Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/SSFEniVrJ89ZCYqnFEUUA6yDKcA.roa
File: SSFEniVrJ89ZCYqnFEUUA6yDKcA.roa (raw, json)
Hash identifier: 4gvJBpCjcnlV5ryb6Qcz3yvKpHpFASYwLy9PxfwNsiw=
Subject key identifier: 49:21:44:9E:25:6B:27:CF:59:09:8A:A7:14:45:14:03:AC:83:29:C0
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 447E15B1
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/SSFEniVrJ89ZCYqnFEUUA6yDKcA.roa
Signing time: Sat 01 Jan 2022 11:01:01 +0000
ROA not before: Sat 01 Jan 2022 11:01:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34026
IP address blocks: 84.246.152.0/21 maxlen: 21
80.93.170.0/24 maxlen: 24
2a02:cb0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149113777 (0x447e15b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jan 1 11:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4921449e256b27cf59098aa714451403ac8329c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:91:36:a6:60:cc:bb:26:67:5e:c2:31:45:
45:39:f4:cc:8f:61:ff:aa:23:1f:78:75:e1:7e:16:
89:da:e8:5a:7b:32:1e:52:cb:ba:f7:ee:8b:9e:0b:
a6:64:8d:64:81:73:d1:e1:51:9e:45:1e:1d:b6:10:
b3:01:67:a6:19:cb:b7:43:10:50:a9:e2:b1:41:df:
1e:fe:1b:c0:b9:0d:36:b2:68:9d:35:da:7f:8d:72:
70:39:8b:62:9f:32:6c:f0:62:b2:a7:58:c0:bf:b9:
7c:dc:7d:4e:26:76:d0:7b:c2:ed:cd:b8:09:3c:80:
d9:49:c1:e4:08:12:94:cf:d4:2d:60:32:61:b7:2b:
cb:4c:be:8e:7d:0e:15:43:1d:9f:fb:c8:da:16:0e:
b6:e4:ee:67:ae:ee:36:88:4a:32:52:e7:e9:cd:43:
95:36:05:13:95:82:ab:33:5c:7b:1d:b8:18:8e:63:
18:87:a7:b8:02:71:67:a1:fc:38:b5:fe:89:f3:3e:
b7:9a:3a:6f:17:fd:aa:ed:15:86:1f:ff:6d:2e:ac:
ff:2f:91:7a:79:7d:4a:36:f7:a7:c4:a4:45:bf:1a:
3e:a2:9c:ae:38:c9:ae:c6:a0:99:2d:fb:3c:2f:0c:
fc:55:1c:62:33:d8:da:9c:d1:88:fc:d8:ee:b0:40:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:44:9E:25:6B:27:CF:59:09:8A:A7:14:45:14:03:AC:83:29:C0
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/SSFEniVrJ89ZCYqnFEUUA6yDKcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.170.0/24
84.246.152.0/21
IPv6:
2a02:cb0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:5f:5b:23:d7:ec:e9:ad:55:c3:2b:54:0e:f7:5a:3c:52:4d:
91:fa:0d:a7:c1:ef:f6:4d:30:f2:d2:46:32:93:da:61:39:4f:
b2:13:73:e0:b1:33:a0:4a:77:24:d9:57:90:b0:a5:86:16:3a:
88:01:cc:fe:25:69:d4:64:cb:ec:fb:26:fb:a8:41:c4:65:13:
a0:a8:1f:88:39:af:da:71:30:12:f2:4d:7f:0a:e0:09:9e:dd:
cb:8a:4e:74:18:ab:b3:71:09:97:57:88:40:96:50:1c:1d:4a:
f0:a4:e4:28:3a:ac:25:c1:27:1a:af:c0:30:26:36:b5:d6:69:
58:cb:15:74:a5:31:c3:20:25:a4:5f:c7:0e:51:67:4a:a6:7e:
df:8a:b4:7e:c9:72:e7:16:2d:0f:3a:47:43:7d:f5:ef:58:c8:
b3:5c:75:51:0d:ca:05:e2:dd:d8:a3:d4:1e:e2:5a:0d:bb:71:
cc:53:02:8d:25:bf:b1:68:4a:ef:a1:e5:61:07:44:22:15:18:
a9:a6:f2:cb:54:f8:da:b2:62:5c:a3:aa:0f:51:03:65:7b:25:
98:aa:c6:28:a3:5f:7a:ae:cb:64:97:e3:36:b2:62:67:a2:ad:
47:1d:99:f6:d8:1e:a4:ea:42:5e:1c:a6:c7:25:49:2f:dd:5b:
5e:8f:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:18 2023 by rpki-client on console-ams.rpki-client.org