Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/bs9ey0AnmYyXbpiKlPn05CnQSlg.roa
File: bs9ey0AnmYyXbpiKlPn05CnQSlg.roa (raw, json)
Hash identifier: quz27jhZ2w15cIvmipsDg2OBuGOqp7G528c6ki9ElnU=
Subject key identifier: 6E:CF:5E:CB:40:27:99:8C:97:6E:98:8A:94:F9:F4:E4:29:D0:4A:58
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 446EEFFD
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/bs9ey0AnmYyXbpiKlPn05CnQSlg.roa
Signing time: Sat 01 Jan 2022 03:58:17 +0000
ROA not before: Sat 01 Jan 2022 03:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8891
IP address blocks: 80.12.245.0/24 maxlen: 24
80.12.246.0/24 maxlen: 24
81.52.142.0/23 maxlen: 24
2a01:c9c0:a0::/44 maxlen: 48
2a01:c9c0:c0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148121085 (0x446eeffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ecf5ecb4027998c976e988a94f9f4e429d04a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:94:f2:fa:83:05:ec:89:71:b2:34:4e:9f:
d6:bb:c8:69:28:1a:d7:f2:06:be:05:db:73:0a:80:
47:39:24:58:44:2a:22:9f:2e:77:c7:35:40:7d:c3:
de:00:f3:e0:19:79:8d:6f:b0:2b:6d:8f:cd:3e:0d:
37:84:9b:58:f0:cd:5e:38:f9:6e:e7:3b:cc:8d:6c:
4e:47:39:6f:52:a8:f3:cf:10:48:84:b6:ed:e7:a5:
b6:43:a2:5c:92:7f:ed:ce:38:69:b6:fe:82:01:24:
43:7e:6b:c7:b0:4c:30:fd:0d:fa:55:f3:bf:72:7c:
2d:73:12:fc:fd:09:77:22:9e:af:cb:d9:ba:60:e4:
dd:46:4c:3d:41:e8:a7:f1:a8:a1:aa:bc:2d:8d:53:
0f:9a:0e:e5:7b:de:ec:2c:27:b1:cc:ed:13:4f:61:
ec:ce:3d:02:2d:c9:c9:23:47:8d:7c:8f:ea:47:c3:
9e:32:f7:03:48:10:b2:95:02:7e:b3:55:56:7b:fd:
8f:f8:16:ad:0e:29:3a:bd:59:53:cc:6e:08:89:45:
b1:4a:b5:d6:65:29:1e:85:e9:5f:b6:7a:ab:30:4a:
0b:3e:4a:33:3e:14:51:02:be:4a:f0:5f:c5:9b:76:
a8:9a:77:79:06:68:d6:78:dd:ef:a6:71:da:f3:88:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CF:5E:CB:40:27:99:8C:97:6E:98:8A:94:F9:F4:E4:29:D0:4A:58
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/bs9ey0AnmYyXbpiKlPn05CnQSlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.245.0-80.12.246.255
81.52.142.0/23
IPv6:
2a01:c9c0:a0::/44
2a01:c9c0:c0::/44
Signature Algorithm: sha256WithRSAEncryption
86:5b:59:91:13:ff:a4:23:83:29:94:43:83:33:0c:4d:60:93:
96:1c:fd:61:82:88:14:9d:ff:7a:40:e9:e2:45:e5:58:75:72:
7f:af:6a:f0:37:1f:ec:57:6a:c6:ab:e9:94:8f:df:d9:88:1c:
30:33:4a:21:13:1c:68:19:f2:71:15:b3:11:93:cd:d3:53:a0:
36:13:25:26:fc:0d:eb:1c:d7:ca:dd:dc:91:68:9d:9f:6b:bb:
69:1f:be:44:12:8a:9a:ea:f2:c6:06:48:c3:c9:a6:a5:27:9e:
74:9b:99:ff:eb:c4:ef:d5:85:3e:c1:3a:a1:bf:59:4b:5d:61:
e7:0e:79:5b:59:ac:d7:96:6e:48:7a:0a:4f:31:dc:9f:c2:d2:
b9:69:4f:96:12:8d:85:b6:79:2e:b7:c6:fd:8f:88:f4:d7:23:
0c:ef:ca:9c:0b:07:23:0a:d7:90:8a:15:f2:c0:cf:59:f8:90:
eb:cc:c6:c6:13:a7:6e:ae:58:3f:d1:fa:07:00:88:24:1b:5a:
bc:de:16:22:90:29:eb:95:ac:31:b5:24:c2:a4:a4:cf:cf:f8:
8e:10:73:39:b0:cf:9a:31:b7:1d:4c:e1:db:80:df:7a:2b:3f:
1b:00:1c:82:cc:48:ee:dd:5e:df:88:53:29:fe:d8:74:c1:17:
6f:a7:7c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org