Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/BOx-YSr9-xNou97e79ei73TGZ1o.roa
File: BOx-YSr9-xNou97e79ei73TGZ1o.roa (raw, json)
Hash identifier: jvFmxdpLdbLTCKUTVGOZn2ViK7ywsePkG9xLJD5Dvus=
Subject key identifier: 04:EC:7E:61:2A:FD:FB:13:68:BB:DE:DE:EF:D7:A2:EF:74:C6:67:5A
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 01828F4555C17DB54946F70CC0B8E3F0A2A8
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/BOx-YSr9-xNou97e79ei73TGZ1o.roa
Signing time: Thu 11 Aug 2022 23:37:41 +0000
ROA not before: Thu 11 Aug 2022 23:37:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208867
IP address blocks: 45.80.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8f:45:55:c1:7d:b5:49:46:f7:0c:c0:b8:e3:f0:a2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Aug 11 23:37:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04ec7e612afdfb1368bbdedeefd7a2ef74c6675a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6b:b4:4e:58:75:64:5a:72:f9:17:c7:c6:7b:
72:8f:5f:8a:9a:7e:af:19:6b:66:6d:15:db:57:ef:
da:0b:b9:1c:dd:8a:f2:e5:03:18:d9:3b:41:0e:df:
4e:ce:97:3b:67:6f:69:ac:71:a7:30:d5:3f:67:b8:
56:5a:9f:fa:15:54:63:aa:1e:d0:e3:bd:2d:82:52:
1c:76:b4:56:73:9b:c1:57:b3:06:5c:24:28:cf:ac:
61:01:69:99:24:23:e3:2d:21:cf:cd:b3:24:75:7c:
85:b5:7b:54:bd:bd:92:11:89:d7:41:87:29:63:b8:
5b:4b:e8:0e:31:85:e5:be:1c:a9:53:3b:4f:a4:6e:
43:25:9e:5f:8b:f9:51:81:8e:0c:33:8b:4d:93:ea:
05:ae:8e:eb:4d:f2:9f:8f:97:45:0d:60:de:14:a5:
ce:37:67:64:2c:13:62:db:d3:30:c6:2c:e2:b0:e7:
f0:06:c7:b8:0c:69:59:ad:51:ac:23:88:96:49:14:
39:0d:24:9b:94:d8:d5:65:87:7a:11:60:0f:60:c3:
23:e0:86:06:18:2c:c8:43:ba:c7:9e:79:96:49:8b:
7f:7d:0a:6d:d7:56:a3:1c:e0:ca:5d:12:4d:3a:9e:
a6:16:08:87:23:a2:9d:22:db:56:96:fc:40:a0:a2:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:7E:61:2A:FD:FB:13:68:BB:DE:DE:EF:D7:A2:EF:74:C6:67:5A
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/BOx-YSr9-xNou97e79ei73TGZ1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.96.0/22
Signature Algorithm: sha256WithRSAEncryption
75:c1:86:23:f3:e4:98:a4:0b:7b:08:d3:f4:3a:e9:f6:13:68:
9d:d4:fe:63:84:ec:81:9a:07:58:7c:df:88:63:bc:12:d3:4a:
64:45:5d:a1:a5:e9:62:2c:90:fc:fc:32:06:81:7a:03:b4:4f:
72:f9:59:4a:14:83:f9:7b:27:ad:64:d3:dc:3a:6d:f5:2b:b2:
e2:01:76:e5:73:ee:ef:17:98:f1:41:57:9c:0f:16:39:03:bc:
05:00:2c:26:d3:6e:26:fc:6f:42:fa:d9:b9:91:94:e6:85:12:
9a:d1:b4:8f:75:b5:65:8c:2a:41:00:69:ac:b9:4f:13:5e:d5:
0f:93:e9:60:64:ee:c8:aa:76:42:6a:46:75:54:db:d2:64:50:
14:ad:c3:ef:6f:5f:5f:c4:4b:c6:13:86:0f:3e:72:2c:2a:67:
21:e1:d1:6c:b4:d3:45:81:ca:6c:71:b8:71:29:66:4d:e5:bc:
e0:f6:32:98:d1:85:9d:e1:2d:62:96:36:6c:65:04:0e:5a:8a:
d8:4b:8b:56:ba:cd:68:eb:70:71:45:7d:56:7a:57:66:23:19:
0f:e4:6c:ea:54:50:68:46:7b:32:79:53:76:67:3a:d7:03:ed:
b0:7f:3f:99:49:07:81:fc:ee:01:83:09:76:06:5f:9d:17:28:
65:97:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:24 2024 by rpki-client on console-fra.rpki-client.org