Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/S9GQzDj4dI2LePpYGhbE0Rwyy7U.roa
File: S9GQzDj4dI2LePpYGhbE0Rwyy7U.roa (raw, json)
Hash identifier: NgcNvT1CeB9/irgm09M52SpXsKs+Ln3BhTOa4ljW/dw=
Subject key identifier: 4B:D1:90:CC:38:F8:74:8D:8B:78:FA:58:1A:16:C4:D1:1C:32:CB:B5
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0498623D
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/S9GQzDj4dI2LePpYGhbE0Rwyy7U.roa
Signing time: Sat 01 Jan 2022 15:04:27 +0000
ROA not before: Sat 01 Jan 2022 15:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 80.66.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77095485 (0x498623d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 15:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bd190cc38f8748d8b78fa581a16c4d11c32cbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:74:0c:fa:98:ae:18:00:1b:85:f7:f0:79:
35:05:4b:b4:1e:a0:9d:30:f3:9f:15:e7:9d:f5:99:
1f:93:80:c4:6b:76:ef:aa:bf:dd:83:e0:74:74:05:
d7:99:c0:a1:d0:b9:55:9c:e8:61:d5:f8:34:bb:67:
dc:41:2a:a4:00:af:a5:25:12:c6:de:53:2b:c8:f6:
2f:03:6d:5c:a3:84:0a:5f:fa:dd:17:22:63:a9:bc:
ec:b2:08:ce:b2:9e:0f:d7:6d:7c:6e:16:37:30:05:
38:1b:a2:2e:6a:6d:96:ce:2e:1f:54:ce:45:a2:ed:
df:f7:06:f8:d8:15:ef:d1:d6:47:e6:04:a6:d0:c2:
b5:08:cc:90:70:dc:78:f3:01:aa:49:aa:83:ec:85:
4a:fa:4d:2d:72:5b:53:a3:e8:5c:ef:b5:54:f9:64:
39:08:83:8e:bf:67:c8:a0:56:ca:d6:f2:1a:5b:14:
84:f6:f5:21:e3:fb:e6:f6:6c:ad:49:44:35:fa:9e:
9c:89:f0:0f:fd:f1:92:d5:4c:6c:28:fd:b8:d0:0d:
1c:67:d6:08:46:a3:b3:89:25:3e:ef:3a:12:05:62:
75:31:08:4b:22:ea:23:7b:69:26:86:ce:c7:80:b9:
00:17:ab:a8:02:9d:22:08:ae:08:c4:57:5b:71:d1:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D1:90:CC:38:F8:74:8D:8B:78:FA:58:1A:16:C4:D1:1C:32:CB:B5
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/S9GQzDj4dI2LePpYGhbE0Rwyy7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.88.0/24
Signature Algorithm: sha256WithRSAEncryption
84:35:0b:b4:1e:5d:94:fc:52:ef:58:4b:31:63:fc:67:18:39:
8d:cf:f9:35:a6:4f:8b:e8:c2:28:d1:be:fe:d7:32:c7:29:0b:
1b:53:61:ac:d7:f6:e8:c7:6a:ec:da:5f:5a:bf:ab:cf:9c:f7:
27:91:48:d4:91:aa:cc:ce:5a:0e:a8:aa:ad:26:0e:e0:0f:30:
e8:82:5c:15:b7:25:08:29:f2:98:08:ce:62:be:9c:bc:3a:43:
39:7a:57:84:51:21:d5:0d:cd:08:52:ec:57:d5:ec:14:81:a5:
75:89:ca:de:3e:9c:d1:62:c4:26:68:45:59:b7:31:03:fa:f7:
9e:11:1e:70:18:fb:0b:cf:1e:c6:92:e9:a9:51:7d:f7:37:36:
45:87:42:78:6c:e1:db:7d:df:7c:3e:4f:53:6a:06:6e:3d:66:
b4:94:a5:5d:82:03:dc:ff:8d:80:cb:d8:45:d4:d8:1f:3e:d8:
90:06:2a:46:0d:36:96:08:91:9d:7f:8f:f7:f8:05:ff:be:fe:
fd:58:bb:79:b6:3e:d3:08:53:eb:73:4b:da:74:a3:3f:b3:50:
d0:03:07:96:53:2b:90:f9:13:b8:8f:ef:30:bf:2f:f1:a1:fb:
3e:4c:18:dd:aa:ed:bb:ec:41:a4:e8:00:93:de:9c:a6:aa:b9:
82:4a:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-fra.rpki-client.org