Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/TfJ3H_jKDGRtKgQIHW8nU-f0yKA.roa
File: TfJ3H_jKDGRtKgQIHW8nU-f0yKA.roa (raw, json)
Hash identifier: p3srELd1TNblmHOr0D7MYUK/95rDRwpTGVqG8kEtn4w=
Subject key identifier: 4D:F2:77:1F:F8:CA:0C:64:6D:2A:04:08:1D:6F:27:53:E7:F4:C8:A0
Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial: 1049C416
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/TfJ3H_jKDGRtKgQIHW8nU-f0yKA.roa
Signing time: Sat 01 Jan 2022 07:54:40 +0000
ROA not before: Sat 01 Jan 2022 07:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38948
IP address blocks: 80.251.80.0/20 maxlen: 24
2a0b:8140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273269782 (0x1049c416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Validity
Not Before: Jan 1 07:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4df2771ff8ca0c646d2a04081d6f2753e7f4c8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ef:25:4a:94:8a:c8:9b:ac:bb:33:1c:03:3d:
22:75:c1:fa:54:80:ef:e3:2b:1a:fa:a6:21:77:3b:
a2:04:93:e3:2d:b1:ea:35:01:c3:a8:11:cc:06:e8:
33:37:a7:5b:0a:45:84:9f:c9:d7:75:6c:30:7d:c7:
df:42:0f:f1:93:38:29:e2:ac:aa:f7:05:2b:1c:9a:
95:eb:44:fc:cb:75:0d:95:09:84:71:06:0a:a4:6f:
5b:85:57:06:fc:db:7d:86:b6:ab:9b:1e:73:22:f1:
5e:d0:59:9a:8e:1e:81:29:fc:64:70:df:10:77:8c:
bd:6d:48:84:ce:bb:b6:ec:45:16:ee:81:5b:50:96:
ae:7e:2e:26:d3:30:09:92:74:5f:91:81:a8:5f:9c:
67:02:4d:5c:a6:17:69:f9:00:37:02:2f:aa:8f:6e:
10:3e:5b:2c:6a:a5:0b:c6:8c:fd:97:64:77:61:49:
a1:33:9a:95:7d:15:a4:bd:74:35:05:1f:d9:77:e8:
d9:c6:62:ff:11:14:17:8b:ca:3d:71:96:8f:3a:c6:
da:5f:59:51:75:97:92:e0:a2:e3:89:6f:b5:fa:ef:
51:4e:6b:fd:f4:2b:62:7a:85:df:7e:65:b5:da:00:
53:d3:6e:d9:c6:c6:f1:8f:09:f6:65:1a:bd:37:67:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F2:77:1F:F8:CA:0C:64:6D:2A:04:08:1D:6F:27:53:E7:F4:C8:A0
X509v3 Authority Key Identifier:
keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/TfJ3H_jKDGRtKgQIHW8nU-f0yKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.251.80.0/20
IPv6:
2a0b:8140::/29
Signature Algorithm: sha256WithRSAEncryption
d7:46:f3:68:1e:fd:67:f8:21:65:f9:19:af:90:fc:c4:02:27:
a0:60:64:fc:8e:3a:87:26:23:5b:cf:9a:cd:1f:57:dd:5a:0e:
33:69:d5:2d:5e:20:87:bf:7b:4d:cd:23:06:2a:8c:eb:26:aa:
0a:ff:25:c1:5d:ff:e5:81:d2:3a:06:7c:f7:20:c0:e2:7c:3e:
c9:78:3a:cb:ec:98:a4:8f:1b:b6:09:dc:64:2e:f3:56:60:2c:
7e:18:c4:e6:de:c6:e3:5b:38:de:50:17:d8:69:47:96:e5:b8:
54:17:d8:df:3d:01:c2:33:31:f1:46:b0:92:a7:89:3d:e6:75:
d9:74:c7:6c:62:ab:a5:e8:63:97:b2:d0:39:56:56:c6:1a:0d:
a6:5b:ff:96:c1:64:30:69:d1:11:06:d3:d5:a9:c6:50:65:93:
3a:cb:f2:55:db:bc:98:74:a4:2b:df:b1:8e:fd:a9:00:5f:83:
8d:00:22:60:16:e0:9b:b6:fd:46:1c:0c:93:ae:c7:55:e5:72:
59:85:66:0e:51:3b:78:e6:68:9e:2d:c7:b6:d0:26:70:d8:8f:
23:55:65:0b:d2:1d:2a:c9:33:1e:20:30:de:02:a7:f6:6f:01:
05:82:14:87:24:47:83:89:5f:cd:27:7a:5e:d9:eb:e8:5e:2e:
14:37:98:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:59 2024 by rpki-client on console-fra.rpki-client.org