Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RY4nTyyJr6AHw8hQ6M-N8D_F0m0.roa
File: RY4nTyyJr6AHw8hQ6M-N8D_F0m0.roa (raw, json)
Hash identifier: ejBgedJckxngoyK9Pln3YaADyDu2Vq1qOQ3mAAGloV0=
Subject key identifier: 45:8E:27:4F:2C:89:AF:A0:07:C3:C8:50:E8:CF:8D:F0:3F:C5:D2:6D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1AB0FA0A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RY4nTyyJr6AHw8hQ6M-N8D_F0m0.roa
Signing time: Thu 21 Apr 2022 17:30:14 +0000
ROA not before: Thu 21 Apr 2022 17:30:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209644
IP address blocks: 80.97.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447805962 (0x1ab0fa0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 21 17:30:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=458e274f2c89afa007c3c850e8cf8df03fc5d26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:e8:60:6d:4f:88:ca:d1:ff:bf:72:d8:82:
4d:86:e8:09:d6:b3:8c:fb:c5:5c:15:8a:de:fe:f8:
d5:5b:8a:79:64:8d:46:f6:f3:fa:14:7b:95:93:7f:
91:48:dc:72:9a:94:69:77:4a:d7:d2:01:60:69:99:
3a:17:2e:0b:92:9c:1a:6c:87:4c:a0:58:4d:2b:00:
44:91:c7:a5:65:08:ae:9f:31:34:72:1f:cd:67:86:
a2:02:d1:b9:c3:df:19:78:28:a7:f9:e8:2c:8b:e6:
e6:68:32:ee:09:96:6a:e5:ff:41:75:e8:94:d9:89:
7e:30:14:02:0a:4f:a5:a4:fc:c9:0c:1e:11:21:7c:
97:49:e4:43:ce:93:95:c7:2f:02:14:ff:17:fe:aa:
12:9b:e4:77:f3:c0:e5:d5:dc:2b:de:85:44:80:8e:
ec:06:e0:7e:28:db:a9:9c:5c:dd:07:9d:cf:4d:b7:
ab:7f:26:6a:97:a7:94:4a:08:12:c3:35:55:a5:69:
4c:46:40:4a:10:03:b7:ac:d8:90:a1:cb:21:d0:88:
93:ac:9c:a5:01:22:d9:02:55:e7:f8:42:73:34:34:
81:f9:9c:28:f8:47:86:a6:61:20:ff:c9:89:c6:c8:
1c:1a:f3:ea:79:c6:11:52:1c:14:82:ab:e1:1d:28:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8E:27:4F:2C:89:AF:A0:07:C3:C8:50:E8:CF:8D:F0:3F:C5:D2:6D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RY4nTyyJr6AHw8hQ6M-N8D_F0m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5d:09:a9:c2:f2:33:ff:d7:07:fd:19:61:08:e8:e9:37:c8:
70:61:87:65:0f:f5:28:ac:13:6d:d3:aa:a2:f5:8a:7a:7a:5c:
e5:d4:66:6c:79:52:a1:1e:ee:48:9f:cc:75:c7:27:b5:d8:76:
fe:8c:b8:5e:99:6a:2e:a9:ff:56:2a:4f:6a:15:48:7c:f1:5e:
83:0d:18:b4:65:90:cc:fb:98:36:f4:39:a7:8e:01:a1:60:06:
2a:88:15:39:7c:7b:b1:a4:ca:10:76:cf:12:bb:39:d8:ea:32:
5b:2b:4b:98:06:dd:99:f0:15:e5:14:85:97:c7:42:3b:ee:1f:
76:df:8f:c6:e7:42:27:57:94:1e:6a:4d:f6:ea:e1:d7:47:5a:
6a:0f:dc:70:af:10:36:6a:2b:30:df:b3:a2:f4:1f:8b:40:ed:
11:c2:f6:11:25:0b:43:d4:e2:b8:29:3e:73:8c:ce:98:1f:9a:
4c:aa:a9:3f:c7:7a:a5:91:3f:41:8c:d7:d5:6e:81:2c:f3:a6:
ba:8f:8d:12:14:d7:e0:a7:f3:49:02:7e:13:80:4d:56:43:c7:
41:8d:3c:95:cf:ec:71:9e:f2:31:f6:92:0e:b0:e6:d6:ee:71:
d9:23:37:24:14:1c:5c:9f:21:6a:04:64:17:f1:65:92:f6:dc:
8a:95:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org