Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/arfWaUTLRMx7HjH4wUn3fpKOBDA.roa
File: arfWaUTLRMx7HjH4wUn3fpKOBDA.roa (raw, json)
Hash identifier: m3womujHoWBpDcLcMk7zAu/MH2H3jkOb0TjcAKw+aq8=
Subject key identifier: 6A:B7:D6:69:44:CB:44:CC:7B:1E:31:F8:C1:49:F7:7E:92:8E:04:30
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0183F4264258B11426512BB3D17486D96CED
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/arfWaUTLRMx7HjH4wUn3fpKOBDA.roa
Signing time: Thu 20 Oct 2022 06:48:11 +0000
ROA not before: Thu 20 Oct 2022 06:48:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31479
IP address blocks: 80.66.112.0/20 maxlen: 20
185.28.48.0/23 maxlen: 23
185.28.49.0/24 maxlen: 24
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:26:42:58:b1:14:26:51:2b:b3:d1:74:86:d9:6c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 20 06:48:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ab7d66944cb44cc7b1e31f8c149f77e928e0430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:e3:92:97:d0:08:ff:4a:49:13:9b:9e:a7:
4b:d1:e8:19:e9:99:48:7c:0d:cc:70:54:ae:a2:65:
70:54:a1:08:e6:73:c1:ef:84:8e:8e:5c:9d:ac:52:
34:66:13:20:d7:ae:d5:4e:3c:50:a7:05:34:f3:48:
96:aa:0d:ce:bc:ac:1c:38:44:56:22:b1:a1:ab:09:
05:04:a9:63:45:c9:84:ab:a2:a8:7d:76:84:af:6e:
01:f9:89:17:62:27:6b:be:16:0e:3a:b2:e4:ab:cf:
1b:75:8f:27:49:d5:e0:30:3f:c2:1c:93:0d:07:11:
78:b3:cb:93:fe:48:4b:46:bc:53:b3:f8:da:e5:4d:
e9:a6:6c:ab:fd:00:bd:59:db:cc:0b:39:54:07:9f:
01:8a:96:ae:7e:30:3d:20:47:de:82:bd:a3:3f:b1:
2d:9d:32:c4:04:68:97:56:cd:4c:20:4a:9a:80:8f:
1a:85:ec:45:8f:48:b4:b3:75:5a:fe:39:fe:ec:e9:
37:d6:59:f0:47:69:a4:1d:db:b7:3f:e5:8f:75:fd:
aa:5b:b8:8a:b7:5e:b1:44:21:ac:8f:1e:65:46:f1:
f0:79:fa:47:45:1b:e4:8d:45:0b:7c:b7:fb:8a:3d:
36:b8:dc:77:60:bb:f9:41:f2:4d:7d:10:92:1b:0a:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B7:D6:69:44:CB:44:CC:7B:1E:31:F8:C1:49:F7:7E:92:8E:04:30
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/arfWaUTLRMx7HjH4wUn3fpKOBDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.112.0/20
185.28.48.0/23
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
3b:49:0c:f2:20:fc:74:a9:3b:21:81:3a:d9:c9:af:6e:d5:a2:
e3:e1:b7:2f:b7:85:9c:9c:a5:b7:31:4a:da:5f:ee:3b:dc:6d:
fe:3f:de:f4:22:2e:c3:be:00:46:3b:39:53:44:85:db:9e:2b:
e1:90:56:06:c0:da:63:cf:39:75:85:43:71:fd:03:70:18:77:
4c:0c:05:21:aa:41:63:c3:2f:18:4b:ec:ab:8e:81:f3:7a:0e:
6b:da:fa:f3:7a:e9:49:6f:11:5b:ad:f4:b6:d1:f6:1c:e1:7f:
28:b3:6b:58:79:fc:67:90:1c:3b:68:67:f5:36:c1:66:70:70:
71:2b:a8:9f:91:8d:7e:18:5b:cf:09:43:a2:63:20:3a:fb:06:
d4:cb:45:83:1f:6e:9f:1f:cc:99:e0:11:3c:3a:13:2e:30:50:
cf:42:ba:54:0a:a4:71:92:f4:4f:27:51:ac:76:50:10:06:3d:
f8:df:2d:d7:f1:cf:c6:0b:7d:19:65:04:e6:3e:a6:6a:66:43:
79:6d:95:be:c5:f2:24:57:62:e6:a2:4a:0e:de:9c:58:af:fb:
37:e0:9b:cd:c9:cb:bb:2d:bc:be:c2:52:11:50:61:15:b6:b9:
4c:33:3b:4f:b6:65:49:e9:90:ae:c3:b4:c8:c7:02:a6:ca:cb:
fe:93:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org