Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/B6nnHfvIxRbRzwan-t8JX5okB-E.roa
File: B6nnHfvIxRbRzwan-t8JX5okB-E.roa (raw, json)
Hash identifier: 3XfV5kR/5kJ8dlEN+Q8qDsZQFDZO8AdKlnduG/P5Ipk=
Subject key identifier: 07:A9:E7:1D:FB:C8:C5:16:D1:CF:06:A7:FA:DF:09:5F:9A:24:07:E1
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 4438F50E
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/B6nnHfvIxRbRzwan-t8JX5okB-E.roa
Signing time: Sat 01 Jan 2022 09:54:48 +0000
ROA not before: Sat 01 Jan 2022 09:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2792
IP address blocks: 80.159.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144583438 (0x4438f50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 1 09:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07a9e71dfbc8c516d1cf06a7fadf095f9a2407e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:e7:dc:47:cf:7e:b5:55:2f:e8:43:1f:c6:
52:a3:96:95:69:1b:e6:47:4d:04:5c:5a:56:bd:bf:
0d:be:ff:0b:81:d9:20:21:c5:4d:d1:6c:c3:ee:d5:
03:46:4b:d6:19:4a:ed:3c:dd:38:85:20:68:b1:5b:
bb:59:37:4b:16:99:f8:ac:3c:bc:11:3d:48:bb:3e:
aa:82:2c:c4:be:e4:80:56:e2:c7:b3:b1:c8:28:39:
0a:4f:42:89:10:25:6f:4d:74:78:c1:fc:40:27:a3:
05:96:c9:14:b9:fb:2c:e2:3b:5a:19:fd:de:2f:db:
8f:7a:56:5e:cf:c0:86:7e:36:ab:23:57:60:85:7f:
e6:e8:8c:01:d6:9a:a3:d7:45:26:75:16:9f:4f:9e:
39:fc:cd:79:e7:09:fe:3d:36:0c:cd:8b:77:09:ab:
a8:1b:f0:5b:64:10:18:56:75:fd:1a:4f:b8:0a:7b:
b5:5f:dd:ee:71:9b:93:79:32:88:9e:7a:de:4d:d3:
5f:f7:da:28:00:82:cb:eb:06:23:df:02:f5:31:4b:
cc:5b:b0:32:1a:28:3e:05:17:bf:71:ac:83:ba:20:
06:4d:9d:34:e2:c3:a0:c9:fc:a3:39:9b:e9:f5:f1:
17:ed:fd:e4:12:25:58:10:81:73:b0:37:68:f8:ed:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:E7:1D:FB:C8:C5:16:D1:CF:06:A7:FA:DF:09:5F:9A:24:07:E1
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/B6nnHfvIxRbRzwan-t8JX5okB-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.159.224.0/19
Signature Algorithm: sha256WithRSAEncryption
31:d9:05:c7:8c:62:16:c7:d0:75:b2:e6:f5:d3:2f:c4:b3:e0:
11:3f:e9:77:15:f1:f0:d3:7c:8e:ff:02:c8:2e:3e:a4:b9:e4:
ee:eb:b7:11:64:f1:52:87:7a:a8:fc:a5:69:44:5d:41:50:52:
f9:4c:60:5e:fb:78:e8:a8:7f:ed:5a:1a:11:68:a7:f7:39:6a:
55:8d:28:e6:97:48:da:2a:7a:5b:2d:f5:e7:ab:62:af:48:0f:
67:5e:03:69:12:22:c3:fe:1f:5b:07:bf:0c:9f:80:1f:97:78:
b2:32:ed:a8:d1:21:46:5b:11:74:18:9e:e8:51:4b:74:48:2a:
d4:b5:2e:33:84:d9:ea:e8:9d:08:c0:d6:47:1c:d8:a2:b9:5d:
73:e3:e8:92:81:39:1d:81:16:f1:41:97:d2:f7:36:8c:a0:9a:
76:eb:f0:6f:09:59:af:33:b2:85:66:6e:50:c0:bb:a8:1a:66:
c7:5e:7c:9c:31:82:39:a4:04:e7:27:bd:72:6c:cf:eb:85:8b:
10:6a:f1:25:55:fd:23:f7:b4:88:3b:48:6e:ed:0d:70:ea:23:
e7:6b:14:95:bc:0a:88:15:a9:fa:1c:ac:c3:03:8f:35:e6:ab:
a1:1d:30:53:9b:82:c7:51:8f:08:b2:97:8c:a7:6d:25:f9:f8:
52:b6:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:55 2023 by rpki-client on console-fra.rpki-client.org