Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/py-CfKeYWkwpJsZPMFzolAa8SjM.roa
File: py-CfKeYWkwpJsZPMFzolAa8SjM.roa (raw, json)
Hash identifier: O+VniJaUot7ywVObArgG2UZTRtDCUtbS1Rr1yny9m20=
Subject key identifier: A7:2F:82:7C:A7:98:5A:4C:29:26:C6:4F:30:5C:E8:94:06:BC:4A:33
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 04B13E12
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/py-CfKeYWkwpJsZPMFzolAa8SjM.roa
Signing time: Sat 01 Jan 2022 06:58:59 +0000
ROA not before: Sat 01 Jan 2022 06:58:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14413
IP address blocks: 185.154.80.0/22 maxlen: 24
2a05:f506::/32 maxlen: 48
2a05:f505::/32 maxlen: 48
2a05:f504::/32 maxlen: 48
2a05:f500::/30 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78724626 (0x4b13e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jan 1 06:58:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a72f827ca7985a4c2926c64f305ce89406bc4a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:69:2a:c5:4d:fd:0e:9f:e5:17:bc:5a:08:
fe:ba:bb:3b:c4:9b:bf:67:5b:97:98:a7:19:15:71:
9a:da:c5:6c:df:19:85:1d:49:87:dc:ef:0f:ac:b0:
23:9b:48:db:ff:1d:53:35:30:63:96:21:9e:21:8a:
29:57:d3:43:cd:93:7d:1b:17:7f:cb:da:1c:52:3d:
40:69:1b:f2:eb:61:19:79:c5:97:d5:43:8e:62:e1:
b6:ed:de:79:d0:3a:59:8e:77:89:cc:31:59:3c:82:
f3:18:b0:19:6a:c7:2d:a3:12:45:5b:4d:03:6f:2b:
8e:7c:3d:67:22:dd:3d:37:ac:fc:34:cf:97:37:e8:
be:3d:35:ca:8e:71:ea:ea:8f:9c:ec:ab:f9:2f:bc:
50:dc:d5:68:b7:99:2c:8d:97:01:5a:1e:2d:81:57:
0d:7e:aa:8c:90:38:8f:db:75:01:a1:e2:ec:2e:73:
06:95:bb:6a:a3:8a:0b:35:a6:b5:f3:ca:eb:79:74:
9d:1a:08:ec:d2:b1:5d:48:2d:88:14:a8:48:4b:3a:
c9:6d:ad:b5:3a:5c:f3:fc:99:60:f0:fe:11:3a:6b:
fd:be:7a:e9:30:e3:b0:a2:e7:d6:77:34:8b:1b:5f:
2c:52:ba:06:79:9c:e7:02:57:df:67:17:1d:7b:f3:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:82:7C:A7:98:5A:4C:29:26:C6:4F:30:5C:E8:94:06:BC:4A:33
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/py-CfKeYWkwpJsZPMFzolAa8SjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.80.0/22
IPv6:
2a05:f500::-2a05:f506:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
58:b1:17:76:35:12:4c:d5:61:f0:8a:9c:6f:a9:05:f6:29:ed:
82:89:13:b7:0a:d4:48:ae:95:5f:8c:d0:ec:e3:e1:72:c0:cd:
c4:2d:44:ff:67:af:49:c1:18:78:1a:db:b6:d9:08:fe:f4:dd:
6e:04:39:cf:ae:a6:04:47:3c:57:6c:18:73:bb:7e:f5:eb:6e:
f1:b2:40:00:3b:8a:71:12:01:df:85:c8:8a:e9:05:e0:f2:66:
28:55:3d:0d:af:6e:11:94:be:87:6b:f3:0b:13:64:5e:fc:b0:
85:5f:6b:8d:21:ac:4e:ae:4b:51:ef:09:0e:df:73:df:f2:09:
75:13:40:c3:61:f5:4c:7d:01:00:cc:44:9d:8d:63:bb:0b:ae:
14:38:d1:c9:37:73:60:c4:64:18:c7:35:61:b0:af:3b:27:d2:
c2:26:28:f7:b8:89:bf:d7:4a:80:5c:f2:47:b3:31:ad:0a:d0:
15:4b:f5:29:39:b2:81:4b:19:ee:3d:e5:6b:08:97:ad:df:4e:
d2:e9:ff:79:b5:b8:9c:73:c8:0f:ed:c0:44:3e:d0:28:c2:32:
bb:19:15:ea:62:98:fc:89:3f:60:ed:de:9f:34:9a:cf:8a:e4:
3c:8b:03:b5:53:bd:cf:7e:6e:63:02:f8:1c:97:43:8a:da:b1:
42:72:30:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:25 2024 by rpki-client on console-ams.rpki-client.org