Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/xXfrXgtUbZr0XpCNs6DPz80aafc.roa
File: xXfrXgtUbZr0XpCNs6DPz80aafc.roa (raw, json)
Hash identifier: RQU5fwORqOO/ItO3c8tDSFD7J53LInWBJOrQidCNzFs=
Subject key identifier: C5:77:EB:5E:0B:54:6D:9A:F4:5E:90:8D:B3:A0:CF:CF:CD:1A:69:F7
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 17711EA7
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/xXfrXgtUbZr0XpCNs6DPz80aafc.roa
Signing time: Sat 01 Jan 2022 04:51:30 +0000
ROA not before: Sat 01 Jan 2022 04:51:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31461
IP address blocks: 80.65.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393289383 (0x17711ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Jan 1 04:51:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c577eb5e0b546d9af45e908db3a0cfcfcd1a69f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:8c:67:a6:0a:6c:42:a6:f1:29:37:34:1d:
a6:1f:aa:f2:18:ec:3b:e1:64:08:26:80:43:d2:de:
5f:1d:35:b9:54:9e:64:8a:ed:12:c9:34:5e:b2:69:
ce:27:e0:16:a6:e7:61:51:8d:a8:29:4d:45:3f:72:
56:71:47:bc:90:e2:fa:e3:87:4f:36:c3:dd:cc:5c:
6f:c4:1d:8a:49:87:d3:9c:0a:b9:04:f3:4e:41:52:
3e:6b:73:ac:8f:ce:d4:14:b3:25:a6:c1:d9:e6:91:
58:7d:5a:a4:df:3e:7e:04:f7:59:c0:ea:5a:5b:c7:
01:ec:67:66:f7:35:66:28:39:41:d1:8d:ed:ab:bf:
a5:48:48:5d:75:32:f4:b9:8c:58:a0:2b:be:0d:3c:
f8:fd:34:83:9f:df:2b:9f:e2:84:a3:e6:94:ae:12:
bf:3e:0f:d3:0e:5a:5b:32:a1:49:6f:d6:72:d9:32:
59:20:c3:c9:59:6e:1a:7d:b0:4d:cf:80:79:18:94:
90:38:4c:b4:4b:e4:23:c6:af:6d:05:76:3d:39:83:
34:0e:83:04:3e:fd:1e:c5:57:5c:a3:7b:96:73:7a:
a4:23:c5:52:17:f5:96:8b:09:37:6e:f5:5b:f2:06:
71:95:99:b7:87:7f:df:9a:ad:d6:8e:ab:74:c6:c2:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:EB:5E:0B:54:6D:9A:F4:5E:90:8D:B3:A0:CF:CF:CD:1A:69:F7
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/xXfrXgtUbZr0XpCNs6DPz80aafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.176.0/21
Signature Algorithm: sha256WithRSAEncryption
71:89:6b:a8:8a:49:0c:b8:13:df:61:c7:20:07:cd:14:5f:fc:
cc:47:64:1b:5b:b8:54:d4:f2:51:ac:d0:f2:0f:eb:c2:73:5b:
94:36:0f:37:ca:c0:b3:37:8f:57:3e:e4:3f:2a:fe:f5:af:e4:
f1:04:f3:18:f7:0d:cf:c7:00:58:95:2a:96:d0:97:b8:0b:48:
bc:97:45:85:a7:8e:12:f7:bd:02:32:41:4d:b5:fa:76:a5:d6:
44:62:eb:17:bf:f8:1f:af:0f:f5:57:94:e9:f7:b3:2c:39:59:
09:b4:76:5f:d4:f8:55:c2:40:26:5d:9c:d2:db:64:7a:d0:5c:
cb:f3:7f:a7:c4:ea:0e:3f:d3:34:e4:33:65:91:ff:71:f6:cb:
92:29:af:94:33:42:cc:0d:ac:fd:49:64:0a:f1:db:4a:52:65:
14:b2:f1:c3:58:1d:5b:17:04:95:df:77:11:ae:9a:18:f1:a9:
a2:6e:64:ea:ea:72:87:68:38:ba:47:03:1d:63:16:7c:77:8f:
92:c6:99:0c:f9:65:8a:4f:4e:19:7c:08:de:4c:90:b6:16:22:
f5:0d:08:cf:c3:07:c8:22:c1:4c:71:04:16:dc:ed:be:51:0e:
2d:10:a9:76:7f:af:74:5f:1d:b5:5d:9f:21:90:87:5d:fb:2a:
d4:1c:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:28 2024 by rpki-client on console-fra.rpki-client.org