Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/fvDYZPgEWWO9SIa8vGTUWqBrBV8.roa
File: fvDYZPgEWWO9SIa8vGTUWqBrBV8.roa (raw, json)
Hash identifier: 1puxc+tDh91C2vQ7kMmxSzB4i81vZskW5wA06MNIV+8=
Subject key identifier: 7E:F0:D8:64:F8:04:59:63:BD:48:86:BC:BC:64:D4:5A:A0:6B:05:5F
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018365678C89148FDED00397BBDFEC25262E
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/fvDYZPgEWWO9SIa8vGTUWqBrBV8.roa
Signing time: Thu 22 Sep 2022 13:33:48 +0000
ROA not before: Thu 22 Sep 2022 13:33:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57428
IP address blocks: 80.66.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:67:8c:89:14:8f:de:d0:03:97:bb:df:ec:25:26:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Sep 22 13:33:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ef0d864f8045963bd4886bcbc64d45aa06b055f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:47:5f:01:5c:eb:f5:73:5d:b2:6a:0e:ab:
2a:c4:9d:40:c0:bd:1f:27:38:a3:72:b8:29:a8:c4:
70:02:95:59:e9:98:f7:5c:c5:b4:43:32:be:35:fc:
42:d2:0a:5c:ca:6a:08:df:7f:12:e4:e0:e5:c4:65:
a8:6a:12:9c:67:82:cc:bb:e2:eb:31:54:fb:4e:a6:
c4:ee:c6:7e:34:6e:f9:27:79:c7:bd:4a:1b:28:91:
46:0b:11:bd:2c:02:04:ac:1d:f9:09:1d:1d:0f:01:
52:2a:58:b4:19:db:55:b9:95:ec:f6:fa:52:da:97:
85:11:ba:34:9c:c1:9c:f6:bd:7f:95:de:e7:80:39:
b3:1c:e2:57:2a:8c:93:eb:3f:12:24:c4:e1:99:61:
42:51:b2:9a:3b:d4:42:67:25:8d:c6:27:ca:24:c3:
24:89:78:d5:c3:50:80:88:13:69:42:9b:43:3c:1f:
2e:25:db:eb:1e:2d:eb:c8:dc:1c:f5:e6:d9:3a:a7:
4f:70:a2:d7:32:c2:08:a3:ae:78:b0:98:0c:43:c0:
61:47:15:20:a2:e8:bb:2c:b6:f9:6c:24:f7:ca:56:
58:68:ae:fe:5f:1b:b1:f5:4f:76:50:fb:82:c7:c7:
0d:43:a3:8a:ae:bd:12:f6:09:35:23:c2:78:21:77:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F0:D8:64:F8:04:59:63:BD:48:86:BC:BC:64:D4:5A:A0:6B:05:5F
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/fvDYZPgEWWO9SIa8vGTUWqBrBV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:da:98:13:aa:00:c3:ca:49:97:21:14:40:d3:84:9e:7b:dc:
77:5e:4c:29:28:ae:ed:46:67:7c:5a:a6:23:a5:38:e0:2e:a0:
9f:80:77:cf:b1:76:8b:dc:43:7f:04:f6:08:db:ca:b3:e7:7a:
31:c1:35:51:d0:25:36:ca:a4:b1:4f:d6:ee:2e:e2:08:49:de:
b4:c8:6a:d2:e2:35:d5:36:5a:f1:cb:1f:7b:7f:8c:dc:6b:43:
c3:d1:d2:13:ff:ae:db:04:6f:86:15:4c:58:52:dd:81:33:8a:
02:c2:fb:c8:28:ea:fb:65:61:3b:be:79:a4:9f:1e:cc:aa:c2:
e4:37:0e:d4:bf:22:58:39:09:d6:18:da:16:15:de:1e:c8:4e:
75:ea:3b:36:ed:8d:c6:d6:cb:8c:bf:17:8a:a3:e8:84:6c:70:
ad:d4:3a:a9:6f:5e:43:66:d6:94:89:bd:56:62:e9:0e:7e:5e:
94:8d:d9:23:7b:e9:b7:82:be:14:b2:f1:a5:bc:3b:1a:5e:d0:
f5:67:58:1e:fe:c5:e3:30:81:2d:a5:20:40:bc:73:88:15:25:
a5:c4:01:c9:cf:d2:d5:33:e4:73:ff:6a:01:c0:b1:36:c9:56:
e8:5c:e6:e6:42:8e:8a:51:1a:35:20:e8:4a:2a:78:2f:9e:7e:
dd:90:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:50 2024 by rpki-client on console-ams.rpki-client.org