Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/pc40xm6ceZ8gdy0PTaiOE2oZBoc.roa
File: pc40xm6ceZ8gdy0PTaiOE2oZBoc.roa (raw, json)
Hash identifier: 2v+K16kPBoPpugdv7ZgcLJWFh8cJNuvOAWAK6hgKC4o=
Subject key identifier: A5:CE:34:C6:6E:9C:79:9F:20:77:2D:0F:4D:A8:8E:13:6A:19:06:87
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 05247CFB
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/pc40xm6ceZ8gdy0PTaiOE2oZBoc.roa
Signing time: Sat 26 Feb 2022 05:50:51 +0000
ROA not before: Sat 26 Feb 2022 05:50:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20803
IP address blocks: 80.66.65.0/24 maxlen: 24
80.66.70.0/24 maxlen: 24
80.66.66.0/23 maxlen: 23
80.66.77.0/24 maxlen: 24
80.66.78.0/23 maxlen: 23
80.66.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86277371 (0x5247cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Feb 26 05:50:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5ce34c66e9c799f20772d0f4da88e136a190687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:56:e2:43:4c:00:5f:58:7e:d8:57:e7:0c:
a2:2b:60:9d:a1:b8:a6:58:08:48:27:68:ff:5b:4f:
0a:bc:b4:c1:56:c2:40:bc:b5:e0:8b:db:54:cc:32:
a3:1a:9a:34:ec:af:c7:e0:a7:2e:ad:45:bc:47:90:
f3:9a:0a:aa:bf:86:72:61:74:ba:87:2e:1c:4b:c6:
e0:5a:bf:47:8e:a3:82:1f:75:d1:a3:b5:be:28:ab:
48:20:f6:37:9e:cf:52:25:36:d8:28:6c:35:3d:ea:
99:3b:8d:d0:07:a9:cb:bc:af:fa:e3:e8:b9:0d:ef:
b1:41:34:57:e8:e6:39:6e:5d:9d:2f:8f:ff:af:9a:
6d:d4:90:70:78:08:1b:b1:15:33:cd:55:d4:26:e0:
19:6d:4a:b8:8a:9b:ee:76:69:61:00:74:3d:26:68:
f4:02:e4:ee:fe:92:80:88:54:3f:bd:1e:b1:a0:ad:
50:bb:04:d1:05:4f:56:4b:ad:6b:49:40:a4:f5:53:
32:61:b5:b8:b8:b1:f0:8f:ac:c2:88:0c:8e:80:5b:
7d:13:a4:bd:b8:cf:1b:8f:7c:a0:01:57:d3:cb:fb:
93:c9:99:59:ce:11:22:d2:b3:c7:68:00:03:ad:ee:
1e:86:0a:2c:48:ca:e8:6a:2c:df:9b:90:c7:46:01:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CE:34:C6:6E:9C:79:9F:20:77:2D:0F:4D:A8:8E:13:6A:19:06:87
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/pc40xm6ceZ8gdy0PTaiOE2oZBoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.65.0-80.66.67.255
80.66.70.0/24
80.66.75.0/24
80.66.77.0-80.66.79.255
Signature Algorithm: sha256WithRSAEncryption
64:a3:15:e9:3c:d9:48:35:74:b7:91:71:fc:60:b7:d0:24:f3:
1a:64:fa:1d:92:47:e3:bd:ca:e5:ac:75:2e:26:aa:ac:0e:ed:
8e:70:8f:1c:3f:79:30:42:41:40:df:f8:0c:a7:fe:5e:af:73:
51:87:c4:fd:75:fe:67:e3:2a:88:36:1d:35:09:cd:ff:a9:2b:
8b:9a:a7:5b:80:d2:fc:dd:29:56:4d:60:52:f5:d9:0f:5c:dd:
52:0b:fa:fa:24:67:05:a4:18:48:29:4a:f6:a9:46:68:e8:15:
e0:32:e5:02:1f:3c:b0:b7:f0:77:04:bd:a3:50:87:a6:ef:6c:
d1:db:a8:54:80:6b:60:00:60:3a:79:87:21:f5:df:43:2a:a9:
de:82:b1:38:ed:56:de:df:23:7a:55:74:25:36:7f:8e:ac:f5:
14:81:cc:7f:74:c1:3c:49:57:b1:5d:a5:74:bd:6a:cd:75:06:
fc:81:ec:f6:4c:39:1a:6c:34:71:48:6b:29:6b:9c:af:eb:5b:
29:05:28:24:d3:2f:59:44:f9:43:23:d4:19:03:20:e8:bc:ea:
d3:87:60:81:ab:69:f1:64:39:b2:ae:89:05:d4:2a:95:a5:f0:
75:8b:ae:58:f8:c3:ba:06:41:54:29:fc:54:8f:e7:6b:f3:78:
c9:40:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:36 2023 by rpki-client on console-ams.rpki-client.org