Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/b8pFTTR_-zlMjidHHvLcrD_bths.roa
File: b8pFTTR_-zlMjidHHvLcrD_bths.roa (raw, json)
Hash identifier: re5hvfR3R8JWaovkXIE0tkG1SmhRLOBVe6G/qh94pJM=
Subject key identifier: 6F:CA:45:4D:34:7F:FB:39:4C:8E:27:47:1E:F2:DC:AC:3F:DB:B6:1B
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0187954A36F36F2E62BE4B3F15EB41306732
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/b8pFTTR_-zlMjidHHvLcrD_bths.roa
Signing time: Tue 18 Apr 2023 16:54:41 +0000
ROA not before: Tue 18 Apr 2023 16:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 80.71.231.0/24 maxlen: 24
80.71.233.0/24 maxlen: 24
80.71.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:4a:36:f3:6f:2e:62:be:4b:3f:15:eb:41:30:67:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 18 16:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fca454d347ffb394c8e27471ef2dcac3fdbb61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:ad:2e:c0:8e:b9:e8:5b:bc:79:2b:05:98:
f6:41:df:93:65:01:dc:2c:1d:9c:7f:70:f3:59:55:
cb:2d:04:a2:ad:dc:33:2b:f7:5a:fa:d5:36:2a:48:
ac:aa:1a:90:c5:d8:ef:5d:55:68:31:fc:0a:55:57:
57:71:55:44:43:f5:71:d1:3c:52:62:5a:1f:5f:04:
15:e0:9c:1e:53:7b:bc:1f:b4:e4:8d:91:88:11:68:
af:b4:d4:fc:3f:83:e7:22:57:a8:4e:3a:d1:69:07:
7a:df:0c:10:bb:8e:12:81:7d:6a:3c:93:a6:88:f0:
f8:fb:26:dd:fe:5c:5c:f3:cd:4a:86:f2:82:db:44:
d2:21:3a:b9:d5:8a:f1:84:f9:48:2b:15:e6:33:ae:
18:4a:94:7a:4e:08:4b:81:ea:fd:2a:fb:2b:80:a3:
76:52:23:3e:26:3c:cb:1f:8f:97:ad:17:ea:8e:63:
75:ca:50:e0:97:2b:20:cc:09:df:e8:80:ee:56:d0:
32:0d:95:b0:c7:1c:97:b6:1c:99:07:2e:bd:e1:10:
18:ed:b8:1b:83:70:ba:84:94:37:9b:f7:26:b0:e8:
f7:d6:f4:d7:36:3d:67:47:1e:0b:8b:00:65:cb:14:
15:2d:bc:f6:56:08:d4:b0:a9:89:e2:83:88:be:e5:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CA:45:4D:34:7F:FB:39:4C:8E:27:47:1E:F2:DC:AC:3F:DB:B6:1B
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/b8pFTTR_-zlMjidHHvLcrD_bths.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.231.0/24
80.71.233.0/24
80.71.236.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d6:0b:64:ae:ea:af:3a:99:11:e0:ef:05:e2:4a:cc:b5:cb:
3f:c9:32:54:65:0a:9c:de:aa:05:49:b3:65:99:9f:8d:94:a3:
a6:ea:1c:d7:7a:cc:07:2d:68:b6:3e:22:68:d4:20:f0:af:08:
bf:1d:51:07:10:8c:6b:f0:3d:12:5e:d0:36:a2:ad:06:02:a4:
e0:79:77:38:a9:46:18:65:0f:cc:a7:69:6e:41:2f:44:d0:11:
1b:11:8e:10:bf:c3:f1:d9:b7:b2:d1:cc:52:4a:3f:37:5d:ed:
f5:97:2d:58:1d:31:0c:0d:d5:99:98:58:b6:04:1c:82:ba:07:
b7:42:44:bb:9b:0c:f3:08:a6:c7:ed:4a:76:16:d2:7b:43:83:
5a:76:35:be:47:e0:ee:b1:c5:d9:cd:6f:64:5a:f3:18:88:23:
cf:d7:80:0d:3f:77:f3:51:ff:fe:cb:52:be:72:c8:96:5c:a4:
37:c2:a7:9d:64:02:9c:89:e2:c2:fd:2e:5c:07:2d:e5:22:91:
2e:04:e9:1b:53:78:bf:a0:5b:b5:6d:88:16:f1:13:f2:b2:73:
c7:8c:46:3c:13:e1:26:d5:55:e2:24:86:a2:55:38:95:de:3c:
5e:5d:bd:3a:9d:2a:93:57:c0:e1:aa:78:b5:5f:74:c4:97:ae:
23:1e:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:18:15 2025 by rpki-client