Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/du0qs7cPkIYouNOMQFkLf2Ww8qs.roa
File: du0qs7cPkIYouNOMQFkLf2Ww8qs.roa (raw, json)
Hash identifier: BLnnnms0T3us/sG+UrjgplYh2TQ73h/EZmFaJd2893o=
Subject key identifier: 76:ED:2A:B3:B7:0F:90:86:28:B8:D3:8C:40:59:0B:7F:65:B0:F2:AB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1B5FF259
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/du0qs7cPkIYouNOMQFkLf2Ww8qs.roa
Signing time: Tue 31 May 2022 09:16:13 +0000
ROA not before: Tue 31 May 2022 09:16:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6718
IP address blocks: 80.97.49.0/24 maxlen: 24
80.96.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459272793 (0x1b5ff259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 31 09:16:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76ed2ab3b70f908628b8d38c40590b7f65b0f2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:8f:65:33:98:42:95:b1:7f:3b:ce:eb:f0:
5a:7d:1b:14:c9:9f:6c:e1:e1:ba:e6:81:15:11:72:
8c:9a:3f:d3:f9:12:95:90:cc:17:91:1d:41:9f:b3:
f3:71:8f:bc:6e:51:f6:9e:a4:35:81:0e:ad:9e:fe:
a5:48:ca:55:26:ea:09:cd:b3:7b:9b:67:fe:1e:bf:
80:a0:47:7d:dd:aa:df:5a:98:c5:9b:82:e2:1f:45:
7e:af:3d:a6:29:15:e3:e9:91:18:ed:a5:a9:a7:36:
2d:2b:14:86:ff:0a:af:2e:60:a5:d7:73:ea:be:8a:
b0:05:92:ee:75:6b:e9:9f:9d:f7:28:41:d4:ec:a2:
75:e4:39:ec:99:71:51:66:53:5b:84:7e:98:4b:2f:
ef:69:02:0d:99:31:a2:fa:a9:72:06:ef:3d:e4:c4:
1c:7f:77:0e:58:9f:df:3d:1c:ae:f1:a8:9b:70:fa:
ab:21:2a:4d:ba:93:91:63:97:97:c9:78:2e:28:77:
01:8e:6e:f0:c9:57:8c:75:f1:d5:b4:36:0a:14:37:
b1:fd:e3:2b:33:c3:80:8d:70:26:95:ee:07:a1:53:
ee:c5:65:6f:6f:6a:8f:82:4c:e9:2f:b1:76:ba:9d:
20:c6:28:12:50:53:01:e5:c0:f5:7d:5a:07:e7:ee:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:ED:2A:B3:B7:0F:90:86:28:B8:D3:8C:40:59:0B:7F:65:B0:F2:AB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/du0qs7cPkIYouNOMQFkLf2Ww8qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.42.0/24
80.97.49.0/24
Signature Algorithm: sha256WithRSAEncryption
76:41:9a:1b:a2:9c:db:a3:02:ae:bd:3c:da:b9:a9:04:e5:61:
c9:03:6b:cc:9b:aa:26:13:37:96:b5:d2:dc:3e:f0:2d:f7:c7:
b0:cd:aa:6e:03:50:0a:6c:26:fe:f0:86:67:85:77:91:e2:13:
c1:0e:10:9d:f3:26:cb:48:16:ec:5c:49:2d:3f:6f:88:54:fa:
28:e7:45:0b:54:b4:39:12:70:81:4b:a4:f4:03:38:be:f5:15:
9e:03:ae:96:fd:cb:18:c4:f4:ad:9b:d3:49:d7:42:c3:f9:01:
fc:4d:0d:0f:82:60:4f:ef:82:cb:58:07:d8:a7:e3:10:0a:c9:
b1:b0:19:15:e5:1c:43:bb:c4:60:2f:91:4f:89:94:e5:c1:8c:
b5:1f:f1:ca:96:92:b5:c0:fd:3a:41:d3:2c:f7:e4:64:49:01:
a9:c7:eb:21:3f:0c:ff:b9:cf:e0:1c:6d:ba:b0:ef:50:77:99:
ee:95:17:cc:1d:a9:54:99:4c:78:89:8b:fd:e3:df:8b:b3:31:
b3:40:12:e8:a1:71:b2:bd:87:f2:1c:ea:3e:e1:e5:16:0e:ba:
a2:e8:9c:fc:b6:33:52:d4:79:84:f8:ed:d3:63:4a:a6:e7:30:
8d:ec:49:4c:7d:90:01:f5:d4:f7:9d:6a:94:7b:67:68:4e:d7:
d8:43:c8:5c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEG1/yWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDUz
MTA5MTYxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzZlZDJhYjNiNzBm
OTA4NjI4YjhkMzhjNDA1OTBiN2Y2NWIwZjJhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJRnj2UzmEKVsX87zuvwWn0bFMmfbOHhuuaBFRFyjJo/0/kS
lZDMF5EdQZ+z83GPvG5R9p6kNYEOrZ7+pUjKVSbqCc2ze5tn/h6/gKBHfd2q31qY
xZuC4h9Ffq89pikV4+mRGO2lqac2LSsUhv8Kry5gpddz6r6KsAWS7nVr6Z+d9yhB
1OyideQ57JlxUWZTW4R+mEsv72kCDZkxovqpcgbvPeTEHH93Dlif3z0crvGom3D6
qyEqTbqTkWOXl8l4Lih3AY5u8MlXjHXx1bQ2ChQ3sf3jKzPDgI1wJpXuB6FT7sVl
b29qj4JM6S+xdrqdIMYoElBTAeXA9X1aB+fuCx8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR27Sqztw+Qhii404xAWQt/ZbDyqzAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L2R1MHFzN2NQa0lZb3VOT01RRmtMZjJXdzhxcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFBgKgMEAFBhMTANBgkqhkiG9w0B
AQsFAAOCAQEAdkGaG6Kc26MCrr082rmpBOVhyQNrzJuqJhM3lrXS3D7wLffHsM2q
bgNQCmwm/vCGZ4V3keITwQ4QnfMmy0gW7FxJLT9viFT6KOdFC1S0ORJwgUuk9AM4
vvUVngOulv3LGMT0rZvTSddCw/kB/E0ND4JgT++Cy1gH2KfjEArJsbAZFeUcQ7vE
YC+RT4mU5cGMtR/xypaStcD9OkHTLPfkZEkBqcfrIT8M/7nP4BxturDvUHeZ7pUX
zB2pVJlMeImL/ePfi7Mxs0AS6KFxsr2H8hzqPuHlFg66ouic/LYzUtR5hPjt02NK
pucwjexJTH2QAfXU951qlHtnaE7X2EPIXA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org