Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/SEhjZVRWS4st0qS5Yr6xAl4fo5g.roa
File: SEhjZVRWS4st0qS5Yr6xAl4fo5g.roa (raw, json)
Hash identifier: 2BVaMWcMvxWL+VEJ2eol6M3g8a3ttscr2Cr6QZaZc3E=
Subject key identifier: 48:48:63:65:54:56:4B:8B:2D:D2:A4:B9:62:BE:B1:02:5E:1F:A3:98
Certificate issuer: /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial: 018262A259BA67B567781EEF945118E80255
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/SEhjZVRWS4st0qS5Yr6xAl4fo5g.roa
Signing time: Wed 03 Aug 2022 07:36:23 +0000
ROA not before: Wed 03 Aug 2022 07:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33871
IP address blocks: 80.67.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:a2:59:ba:67:b5:67:78:1e:ef:94:51:18:e8:02:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
Validity
Not Before: Aug 3 07:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4848636554564b8b2dd2a4b962beb1025e1fa398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:04:50:83:0d:fd:c6:c8:d2:5a:0f:5c:ac:
e5:a9:3a:54:27:cc:5b:2e:82:f5:43:14:59:14:88:
97:38:ff:67:7e:12:07:6c:0b:88:50:1c:17:c5:dc:
b3:52:49:fd:8c:2f:eb:4e:18:f7:b5:00:3e:f2:42:
19:d1:3f:20:25:42:5e:2e:7f:b2:09:be:06:de:8a:
bd:ff:bf:3d:42:05:1a:99:8f:66:c7:74:c5:95:46:
d3:17:48:5e:46:95:c0:9d:69:71:51:58:b0:b5:a3:
29:0c:dd:af:42:c3:7d:e7:8f:7c:78:76:ac:6a:71:
fe:8a:e1:08:c3:a7:69:c2:7a:86:a3:69:80:38:f7:
97:53:db:bf:56:99:7d:f1:c0:f2:a8:f2:2d:20:1c:
ea:20:3b:e1:7e:7c:bc:ec:48:08:b9:fa:d1:aa:c6:
be:a6:04:4e:22:46:fe:b6:73:5e:b2:fb:ab:ba:56:
fd:ef:9d:6a:cb:7d:3c:c1:2e:bb:21:6c:16:b6:b0:
e6:ae:08:9a:a1:ed:db:21:ac:8d:af:2a:52:26:8a:
53:e4:e2:7f:25:d6:b0:90:ba:7d:8f:35:8f:7d:08:
45:1b:46:fc:71:21:1d:17:05:b2:3f:a7:b1:5d:18:
6e:42:0b:55:eb:cf:12:26:b5:ba:9d:23:4e:9e:e3:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:48:63:65:54:56:4B:8B:2D:D2:A4:B9:62:BE:B1:02:5E:1F:A3:98
X509v3 Authority Key Identifier:
keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/SEhjZVRWS4st0qS5Yr6xAl4fo5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.208.0/20
Signature Algorithm: sha256WithRSAEncryption
72:0c:c3:ec:f1:44:40:74:41:9b:4b:80:22:85:7d:d3:4f:fd:
60:57:03:70:16:a2:28:7e:b6:60:23:fc:1a:e2:89:72:c4:c3:
23:63:61:e8:c1:ca:49:27:ce:79:f3:ac:ff:45:5f:67:20:9c:
fc:58:1a:b4:f7:a5:ff:ba:bf:87:82:99:d6:6b:45:11:4b:a5:
58:cd:62:a1:eb:81:21:80:47:d8:2d:12:a3:34:de:88:2c:0f:
f5:ce:f7:8c:f6:4c:01:b6:d4:d5:20:32:7f:76:92:64:80:8a:
bc:70:94:4a:23:4a:ae:37:65:b5:43:58:95:e8:2e:9f:25:f4:
5e:56:a1:be:e0:9e:96:8e:30:2e:64:a9:5c:1c:01:c5:ad:39:
64:a0:fa:fb:72:4b:ec:39:8b:03:dc:df:02:33:33:11:8b:e5:
f4:5e:60:92:36:25:dc:f7:cb:9d:ae:a7:8f:4d:6b:64:4c:ac:
af:fb:0f:92:94:3c:80:9a:27:74:2b:eb:eb:00:ca:98:64:41:
29:23:aa:30:e3:92:2e:26:d2:b7:c1:97:b4:c8:7f:1e:6a:b8:
c0:18:e8:3c:fb:b6:1c:78:c8:84:91:7d:03:0d:ab:95:06:64:
57:48:c8:47:9c:4a:4a:be:89:ed:73:b7:8a:4d:eb:8d:86:e4:
8d:cb:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:51 2024 by rpki-client on console-ams.rpki-client.org