Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/o38dgS8cWvNUxKJ-l3_OV3JQaD4.roa
File: o38dgS8cWvNUxKJ-l3_OV3JQaD4.roa (raw, json)
Hash identifier: eSo8ppBzmC3G138q1aoV54yo268PMXK6c4M9Iu+XgII=
Subject key identifier: A3:7F:1D:81:2F:1C:5A:F3:54:C4:A2:7E:97:7F:CE:57:72:50:68:3E
Certificate issuer: /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial: 0188BD819D60495D14DE553D2C3031DA8A86
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/o38dgS8cWvNUxKJ-l3_OV3JQaD4.roa
Signing time: Thu 15 Jun 2023 05:22:48 +0000
ROA not before: Thu 15 Jun 2023 05:22:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205368
IP address blocks: 80.86.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:81:9d:60:49:5d:14:de:55:3d:2c:30:31:da:8a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Validity
Not Before: Jun 15 05:22:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a37f1d812f1c5af354c4a27e977fce577250683e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6c:53:02:d3:96:50:07:c7:f5:7b:ca:6e:5d:
26:eb:16:dc:d6:68:88:39:a4:c5:99:0a:86:b9:06:
f7:86:c9:c5:6f:ff:bf:21:70:9e:b4:98:ea:db:45:
0b:18:e7:1b:20:b9:6d:68:ed:56:1c:56:71:9f:37:
82:b9:30:ba:93:27:a9:c6:69:48:ed:66:95:45:35:
2c:ae:87:f0:19:0c:07:b4:54:b2:7c:97:7d:75:49:
68:00:cb:5b:26:8d:f7:da:dc:89:17:00:a6:c9:4e:
ea:77:a4:a0:27:30:ed:da:1f:cd:89:51:06:bf:89:
41:56:92:05:23:36:34:17:2d:43:57:35:e4:cb:0d:
a3:d2:26:52:af:9f:ca:46:fc:bc:98:bc:08:20:7d:
3f:09:b4:6b:1b:ce:c7:8c:b1:00:84:ec:65:54:46:
ee:9c:3e:e9:30:d7:dd:93:1b:ce:a8:7c:f4:db:2b:
51:5e:a7:ec:73:8f:28:bd:b1:38:1b:b9:e0:a3:f5:
a7:69:40:c7:96:5a:ac:2e:27:dc:e8:a2:fc:1a:91:
b8:70:08:29:9d:5a:1f:3c:32:54:6c:fd:78:98:6b:
77:b1:91:f0:d9:99:66:92:f6:21:60:8a:6e:80:e6:
ca:45:ca:6a:07:c7:99:df:cc:b4:18:a8:b9:b3:91:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:1D:81:2F:1C:5A:F3:54:C4:A2:7E:97:7F:CE:57:72:50:68:3E
X509v3 Authority Key Identifier:
keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/o38dgS8cWvNUxKJ-l3_OV3JQaD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.229.0/24
Signature Algorithm: sha256WithRSAEncryption
47:8b:27:0c:52:13:aa:b9:bb:27:1c:5a:64:12:74:fa:cf:52:
57:37:78:8c:d2:0b:05:79:f8:72:ef:24:fa:92:65:37:1c:76:
d7:60:28:7a:54:c4:54:98:dc:8c:90:3b:f3:46:b6:6f:88:ae:
93:86:53:4b:4a:b9:ea:f2:09:1c:b1:98:de:f7:63:7b:51:8b:
db:ef:2f:e7:06:7f:89:0f:eb:d0:6e:04:63:cc:0a:cc:cc:10:
73:1f:2f:85:98:ac:17:77:66:2b:e3:0f:cf:ba:16:ea:c7:43:
6c:c2:d2:a2:f3:8a:f2:5c:5c:44:1c:eb:66:20:78:1b:8e:b9:
2a:35:51:4b:dd:39:f0:f7:06:30:e4:65:5f:1b:af:71:b7:3c:
bf:63:23:a4:51:2a:65:e0:ba:21:59:d3:b0:f3:9e:e9:07:e9:
fb:a2:13:56:c2:a2:59:94:79:9e:9a:fe:63:90:92:b4:12:3f:
40:aa:91:01:3d:83:3b:a5:15:27:bd:40:f9:25:a8:b3:02:e0:
39:2d:17:f1:05:4b:43:f5:7c:48:c2:ad:d7:e2:ea:94:13:47:
31:30:d3:60:fc:6a:76:b5:39:7f:1a:de:94:60:c7:55:27:81:
b3:af:92:ec:99:4b:e3:71:38:47:fe:4c:2c:5a:d7:8c:26:a6:
f6:d9:24:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:09 2025 by rpki-client