Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/abBZgL9Z4szycyv4t-SZYLM22u4.roa
File: abBZgL9Z4szycyv4t-SZYLM22u4.roa (raw, json)
Hash identifier: yzykbR6muErQ364bL1HPWhYaG+xTUwWLK+oO26WrBtM=
Subject key identifier: 69:B0:59:80:BF:59:E2:CC:F2:73:2B:F8:B7:E4:99:60:B3:36:DA:EE
Certificate issuer: /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial: 104FDFB2
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/abBZgL9Z4szycyv4t-SZYLM22u4.roa
Signing time: Sat 01 Jan 2022 13:56:22 +0000
ROA not before: Sat 01 Jan 2022 13:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 141.20.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273670066 (0x104fdfb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Validity
Not Before: Jan 1 13:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69b05980bf59e2ccf2732bf8b7e49960b336daee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:dd:cf:bf:71:30:31:32:81:9f:13:03:3e:
9d:27:19:b2:c0:df:8d:1d:8d:15:9a:c6:d8:fd:76:
e1:87:47:55:c9:cd:25:3c:d4:e7:8a:14:1a:5c:33:
f4:a8:e8:7a:62:b4:ee:c8:c8:a8:ef:ff:62:ce:03:
68:6b:fe:63:6c:9b:7f:17:09:3b:60:42:29:ff:6c:
dc:29:b6:0d:94:62:00:fb:3a:14:64:a2:e9:c7:43:
e1:9c:c8:de:2f:14:a1:df:d9:26:d3:26:46:b3:58:
08:22:e5:a5:1e:61:a4:86:04:01:50:9c:a9:96:85:
b4:a0:0e:37:c4:46:24:9f:48:e1:15:94:88:9f:65:
a1:07:09:9a:f3:9b:a1:9a:ef:ee:e7:46:ab:48:09:
90:0d:2a:1b:46:25:7f:ec:7e:6b:68:50:f6:ea:1e:
4b:51:00:88:75:26:76:5e:83:97:27:fb:68:9b:ca:
b2:9a:6a:8e:4d:2c:36:d0:a8:e9:59:6f:50:51:59:
e2:0f:fc:de:0f:db:36:b6:ad:e2:f2:a8:3a:83:96:
ac:b0:2b:a5:db:5d:96:19:8b:1f:c7:e2:8b:a5:2e:
ee:e2:2a:15:75:dc:b5:af:92:20:67:c5:64:39:88:
99:a2:58:5b:df:f9:89:f8:7e:88:2c:4d:f5:46:9c:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:59:80:BF:59:E2:CC:F2:73:2B:F8:B7:E4:99:60:B3:36:DA:EE
X509v3 Authority Key Identifier:
keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/abBZgL9Z4szycyv4t-SZYLM22u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:74:a2:61:be:c9:8f:4c:e0:05:44:f7:dd:37:28:68:f4:04:
95:c1:03:65:0c:2a:7d:7f:d5:aa:f5:f4:5c:16:10:ac:08:4b:
31:63:f7:c2:18:a3:a1:b5:a2:a6:6b:44:56:03:45:10:15:8a:
a9:80:c2:d9:9f:59:a5:2c:87:27:38:aa:e7:09:9b:1d:70:07:
66:6c:0d:01:bd:c8:d4:a0:c8:5c:ac:41:28:dc:28:7a:2d:05:
f5:07:2a:60:6b:f7:54:b2:0c:f9:c7:c6:b5:98:60:f4:9b:12:
2b:84:b8:94:0b:ec:6a:eb:7a:03:74:a3:df:b9:7c:34:ab:40:
b8:3b:1d:a8:8f:d7:cf:28:8f:5e:62:69:fa:a8:4d:e8:bd:5f:
8a:20:a5:b2:e9:52:4f:f2:2c:97:d0:78:e5:28:f5:97:c4:89:
4b:3c:3f:1b:7f:61:1c:45:a2:c6:65:28:ab:74:26:32:c3:84:
dd:5b:09:59:b4:e3:32:81:d7:1e:10:8b:7e:74:66:3d:8d:e9:
93:4d:42:02:ee:a2:c3:05:c8:49:86:83:0a:fb:ab:15:ea:c5:
29:2c:b2:89:6c:51:71:69:28:48:75:96:e2:00:47:a3:e2:2c:
76:ef:93:93:22:f5:61:0c:42:42:da:47:6e:a8:f1:c7:c5:c7:
c1:09:91:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:42 2024 by rpki-client on console-fra.rpki-client.org