Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/sqNQEpiKxc9Jo3xS2QibgW3i1hI.roa
File: sqNQEpiKxc9Jo3xS2QibgW3i1hI.roa (raw, json)
Hash identifier: ukW774Z0nfOEljzoxA5/XeCc88CMpacTVsN1mVztEDg=
Subject key identifier: B2:A3:50:12:98:8A:C5:CF:49:A3:7C:52:D9:08:9B:81:6D:E2:D6:12
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 3757581A
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/sqNQEpiKxc9Jo3xS2QibgW3i1hI.roa
Signing time: Sat 01 Jan 2022 04:59:29 +0000
ROA not before: Sat 01 Jan 2022 04:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57822
IP address blocks: 80.72.208.0/24 maxlen: 24
80.72.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928471066 (0x3757581a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Jan 1 04:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2a35012988ac5cf49a37c52d9089b816de2d612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:6e:0e:04:bb:6e:41:95:f9:53:43:b5:89:
be:2d:17:79:43:e2:68:c6:f4:dd:2c:0e:d3:9b:e9:
0b:a9:46:3c:80:6c:bb:2e:f5:ef:c2:f9:da:6c:09:
b8:3b:19:86:6b:a0:87:7f:3f:1f:48:06:6e:52:3b:
30:13:43:46:27:ea:2e:63:1a:4f:88:48:79:7b:3e:
11:64:0a:65:94:17:b1:9b:c4:49:c5:ee:7f:7d:07:
25:93:b9:06:fd:9e:95:d4:25:cb:0c:b4:92:51:52:
a1:c3:44:9c:b6:f9:10:6d:13:ef:28:41:31:ea:36:
c8:eb:1b:9f:89:8f:b4:74:8f:19:bc:4a:d5:9b:65:
4f:11:d6:2a:7c:b1:b4:79:81:8d:cb:49:e9:df:13:
23:f7:d3:2c:30:90:df:67:41:5a:b4:07:01:64:ec:
e2:b5:ca:c7:15:e2:a6:f1:05:85:79:95:90:6d:8f:
49:41:4b:2d:0c:02:a3:c0:e1:eb:bf:db:b4:81:99:
6a:3e:fe:e6:7d:e6:21:96:7e:ff:af:03:14:16:c9:
e0:0a:c1:fb:9d:70:f6:f3:d4:41:7f:4e:79:3a:1b:
0f:71:fd:16:56:e8:9e:b5:bf:6a:87:19:2b:a6:e0:
a5:b0:16:98:9e:63:17:f5:69:73:e4:e5:f5:12:4e:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A3:50:12:98:8A:C5:CF:49:A3:7C:52:D9:08:9B:81:6D:E2:D6:12
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/sqNQEpiKxc9Jo3xS2QibgW3i1hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.208.0/24
80.72.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d7:02:62:e2:cd:af:ce:eb:15:14:70:08:ef:60:ea:e9:15:
be:63:98:4a:45:fc:f3:20:25:81:3e:54:37:d9:f3:a0:93:45:
d4:8d:41:9a:41:88:46:64:bb:ce:38:b4:ca:c7:f8:2b:d8:83:
a2:6d:79:02:8d:1d:31:ba:00:ec:2e:24:a5:29:b0:2d:a0:a6:
80:dc:8f:8d:8f:d7:7a:31:fb:7f:62:b4:0a:be:b9:c0:77:43:
62:bb:b2:01:98:a1:84:5c:b6:94:d3:33:99:9b:9b:27:79:93:
bf:23:b1:fa:0d:d3:38:51:21:0c:08:c1:06:c0:df:21:bd:26:
cc:f1:f9:46:de:fe:eb:6c:9f:7c:c6:ac:c1:02:83:b9:a9:fd:
4b:b2:f6:7b:86:2c:ed:ee:ce:29:55:5c:e4:1d:60:fc:7d:ef:
3b:c3:90:09:73:21:7c:76:fd:68:5a:a0:30:7e:64:5d:09:c8:
22:d6:ef:f7:d9:09:9c:eb:ea:39:b1:b2:88:83:92:50:75:03:
30:4a:aa:59:5e:e5:5b:e6:10:7c:26:0e:50:e3:25:91:d7:35:
91:27:1c:56:7e:07:04:6c:7a:9b:c3:d6:02:b3:b1:6a:9a:59:
26:75:31:72:79:86:78:9b:65:f0:d2:14:7a:a5:fb:5c:a2:2d:
df:05:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:20 2024 by rpki-client on console-ams.rpki-client.org