Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/lw6MGI5NBskebHXBpvACCgWrV14.roa
File: lw6MGI5NBskebHXBpvACCgWrV14.roa (raw, json)
Hash identifier: k2IHpDOyRkkpJUKyKLRWNK1EdZBjJDN6tU8O8aYbGAY=
Subject key identifier: 97:0E:8C:18:8E:4D:06:C9:1E:6C:75:C1:A6:F0:02:0A:05:AB:57:5E
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0182B4770113BCEBA04940818DFDD174B860
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/lw6MGI5NBskebHXBpvACCgWrV14.roa
Signing time: Fri 19 Aug 2022 04:57:54 +0000
ROA not before: Fri 19 Aug 2022 04:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212713
IP address blocks: 80.66.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b4:77:01:13:bc:eb:a0:49:40:81:8d:fd:d1:74:b8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Aug 19 04:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=970e8c188e4d06c91e6c75c1a6f0020a05ab575e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ba:f0:96:cd:ac:c7:71:0f:df:7d:c7:c9:00:
aa:e1:e9:57:b5:5e:8e:6e:92:55:b8:9c:ac:12:97:
fb:9f:56:aa:e4:21:0c:af:93:a9:d0:92:5e:7b:04:
7d:41:e7:b4:83:46:e1:9d:31:71:7b:9b:dc:d6:98:
50:88:a8:e1:90:25:8b:c7:bb:2b:fb:34:1a:48:9f:
24:d9:4d:39:5e:4b:00:27:1c:f6:cb:fd:64:25:46:
bc:62:79:a3:37:15:87:a7:79:d1:ef:19:c0:2d:4f:
24:84:c0:72:dd:48:52:b1:1a:b0:73:4f:e8:38:ef:
9d:ea:d3:f7:64:7b:d5:ff:36:63:4d:9f:ef:f0:1e:
5f:3d:22:00:c1:86:a4:8c:82:de:e1:38:03:5c:28:
25:e4:df:bf:3f:1c:61:d3:10:ce:2b:9a:35:07:37:
5d:e6:10:f8:67:4f:ed:ce:ad:17:4b:14:59:cb:9d:
72:31:ed:ca:8e:84:8b:9d:b0:21:e3:a2:0f:bb:b4:
30:9c:e4:56:51:0e:0d:1f:7f:47:71:02:1d:28:49:
b5:ee:bd:55:71:27:ed:83:40:4b:60:90:fc:04:eb:
93:d6:b2:d4:f2:81:7b:dd:6d:22:97:05:46:a0:e9:
7a:3b:cd:d7:1e:ce:48:f5:63:1f:fa:78:2b:c0:b5:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0E:8C:18:8E:4D:06:C9:1E:6C:75:C1:A6:F0:02:0A:05:AB:57:5E
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/lw6MGI5NBskebHXBpvACCgWrV14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.69.0/24
Signature Algorithm: sha256WithRSAEncryption
56:39:0f:07:df:d1:8b:5d:75:86:79:7c:f9:a6:f0:7f:c6:5e:
33:34:cd:71:01:b9:77:60:de:44:1f:e3:9e:dc:9c:aa:a5:a1:
b5:25:5f:93:7a:5e:9f:60:62:93:39:59:ec:ec:15:97:db:1e:
cd:0a:ab:ed:88:31:09:cd:d7:87:68:b6:5c:df:0b:29:eb:f2:
82:70:54:cb:92:0a:03:3b:48:7a:f2:bb:43:fd:24:2d:c7:d7:
3e:87:27:dd:93:f3:ed:37:e8:16:b3:bf:88:88:91:65:60:03:
fe:6a:c2:fe:92:03:90:a2:6b:d0:f7:b4:c3:84:02:69:ac:b4:
c2:1c:68:e4:8c:7b:de:b3:f3:ff:a5:30:56:8b:4c:18:3d:c0:
9d:39:d7:7a:c7:a9:e0:f9:2c:fb:45:aa:0f:90:f0:98:1b:f7:
0b:4a:dc:cb:cd:77:44:5c:04:cc:56:bb:fb:a2:37:e0:fb:33:
c7:f2:a6:c1:22:b4:80:88:1a:f7:67:ae:d5:50:2b:95:14:1a:
32:f2:8e:50:0a:23:24:b9:88:f6:36:e8:6b:ec:07:97:aa:1d:
3f:1e:ca:f1:86:54:d3:f1:43:74:a7:0e:ca:dc:73:a8:c7:a4:
d5:7d:51:01:d0:64:3f:7d:8b:bf:21:c4:a5:6f:d7:27:45:e6:
9e:c2:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:50 2024 by rpki-client on console-ams.rpki-client.org