Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CJ6cQlm2iaLzWpnF8V2BlasFCmU.roa
File: CJ6cQlm2iaLzWpnF8V2BlasFCmU.roa (raw, json)
Hash identifier: gvUkn2YNDkdB2oVEtXLe0MfJqFPbV3ISxIJpL+bCVkU=
Subject key identifier: 08:9E:9C:42:59:B6:89:A2:F3:5A:99:C5:F1:5D:81:95:AB:05:0A:65
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1AAF5DB5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CJ6cQlm2iaLzWpnF8V2BlasFCmU.roa
Signing time: Thu 21 Apr 2022 17:21:08 +0000
ROA not before: Thu 21 Apr 2022 17:21:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25103
IP address blocks: 80.96.217.0/24 maxlen: 24
80.96.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447700405 (0x1aaf5db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 21 17:21:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=089e9c4259b689a2f35a99c5f15d8195ab050a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:e5:f3:5a:d8:0f:9f:1f:2f:ee:07:f0:68:
90:7a:25:32:26:1b:32:6a:cc:ce:5d:bf:39:01:e0:
47:d1:8a:b5:49:b0:63:53:1c:e2:74:87:a2:6c:ed:
67:66:4c:51:c4:42:19:c6:16:aa:9a:55:bf:df:ae:
84:d9:86:90:11:23:c9:39:72:7f:b6:23:28:f2:8a:
2b:91:38:c8:f6:ec:15:12:88:59:51:d5:84:96:0b:
ed:26:9b:06:62:94:72:f2:44:87:e6:4b:79:24:fe:
c4:4d:f5:15:07:d7:1c:24:f3:11:0a:ba:89:a4:5c:
e6:11:bc:74:34:6a:f4:13:a1:3a:ab:f7:c7:1d:34:
9a:0d:8a:84:35:0d:2b:e8:1e:f9:0f:bf:6e:76:ae:
3c:9f:91:69:07:3f:f6:de:f6:46:fc:7f:0d:df:98:
82:79:d8:f7:5c:37:2f:52:9d:64:54:00:b0:43:73:
65:c0:c7:5d:9f:f6:06:be:7b:9a:68:44:2d:e0:62:
ce:d7:d8:15:ca:97:23:44:83:37:25:92:fe:b9:85:
21:0b:11:cb:7b:8f:ab:e1:0e:bb:ec:c3:1f:a8:00:
bb:8b:47:cc:ed:1b:87:02:c4:ad:ed:b9:d6:50:18:
66:36:59:09:a7:f2:77:ff:85:5c:9a:c8:f8:98:29:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9E:9C:42:59:B6:89:A2:F3:5A:99:C5:F1:5D:81:95:AB:05:0A:65
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CJ6cQlm2iaLzWpnF8V2BlasFCmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.217.0/24
80.96.247.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ef:d5:dc:d1:d3:b2:79:a2:ac:b0:89:2b:ad:06:ac:10:74:
f3:8e:82:6b:1e:7f:b1:c1:43:96:86:51:2e:fe:5c:1c:a4:ad:
47:f7:86:fc:d1:1a:ae:14:40:8e:a8:4b:a4:c7:20:48:a2:51:
2a:a2:d2:81:da:52:5f:e6:a5:fb:1b:8f:45:37:3c:e7:41:41:
02:b8:6d:fd:22:34:ff:cc:e5:84:dd:16:9e:08:f1:a7:21:16:
4c:92:73:6e:85:b0:18:09:c7:04:fa:07:2d:99:9e:76:5e:bf:
a1:b1:b2:dd:29:1c:94:07:de:e0:4d:f2:29:e7:8d:e4:a8:06:
d9:c7:2b:47:ab:63:70:d2:8f:81:7b:4e:b4:6d:82:61:e4:5f:
ff:3d:91:36:3a:d7:93:0c:d0:fe:ed:17:dc:9d:ef:92:f5:a5:
9f:af:7e:a2:66:a5:22:17:30:08:ea:73:80:83:26:ee:37:ad:
7f:2a:f3:bc:be:96:9e:86:f8:a6:11:83:2d:ad:7d:83:98:8f:
e6:2f:51:d0:03:d3:f8:a0:8f:be:f2:e1:13:13:ea:43:74:a7:
e0:4e:40:8c:a1:ab:07:f1:45:dc:90:70:49:55:31:02:30:4a:
95:69:c6:e1:74:90:ec:94:a4:32:36:15:44:cd:19:16:11:bb:
d4:52:6b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org