Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/JFc9aJ-FmlZ9CKPy9lYQ5TDpJCQ.roa
File: JFc9aJ-FmlZ9CKPy9lYQ5TDpJCQ.roa (raw, json)
Hash identifier: jw99A6Wcvi4kcvcEntoIOxq8GhaUuMz7tM9ZjrDrLXc=
Subject key identifier: 24:57:3D:68:9F:85:9A:56:7D:08:A3:F2:F6:56:10:E5:30:E9:24:24
Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial: 30173684
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/JFc9aJ-FmlZ9CKPy9lYQ5TDpJCQ.roa
Signing time: Sat 01 Jan 2022 15:03:07 +0000
ROA not before: Sat 01 Jan 2022 15:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35074
IP address blocks: 80.89.176.0/24 maxlen: 24
80.89.177.0/24 maxlen: 24
80.89.178.0/24 maxlen: 24
80.89.179.0/24 maxlen: 24
80.89.180.0/24 maxlen: 24
80.89.181.0/24 maxlen: 24
80.89.182.0/24 maxlen: 24
80.89.183.0/24 maxlen: 24
80.89.184.0/24 maxlen: 24
80.89.185.0/24 maxlen: 24
80.89.186.0/24 maxlen: 24
80.89.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806827652 (0x30173684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Validity
Not Before: Jan 1 15:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24573d689f859a567d08a3f2f65610e530e92424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:a5:29:0c:8a:66:73:d5:9b:89:22:09:c4:
d2:ab:77:0c:84:97:0d:04:fb:f8:f0:d1:52:88:38:
77:c1:e6:4b:72:8c:72:b1:89:19:44:15:e0:29:b7:
de:b2:fb:08:3f:59:c1:57:10:1a:1f:12:0f:76:6f:
18:a5:5b:61:b9:80:41:33:61:d7:ba:a6:51:b7:24:
d7:22:d3:2d:ac:fc:84:92:8e:4f:9c:a2:2c:89:df:
4e:34:8b:22:13:78:00:46:62:84:65:e1:ba:2c:11:
44:fc:cf:09:1f:dd:24:e9:65:a4:7a:ce:06:1d:2f:
c6:b1:2a:66:90:12:4f:27:c0:07:d6:54:b3:78:73:
15:15:46:a5:88:73:82:08:f8:c8:4a:c9:99:2a:74:
f3:46:1e:c1:91:0b:49:cd:97:7b:94:5c:89:77:eb:
de:71:19:83:74:a3:63:bc:ce:e5:12:2f:ac:83:2a:
c7:82:21:06:80:24:b1:08:ff:c4:f6:27:57:da:6e:
eb:fb:dc:b4:a3:48:c2:ae:70:14:26:f4:79:04:e5:
74:6f:e3:f1:f6:0c:dc:d4:2d:89:c7:d4:ec:be:19:
41:4b:8d:e3:f1:ef:6e:30:7a:36:d8:86:84:93:9e:
a6:da:0f:82:2c:09:4e:e9:12:d9:69:4c:04:ec:57:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:3D:68:9F:85:9A:56:7D:08:A3:F2:F6:56:10:E5:30:E9:24:24
X509v3 Authority Key Identifier:
keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/JFc9aJ-FmlZ9CKPy9lYQ5TDpJCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.176.0-80.89.187.255
Signature Algorithm: sha256WithRSAEncryption
66:34:b3:76:37:b5:73:fb:e2:79:fc:1a:ce:6f:c0:6a:5b:e5:
15:f6:5e:8d:93:7a:6e:8e:f5:c4:12:fa:64:68:f5:bb:5f:78:
4d:af:8c:96:5f:e4:22:5e:47:7e:cf:50:73:2b:5f:be:f8:ce:
16:15:70:c2:09:c9:f4:6c:fd:82:b7:d2:c8:19:2c:2b:f2:88:
fd:b9:c7:d0:5a:7b:08:ef:5c:38:ee:74:e4:8a:cb:96:9a:cf:
a9:b0:09:c3:9e:04:a0:ac:23:21:46:cd:47:ea:a5:1f:05:11:
c8:83:99:b5:59:96:1b:b4:23:72:c4:5e:d3:f8:bd:f9:ba:1c:
78:26:6b:db:4f:5e:b7:70:d8:26:de:76:76:d1:9c:ce:3b:f8:
c9:ac:96:9e:33:c5:01:13:07:b2:82:5e:fe:73:a2:29:56:56:
f4:a3:13:c6:7c:08:d3:20:8a:76:27:fc:e9:3e:bc:55:4f:2d:
5a:d9:90:a3:6c:5b:89:57:5f:a1:65:2d:a0:85:07:e7:46:b6:
43:37:ff:63:83:e6:67:e9:0a:61:cb:2c:bb:55:63:94:1d:d7:
04:ef:bf:29:b7:4f:8d:21:f0:9f:da:10:2d:c4:ea:b5:c3:32:
fb:65:65:69:09:32:7a:6a:b5:7b:66:a2:ef:da:ca:15:a3:18:
2c:f3:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:10 2024 by rpki-client on console-ams.rpki-client.org