Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/zT7HsnW0G5wakLDuRiodKAD0nPk.roa
File: zT7HsnW0G5wakLDuRiodKAD0nPk.roa (raw, json)
Hash identifier: UhbXICriAN1HwhwTM730DWtKou9OGUo/XQNC97EJf/Y=
Subject key identifier: CD:3E:C7:B2:75:B4:1B:9C:1A:90:B0:EE:46:2A:1D:28:00:F4:9C:F9
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 0A743231
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/zT7HsnW0G5wakLDuRiodKAD0nPk.roa
Signing time: Sat 01 Jan 2022 13:58:23 +0000
ROA not before: Sat 01 Jan 2022 13:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199493
IP address blocks: 80.243.232.0/22 maxlen: 22
80.243.233.0/24 maxlen: 24
80.243.232.0/24 maxlen: 24
80.243.235.0/24 maxlen: 24
80.243.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175387185 (0xa743231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Jan 1 13:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd3ec7b275b41b9c1a90b0ee462a1d2800f49cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:f5:2e:f3:6e:f0:d4:b6:e0:e9:02:5f:a1:
9f:e5:71:4e:be:f5:2c:b7:b0:4d:a0:d5:ab:91:30:
28:04:b4:2a:9f:95:cf:b8:e9:cb:1d:89:7a:5f:c2:
92:44:52:c6:c0:4a:33:02:48:09:f1:19:d2:e0:c4:
49:b6:4c:a4:4a:8f:68:3f:8a:4f:b6:bd:da:ad:62:
bf:42:4e:c6:0b:ac:f5:47:b8:44:b7:66:f4:e5:eb:
cb:82:03:20:5e:a1:10:b5:3d:ec:d2:af:11:ed:1f:
bb:78:e9:fc:ba:78:85:d7:d1:48:06:e1:41:e2:78:
3b:fe:02:b2:73:32:5e:b5:e0:87:c9:a7:d0:18:a2:
00:96:3b:ac:20:64:b4:f2:73:13:2f:9e:d7:0e:09:
9c:a2:1a:5e:c2:7f:3e:f4:ae:39:93:42:83:b2:6f:
76:47:12:2e:46:d3:da:11:dc:a3:f0:17:8a:2b:41:
b2:6a:33:eb:63:5a:ae:5e:28:52:27:6a:bb:de:cf:
70:e7:d0:c9:84:0c:71:0f:cd:1b:41:36:35:03:d4:
2b:bc:39:75:51:8e:5f:35:36:72:2b:ce:21:46:19:
06:38:57:1f:19:16:f7:d9:43:1c:b9:e2:b4:fa:2f:
93:98:57:5c:4f:d1:1b:2b:09:1a:eb:33:bc:51:f7:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3E:C7:B2:75:B4:1B:9C:1A:90:B0:EE:46:2A:1D:28:00:F4:9C:F9
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/zT7HsnW0G5wakLDuRiodKAD0nPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.232.0/22
Signature Algorithm: sha256WithRSAEncryption
18:0c:34:d2:23:d9:9f:ac:e6:92:19:1b:2c:ae:eb:23:99:fd:
60:3b:c2:50:ed:c7:21:8a:b0:f8:79:70:10:a5:c5:cf:79:71:
71:cd:7e:9f:38:17:94:c0:75:a0:c8:e0:1e:41:48:f0:3e:25:
98:c5:27:04:af:3c:5b:31:b2:02:df:39:34:6b:fa:36:8a:06:
08:ab:84:d6:1d:a5:1f:4a:18:25:e4:6c:d1:06:d6:e8:44:6d:
b1:61:8c:dc:39:5f:9c:f1:a3:44:e6:cd:b6:b7:75:02:92:c8:
b0:29:0e:e3:1e:f5:ed:f0:46:dc:08:3c:28:ee:7f:ba:c4:fd:
9d:0c:66:17:af:ee:61:3b:6a:fb:8a:59:7a:f1:27:74:56:5b:
43:53:b1:f1:a3:91:ff:28:84:50:05:56:4f:13:d1:93:e5:86:
df:c7:dd:66:73:ab:73:b2:98:06:c7:52:2c:0b:33:64:e9:05:
7c:20:f6:1b:82:3d:b7:8b:77:5f:5f:ea:a2:6c:1f:22:70:38:
23:97:8f:24:09:d8:bc:f9:0c:57:5f:16:72:7e:b8:3e:9a:63:
96:c3:41:70:5e:1a:05:7e:06:18:de:e8:42:d9:b2:78:54:e8:
5f:27:03:47:bd:dc:77:23:36:b7:7d:e3:f8:1f:05:f4:8d:1d:
50:8b:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:38 2024 by rpki-client on console-fra.rpki-client.org