Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9m5U_TGoSH1KPrzwRX9Dhjfaz28.roa
File: 9m5U_TGoSH1KPrzwRX9Dhjfaz28.roa (raw, json)
Hash identifier: QyKGR7e59jw5zAnBLrG91rf8l3jzA87UT79c7/R4Pbk=
Subject key identifier: F6:6E:54:FD:31:A8:48:7D:4A:3E:BC:F0:45:7F:43:86:37:DA:CF:6F
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 014977E1
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9m5U_TGoSH1KPrzwRX9Dhjfaz28.roa
Signing time: Sat 01 Jan 2022 03:55:09 +0000
ROA not before: Sat 01 Jan 2022 03:55:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 80.94.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21592033 (0x14977e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 03:55:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f66e54fd31a8487d4a3ebcf0457f438637dacf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:d9:20:8d:4d:8a:5a:92:4e:c4:37:a5:3c:
ea:99:c0:bd:b6:2d:2e:c3:63:f1:98:99:7b:ac:e9:
c7:b2:b4:b3:ac:d2:04:ee:21:34:9f:d3:4f:4c:e2:
33:24:1e:c0:86:99:8c:a4:80:e8:69:dc:67:db:dd:
d1:d2:9c:0c:d6:9b:7e:03:1e:11:a5:84:41:5b:73:
5e:98:5d:d3:6a:43:e9:5c:a3:64:79:ea:3b:52:9b:
26:d6:9a:e5:1d:20:c3:fe:0c:9b:de:45:b9:6e:f6:
51:33:83:0d:52:c6:d6:9e:d4:f6:04:ab:e1:28:38:
b1:40:1d:a3:58:c3:8d:a3:d5:88:9d:14:7f:af:d8:
18:1d:e3:42:4e:43:dc:d7:7c:51:b4:5d:f2:77:90:
f1:8d:f8:e5:01:0e:86:2a:19:30:40:46:ef:ca:45:
1b:fa:ef:ff:ac:58:ec:81:b2:fe:f4:9c:21:6b:32:
c5:55:01:b6:9d:f1:9a:03:73:85:c8:ef:ee:96:6e:
10:8b:8f:7a:66:cf:d3:25:03:36:19:6e:e7:28:e9:
f5:c1:8e:19:37:df:bf:2e:9b:08:52:cf:b6:f6:a1:
12:e6:e9:af:5b:db:65:7e:b1:5b:41:6a:80:ab:64:
25:3f:72:0d:ae:82:38:60:a7:28:ad:73:02:b7:5f:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6E:54:FD:31:A8:48:7D:4A:3E:BC:F0:45:7F:43:86:37:DA:CF:6F
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9m5U_TGoSH1KPrzwRX9Dhjfaz28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b1:cc:ad:4c:db:60:c0:29:bd:28:39:a3:32:e0:a2:15:6b:
27:00:f3:bd:7b:57:e3:fc:8b:31:77:ee:09:4c:77:9e:fe:2a:
9f:f5:46:e3:ea:eb:e1:10:66:86:c3:e0:a8:c6:39:d1:94:27:
19:24:26:fc:e6:9f:15:e6:a4:14:b4:a8:80:22:1e:af:9c:39:
8a:1d:ff:3a:e9:23:74:48:4a:ec:0b:f1:79:51:a0:1b:86:34:
c4:e2:4e:90:35:12:e6:60:a4:f2:b9:b0:e4:92:e3:37:22:92:
78:69:9a:91:95:d7:84:ef:9b:8c:31:17:b5:12:76:41:bf:86:
0e:fa:49:3b:a8:b7:d3:b0:53:6a:66:9a:1a:9b:5a:66:f0:ef:
a8:0e:82:69:c4:4b:10:5a:d6:eb:8a:60:c9:66:23:9e:07:4a:
7b:99:84:09:4e:51:6b:36:db:81:c5:67:a0:83:a4:50:c0:de:
b2:86:4d:4e:6a:b4:18:a9:a8:d8:7e:44:6f:a0:dc:90:fb:5b:
5a:f1:aa:4f:60:55:45:77:1a:5f:f7:6a:a7:2c:b0:7f:0e:f6:
f1:0c:ca:ae:e8:09:ee:7f:cb:4c:7b:7e:d6:40:c8:9c:f2:3e:
be:f7:20:f2:a9:1c:9e:ae:9a:d7:c1:28:ef:86:6e:ff:77:db:
99:cb:fd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:54 2024 by rpki-client on console-fra.rpki-client.org