Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/2EIZst1zOPnrLSaiSxVy7-fbE64.roa
File: 2EIZst1zOPnrLSaiSxVy7-fbE64.roa (raw, json)
Hash identifier: Yb7kUPNtDofSo4gIXm9JPvUEzbGB7Dbtns1d+g+2IFo=
Subject key identifier: D8:42:19:B2:DD:73:38:F9:EB:2D:26:A2:4B:15:72:EF:E7:DB:13:AE
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0A0755D5
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/2EIZst1zOPnrLSaiSxVy7-fbE64.roa
Signing time: Sat 01 Jan 2022 05:03:27 +0000
ROA not before: Sat 01 Jan 2022 05:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 80.78.132.0/24 maxlen: 24
2a0d:2146:2400::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168252885 (0xa0755d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 05:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d84219b2dd7338f9eb2d26a24b1572efe7db13ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:6f:b7:c6:29:d4:99:fb:08:bf:e0:7e:e7:
28:2d:46:33:cb:8f:62:ab:77:f5:01:8e:b9:62:49:
ba:6b:d6:f3:f0:b2:d2:55:7b:cd:57:af:ef:5e:26:
39:b4:f9:c7:f8:49:31:f1:3e:02:58:e3:2c:b8:4b:
8d:6f:0f:76:4c:88:aa:33:fa:bd:8c:2d:c0:b1:7e:
c6:ba:4c:71:d1:cd:e2:12:30:5c:c3:62:ac:d1:96:
f5:1c:7c:38:7c:00:7c:3a:20:ca:fe:f0:a7:de:a9:
e7:62:8f:2e:f7:8f:8a:f5:9e:c1:b8:36:af:97:e7:
64:29:da:9c:b4:62:c6:77:c1:97:67:b8:cb:c1:67:
79:a7:3b:49:ac:d4:3e:a1:eb:b8:8f:66:aa:af:b3:
0f:8b:98:18:f9:d4:17:5f:a5:16:6a:a5:ff:88:e8:
ed:83:89:3d:89:b6:5f:bb:7e:0d:41:9d:2f:e8:af:
bd:c6:29:0b:e8:f4:fb:05:50:5f:cd:11:99:f7:da:
61:54:23:33:44:da:1b:95:f5:64:d4:68:81:ee:4e:
74:6b:90:3a:07:0b:30:25:71:f1:a1:48:32:0b:d8:
4d:38:20:d7:6e:0b:81:93:19:fc:d9:fc:78:2e:27:
c2:47:37:a5:68:25:f8:8b:ba:ea:ed:b8:17:6e:4e:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:19:B2:DD:73:38:F9:EB:2D:26:A2:4B:15:72:EF:E7:DB:13:AE
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/2EIZst1zOPnrLSaiSxVy7-fbE64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.132.0/24
IPv6:
2a0d:2146:2400::/44
Signature Algorithm: sha256WithRSAEncryption
4b:db:96:f8:b0:c8:a1:f1:f3:2e:d3:91:45:f4:e6:62:7a:eb:
be:78:13:6c:77:f2:8f:f8:ee:4c:6a:55:af:58:6f:75:79:de:
48:37:63:ed:25:9b:14:8b:a4:b9:6a:e1:c6:4a:2a:a7:c9:91:
8f:16:e3:58:a2:59:d2:47:0d:99:b2:e7:62:c2:54:e1:41:8c:
40:43:8b:27:00:42:34:ae:a5:97:d1:df:76:5b:61:cd:df:c0:
a9:2b:bf:a3:4d:dd:df:0b:9b:41:c6:a4:7c:bd:ce:06:ee:1c:
79:59:95:1d:d6:db:de:ed:cb:a8:fc:ad:93:2c:b6:f4:c3:fa:
33:74:1e:ef:ed:d1:05:fa:10:0a:e8:aa:6b:51:f4:73:9e:fb:
7c:a5:ad:e5:a0:f2:9d:42:0d:cb:62:70:d9:5a:d1:e4:b6:d1:
36:52:f4:e5:44:c6:95:79:e7:63:22:7c:85:5e:e0:fa:ea:b4:
53:73:21:17:89:17:49:77:0c:81:29:12:8c:e9:8f:99:c1:c4:
fd:f0:50:f5:12:98:ca:1a:7b:65:f1:87:2e:16:c2:ac:bf:e9:
d6:f4:a6:27:b0:a9:b9:e9:5d:f7:46:4a:ad:c1:c9:e1:b5:ba:
7a:39:76:f6:55:93:fa:e9:d7:20:02:64:45:00:7d:6b:ea:37:
30:9b:69:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org