Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/TlQfiwtka63CAZ8d8AXrBG1gpU0.roa
File: TlQfiwtka63CAZ8d8AXrBG1gpU0.roa (raw, json)
Hash identifier: cGzb/7TsqN5/34DB+lqhxiOkl+d3QnSHeqJQBdupJYg=
Subject key identifier: 4E:54:1F:8B:0B:64:6B:AD:C2:01:9F:1D:F0:05:EB:04:6D:60:A5:4D
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0183117A5EAFCEA577643D26DDF9C8825465
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/TlQfiwtka63CAZ8d8AXrBG1gpU0.roa
Signing time: Tue 06 Sep 2022 06:26:15 +0000
ROA not before: Tue 06 Sep 2022 06:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211849
IP address blocks: 80.66.77.0/24 maxlen: 24
80.66.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:7a:5e:af:ce:a5:77:64:3d:26:dd:f9:c8:82:54:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Sep 6 06:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e541f8b0b646badc2019f1df005eb046d60a54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f7:c6:86:1d:f9:cf:97:28:05:90:84:5f:dd:
36:4e:56:e9:25:2a:20:e8:06:25:6e:b2:64:5c:17:
54:50:83:90:4f:78:42:08:d0:11:c3:06:21:f7:1d:
e5:0e:0b:9a:32:37:5b:56:e1:ee:9f:2b:06:b7:9d:
f6:f5:23:98:12:cb:3c:a4:7e:4f:63:e3:eb:ea:07:
b1:84:0b:54:f3:5d:48:3e:b5:2d:22:b9:28:ec:62:
73:1c:32:08:2b:49:90:04:3f:37:c2:27:75:9f:4a:
18:d7:ca:2a:24:d7:9c:1b:14:ef:3f:08:3d:ac:b6:
69:35:36:5a:0a:75:55:e5:dc:66:d2:48:f6:b0:21:
27:1e:cf:ea:1c:8f:4d:45:b9:5a:5f:e3:5a:47:e1:
20:11:52:b7:9d:7b:a3:a9:6c:16:a5:53:d9:cf:4e:
34:ef:5b:c3:bb:4f:de:5f:ef:d2:22:c7:fd:1a:9f:
ab:dc:cf:f4:c0:d0:c8:33:8e:85:93:49:8b:29:7a:
81:2f:52:3d:5c:86:8b:7b:7d:c4:34:c5:4e:cb:41:
84:95:4e:5d:e0:e3:a3:89:70:6c:ae:01:ee:3e:85:
d4:ad:2b:cc:13:5f:fb:19:c9:0a:c7:fd:05:66:bf:
b1:70:ea:73:46:75:6d:f8:a9:69:56:4c:26:4e:b9:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:1F:8B:0B:64:6B:AD:C2:01:9F:1D:F0:05:EB:04:6D:60:A5:4D
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/TlQfiwtka63CAZ8d8AXrBG1gpU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.75.0/24
80.66.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fa:0e:e3:81:4f:98:78:d7:49:9a:19:14:f4:8c:bf:0e:43:
87:bb:e9:ca:20:e8:46:81:7d:29:d7:f0:70:58:77:09:2f:7d:
8c:09:e8:e2:31:ec:cf:a4:8b:cd:cb:33:88:4d:f1:e2:04:c0:
0e:ec:17:fe:90:61:23:90:59:5c:46:d0:0c:90:af:7a:b2:9f:
d8:77:d4:d7:b4:67:56:4a:5f:d6:7e:da:57:ab:bf:b8:ff:4c:
48:e7:30:6a:bc:39:74:0b:80:8b:a0:a0:ff:33:c3:32:c7:39:
38:ac:d7:29:f4:a4:7e:da:73:9e:3a:c8:68:2a:9d:30:1d:0d:
e1:1c:9f:76:a4:5c:1f:c0:67:87:75:91:29:db:71:3a:ab:06:
ba:47:8a:9f:3f:de:a6:b8:23:71:d6:71:2f:b8:25:67:de:2e:
60:c8:63:d7:5d:82:8f:8b:0a:8d:6c:57:df:77:41:36:96:18:
d7:6d:22:dd:ef:90:08:4c:f7:ad:11:88:e3:f2:ad:7a:16:06:
53:5c:e0:2b:51:6b:99:2d:1d:4a:e2:11:a1:50:de:a6:d2:ef:
fd:65:39:ec:98:d7:36:f5:bf:b4:67:36:6e:60:ab:6a:cc:81:
b4:85:20:99:22:03:6a:18:39:06:66:dd:96:58:33:03:65:30:
b9:39:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:36 2023 by rpki-client on console-ams.rpki-client.org