Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/zBb2jH8DY_w8sWUc8FCUQKbBRFI.roa
File: zBb2jH8DY_w8sWUc8FCUQKbBRFI.roa (raw, json)
Hash identifier: C02qgDFyDpwDrTgKwNExICGa2a91ka+8gjz5rAlVCR4=
Subject key identifier: CC:16:F6:8C:7F:03:63:FC:3C:B1:65:1C:F0:50:94:40:A6:C1:44:52
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0FA7BF56
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/zBb2jH8DY_w8sWUc8FCUQKbBRFI.roa
Signing time: Sat 01 Jan 2022 00:51:10 +0000
ROA not before: Sat 01 Jan 2022 00:51:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394265
IP address blocks: 80.169.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262651734 (0xfa7bf56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 00:51:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc16f68c7f0363fc3cb1651cf0509440a6c14452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:67:cb:72:5f:4e:93:19:bd:87:92:30:1d:
65:90:a9:7b:ed:f9:dc:f7:e8:21:a5:93:34:fb:d5:
c0:47:91:c4:4c:5d:0e:5f:a1:b6:c6:87:77:5c:41:
d3:aa:cb:93:61:8b:4e:20:b3:58:a4:70:cc:23:f8:
e9:7b:7f:55:00:0c:35:2c:78:7a:27:3a:76:0b:e9:
04:80:75:ac:3d:9c:9b:ff:b5:d9:17:e4:d6:14:7f:
84:2a:07:d4:be:06:7d:34:32:9b:22:41:11:f2:dd:
fa:35:9c:7d:60:29:29:3b:df:ea:83:cf:48:e4:0f:
4c:fc:5d:f1:48:cd:2a:e2:fb:8c:7a:87:5c:4c:62:
e7:f4:ba:a6:66:c1:3a:f8:16:bb:be:17:6f:24:d0:
b4:e6:60:49:ca:8d:c4:6a:19:3c:a9:31:29:84:85:
da:e9:d1:c2:7e:b3:fe:99:38:5a:3d:75:4c:c0:c2:
17:e6:0a:6b:7e:7e:4d:48:27:ff:f6:b2:48:88:d0:
bb:ce:97:d4:11:f2:6b:c9:9f:0e:db:c7:c5:08:f8:
54:23:33:56:7c:ce:1a:f9:cb:63:a9:46:f6:5b:ce:
df:4a:f2:ec:56:10:c6:cc:80:a7:af:93:e8:99:7d:
0f:72:bd:f5:2e:8e:9c:1b:8c:e5:d9:48:85:71:3b:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:16:F6:8C:7F:03:63:FC:3C:B1:65:1C:F0:50:94:40:A6:C1:44:52
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/zBb2jH8DY_w8sWUc8FCUQKbBRFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.169.19.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4a:38:7d:f5:35:a8:f8:ae:7a:c5:74:70:7b:4c:f3:1b:f1:
c3:5a:e4:4f:46:1f:be:f3:68:87:aa:08:d6:92:e3:af:04:e6:
f7:72:7e:44:10:b4:ea:35:fb:d2:71:c2:7a:01:85:df:59:98:
16:aa:f4:be:6e:88:34:5a:e5:4f:ce:39:69:49:5e:ec:3f:8e:
6d:66:4d:86:2f:40:07:7a:e8:22:2a:ef:ae:b3:17:89:39:27:
71:cb:28:5d:ca:4b:c3:98:39:7a:d9:4c:d9:d5:dc:3d:49:e8:
73:7f:9a:62:00:ae:65:73:6c:16:34:e2:f9:c6:d8:cf:1f:15:
af:b4:ff:41:ba:11:7b:ff:83:e0:60:23:2b:6e:c4:01:13:26:
e6:06:d6:03:b3:9f:a6:8f:de:ac:b1:ca:9d:10:37:e8:9c:d7:
be:ce:2a:72:32:07:5d:25:b1:2e:1b:5f:13:97:b2:97:17:76:
58:02:9d:3e:c9:3e:25:ed:3e:44:68:4e:68:f7:75:2c:62:ab:
13:1d:ea:d4:f7:85:a1:00:9a:99:06:9d:d1:40:d0:57:ce:6d:
61:5f:08:9a:21:2b:ff:fe:40:c2:45:cd:10:20:7b:6e:e5:2d:
a7:68:c2:da:33:80:36:a3:cd:a6:ac:1b:8f:9a:2d:f4:5a:1c:
90:57:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:37 2023 by rpki-client on console-ams.rpki-client.org