Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/sEmKDbfLDL5T1wH8smlj9U5JGNs.roa
File: sEmKDbfLDL5T1wH8smlj9U5JGNs.roa (raw, json)
Hash identifier: soTM6fqxtCFoWOte/ekOQVpyfxozt7FqZX5Pc6uE3N8=
Subject key identifier: B0:49:8A:0D:B7:CB:0C:BE:53:D7:01:FC:B2:69:63:F5:4E:49:18:DB
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 018A40151B4CF410424D09690AD0CE26B685
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/sEmKDbfLDL5T1wH8smlj9U5JGNs.roa
Signing time: Tue 29 Aug 2023 06:57:19 +0000
ROA not before: Tue 29 Aug 2023 06:57:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12316
IP address blocks: 80.90.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:15:1b:4c:f4:10:42:4d:09:69:0a:d0:ce:26:b6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Aug 29 06:57:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0498a0db7cb0cbe53d701fcb26963f54e4918db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:34:5c:9e:9c:67:96:fa:8c:8c:89:ce:a5:
33:48:80:55:c8:c3:fb:ee:21:e8:2a:ff:f5:6c:03:
8d:bd:52:6b:70:a1:32:5c:c1:4f:2a:57:ba:cc:5b:
a2:13:67:0d:a1:67:a4:92:53:60:21:99:55:83:65:
34:c8:1b:53:91:79:8c:17:bd:53:63:9d:d6:37:0b:
ae:03:81:ea:27:14:8c:e3:54:5a:2c:76:bf:c1:4e:
1a:f4:bc:c5:e2:5f:ab:35:83:f1:94:c6:ef:c2:1b:
d1:72:ed:91:cf:63:8b:fe:a2:a5:77:15:37:78:3f:
ac:cc:74:c4:a6:ea:3f:a9:53:44:fd:08:9b:e3:27:
8f:0f:02:3e:49:a1:98:2c:db:16:f1:82:75:02:29:
20:5c:79:99:95:01:41:09:44:02:7b:37:e4:86:da:
67:60:8e:f3:15:fb:e3:6d:5a:16:fb:73:3e:f9:92:
cf:42:40:45:b0:f4:34:f9:e1:17:7e:a7:a9:a0:5e:
4b:4c:ca:b0:d4:be:95:fc:c9:b9:06:59:cc:c4:88:
ee:c3:22:58:b3:de:74:c9:4d:c4:10:2a:3e:2c:49:
d8:97:4c:be:16:08:8c:94:9c:6c:2e:15:07:b5:b3:
57:9e:de:bf:e2:88:f7:38:62:2a:1c:9b:d1:b5:c5:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:49:8A:0D:B7:CB:0C:BE:53:D7:01:FC:B2:69:63:F5:4E:49:18:DB
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/sEmKDbfLDL5T1wH8smlj9U5JGNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.30.0/24
Signature Algorithm: sha256WithRSAEncryption
68:74:8c:fc:a2:8f:ec:74:e3:89:dc:4f:a5:62:ec:b4:74:43:
ae:e2:80:83:4b:df:1c:cd:fd:e8:b6:1d:10:e0:b3:8b:9b:45:
c9:8e:19:c7:2d:15:70:7c:4e:75:a4:c6:2c:d9:38:15:d4:b7:
ae:01:2f:bc:44:30:e8:fe:79:d0:ec:c1:32:d5:2c:34:54:b9:
55:17:7a:f1:00:83:87:ce:e3:56:ef:15:0b:05:cb:c4:c5:de:
bd:4a:6b:8c:a1:73:b8:98:80:6b:fa:68:a0:41:79:50:f3:c3:
8c:78:71:d1:fe:bf:ac:6a:aa:e9:22:ee:a5:87:f0:99:1f:02:
32:aa:05:42:bb:31:1d:cb:34:92:27:a7:23:95:56:d8:cf:29:
2a:dd:94:ae:09:24:a7:af:df:d0:80:19:db:64:a0:f8:ee:43:
67:d2:9b:f0:ec:88:ef:c6:3b:a7:e0:1f:ae:de:0c:e0:5e:7d:
f5:3c:0b:cc:89:c4:07:cb:74:87:9c:4c:2b:29:8a:4b:e5:ba:
0f:bb:68:3e:70:f0:00:02:e2:c3:76:fd:55:ef:c4:23:02:5c:
6a:30:3c:27:2e:bf:47:19:d3:a7:0d:b3:df:b4:60:07:d8:d4:
ef:cf:52:50:d7:ce:cd:61:0f:87:5a:25:d3:d1:d8:a6:49:87:
30:68:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:33 2025 by rpki-client