90:34:
d3:9a:47:fe:76:42:60:a2:d5:81:f8:3f:5b:a3:6d:43:4e:3f:
75:04:f4:83:85:15:75:ca:2e:2a:48:72:0a:30:bc:6f:02:df:
93:29:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:49 2025 by rpki-client