Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BqX-BbX6gJsnWCpQ-lz_endT0_c.roa
File: BqX-BbX6gJsnWCpQ-lz_endT0_c.roa (raw, json)
Hash identifier: CquWT6+wr7UIYZ5doGHvl5YSoRfOwswP4aiUvmZwpC4=
Subject key identifier: 06:A5:FE:05:B5:FA:80:9B:27:58:2A:50:FA:5C:FF:7A:77:53:D3:F7
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 04EC3E85
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BqX-BbX6gJsnWCpQ-lz_endT0_c.roa
Signing time: Thu 03 Feb 2022 06:04:59 +0000
ROA not before: Thu 03 Feb 2022 06:04:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20803
IP address blocks: 80.66.65.0/24 maxlen: 24
80.66.70.0/24 maxlen: 24
80.66.66.0/23 maxlen: 23
80.66.68.0/23 maxlen: 23
80.66.77.0/24 maxlen: 24
80.66.78.0/23 maxlen: 23
80.66.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82591365 (0x4ec3e85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Feb 3 06:04:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06a5fe05b5fa809b27582a50fa5cff7a7753d3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:46:95:b0:28:25:b8:90:f5:e9:b2:44:2d:
9a:9f:44:84:24:9e:6e:16:22:20:17:94:d3:d0:8b:
e8:91:b0:da:5b:7d:38:55:40:68:63:4f:db:71:fd:
60:09:a3:3e:f0:41:00:ba:23:57:80:80:05:32:a7:
d4:d1:af:72:de:34:67:3c:2f:4d:03:60:23:1d:96:
4f:fe:28:a0:b5:e0:f6:e6:ea:29:57:9c:0c:9c:fe:
c5:d7:64:dc:90:0f:e4:63:13:8b:2c:e1:ec:13:03:
7f:9e:6f:a5:a5:44:a1:7c:a5:31:43:9e:85:44:ec:
65:61:d7:6f:3b:66:0d:a3:3e:5f:52:2a:80:df:8c:
97:31:b2:af:e9:8a:1e:1d:65:7c:5d:1e:d1:4c:bf:
7b:5f:e2:28:e9:59:90:a7:4c:7e:3a:b3:4c:aa:56:
b9:01:76:0a:9d:58:57:d4:69:6d:49:98:f3:a5:c4:
5e:d6:e0:9a:64:81:75:d6:b0:db:18:a4:4e:55:fe:
6c:e2:97:ef:aa:1a:e9:8b:2a:da:01:1b:8d:8f:68:
98:dc:e7:95:24:77:76:f6:12:3d:eb:ea:89:2f:0f:
34:26:96:e0:8c:63:1a:10:7e:dc:a2:a2:72:e4:fc:
dc:28:9e:2a:1e:9a:44:f8:9a:af:83:b6:d5:ca:16:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:FE:05:B5:FA:80:9B:27:58:2A:50:FA:5C:FF:7A:77:53:D3:F7
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BqX-BbX6gJsnWCpQ-lz_endT0_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.65.0-80.66.70.255
80.66.75.0/24
80.66.77.0-80.66.79.255
Signature Algorithm: sha256WithRSAEncryption
78:1b:10:a2:45:a0:04:2e:ea:63:80:68:18:d4:7f:f9:1e:fc:
85:c6:ef:d6:86:e0:14:37:20:a2:84:55:85:54:40:4f:34:f7:
62:e2:96:cd:d5:93:5a:0b:8e:05:06:0b:1b:48:62:28:41:c4:
dd:d7:73:23:a8:f7:72:f5:2b:a2:f6:72:d7:92:a8:72:ed:04:
26:13:86:f9:20:fd:37:f3:00:2f:20:c4:90:1c:dd:64:a3:cf:
d0:37:5c:f0:c5:43:9d:55:86:15:d5:ac:ab:ac:93:cc:86:05:
38:ac:e8:89:6a:87:af:22:b2:60:af:c2:a6:8c:d4:8c:cc:a1:
42:c2:69:be:37:32:16:d8:0d:eb:42:da:e4:84:e0:4f:44:8c:
35:23:43:18:6c:a6:20:20:ab:8e:f7:17:b1:09:2c:0f:75:20:
ec:3c:94:16:2f:90:0c:5c:22:4c:7c:0f:6f:a9:c7:f8:f3:50:
c9:ae:b8:a0:48:ad:46:9d:b2:2d:b9:30:a1:d4:5d:15:16:65:
52:dc:22:b7:2b:2f:25:5c:67:91:aa:7c:da:9c:f4:15:de:1b:
c3:78:62:75:04:1f:ea:a8:ae:ef:33:28:95:2e:b5:f8:41:79:
7c:f6:f1:23:d8:d3:58:aa:84:17:2c:c7:6a:72:02:e8:3e:4c:
a3:97:f7:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-fra.rpki-client.org