Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/vYub1orqk0bLuyi7k6lbT9PbxEM.roa
File: vYub1orqk0bLuyi7k6lbT9PbxEM.roa (raw, json)
Hash identifier: SDwrIeKczqsXFo+3Hpw4IAmF134KGw8v4EIV5TgpR1Y=
Subject key identifier: BD:8B:9B:D6:8A:EA:93:46:CB:BB:28:BB:93:A9:5B:4F:D3:DB:C4:43
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 01CBF903
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/vYub1orqk0bLuyi7k6lbT9PbxEM.roa
Signing time: Sat 01 Jan 2022 15:57:35 +0000
ROA not before: Sat 01 Jan 2022 15:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49086
IP address blocks: 80.228.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30144771 (0x1cbf903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jan 1 15:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd8b9bd68aea9346cbbb28bb93a95b4fd3dbc443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:00:05:5c:31:c1:8a:3e:6f:ee:47:36:28:60:
c0:14:6b:92:a1:7f:33:69:54:ef:04:40:5f:14:4b:
80:01:76:d4:c0:57:43:e8:5a:70:48:9d:c0:4b:5f:
63:30:73:3e:8e:30:2a:0e:56:1f:e8:93:dd:0e:f9:
83:05:2c:26:2a:5a:e2:a6:02:f4:48:54:78:b1:eb:
4c:51:14:7f:56:f8:b2:6d:08:79:39:3b:be:56:14:
8c:42:04:fc:2a:7d:9b:b2:34:77:6a:c1:25:9c:46:
c1:2e:99:47:c3:5e:da:f7:6c:19:a3:85:96:f7:52:
e7:f3:98:02:93:91:28:7c:c2:23:bb:20:cb:f1:2c:
7c:b3:7c:80:40:ba:31:0b:fb:69:b1:79:2c:f2:c0:
82:e6:62:60:90:47:23:c5:66:64:25:b1:22:e3:64:
a6:85:b1:d3:65:d9:ff:31:bc:39:b5:29:e3:24:fb:
3d:7d:60:47:d8:65:e7:25:88:82:13:5c:48:15:a5:
07:0f:f6:af:72:94:79:f9:b8:a3:e4:e7:a3:63:81:
20:f7:a4:47:ae:44:fe:05:dd:1d:24:e3:87:71:5e:
d6:1e:0e:e6:58:9d:5b:ca:3d:37:65:49:c3:aa:a6:
13:fa:29:79:5b:10:72:06:a2:75:22:27:57:d4:8d:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:9B:D6:8A:EA:93:46:CB:BB:28:BB:93:A9:5B:4F:D3:DB:C4:43
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/vYub1orqk0bLuyi7k6lbT9PbxEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ac:70:90:b1:80:40:6a:d7:13:8d:12:86:3c:c4:82:d8:50:
fd:20:75:a7:e7:c3:ad:f2:31:d2:91:ca:45:66:ed:54:f6:50:
7f:59:96:e8:80:87:bf:ed:ed:41:38:a5:71:e0:db:b2:29:a0:
b3:ec:02:35:71:ab:a7:57:33:35:0d:0d:f0:6b:21:18:d4:3a:
78:75:ad:cb:01:a9:a0:9b:96:a1:14:ec:e9:bd:e0:eb:da:8b:
01:4a:0b:d6:30:a8:f7:b6:c1:41:79:77:3e:ec:49:6a:61:0a:
f3:a1:96:77:ca:a1:70:d2:44:80:78:e8:1d:fe:cd:6b:18:0f:
d6:c8:b6:b7:92:2f:62:86:d3:88:80:e5:31:63:73:5f:26:7f:
8a:b4:93:b9:b9:1b:50:ed:81:05:04:54:b3:da:cf:06:6b:07:
79:75:4b:e1:09:93:30:33:a7:2e:97:f9:d3:5e:54:44:44:a1:
6b:cc:72:ba:28:58:ea:27:06:31:b2:ab:23:f9:c6:b5:c3:af:
35:af:dc:32:b6:dd:a9:07:46:4f:8f:77:f4:45:a3:ea:af:d5:
7f:ad:f6:31:d7:57:6f:ea:3b:2f:30:14:12:1c:aa:47:e8:40:
26:a5:72:10:e9:7d:35:75:29:72:cd:79:48:7c:37:e8:ea:68:
dc:d5:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:54 2024 by rpki-client on console-fra.rpki-client.org