Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/yTmhRh7gT-L7_o9wn-RhP9z1lR8.roa
File: yTmhRh7gT-L7_o9wn-RhP9z1lR8.roa (raw, json)
Hash identifier: FTrxOy5mveSIq7ZEBV33aAMILrSzuZZwelg3CO0PBSw=
Subject key identifier: C9:39:A1:46:1E:E0:4F:E2:FB:FE:8F:70:9F:E4:61:3F:DC:F5:95:1F
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 111E36EC
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/yTmhRh7gT-L7_o9wn-RhP9z1lR8.roa
Signing time: Sat 01 Jan 2022 14:04:45 +0000
ROA not before: Sat 01 Jan 2022 14:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61239
IP address blocks: 80.253.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287192812 (0x111e36ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 14:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c939a1461ee04fe2fbfe8f709fe4613fdcf5951f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:e2:7a:f3:6f:c2:e5:8b:49:4e:18:71:a2:
00:dd:84:0b:6e:f5:f1:ce:27:41:3e:10:ee:2c:b8:
df:c1:6c:50:00:f7:8e:f1:cc:a0:39:02:db:df:4b:
73:56:6b:e0:fb:57:7a:bb:e1:d0:ab:03:cf:94:a0:
cd:e3:9d:2a:e0:3d:12:99:37:40:f6:c1:c2:59:7a:
2c:ed:d6:a4:da:4b:71:a1:21:27:f6:91:da:b5:a8:
1e:89:57:0f:7e:d7:bb:3e:08:0f:eb:1d:5b:6e:34:
e3:7f:7e:b2:69:40:0c:c0:f0:cc:be:a0:35:98:ef:
88:a8:ba:c0:90:04:9d:0e:40:83:d1:14:94:28:c5:
31:16:18:90:e3:6b:ce:49:72:52:c6:eb:d6:be:b7:
3e:2b:28:00:90:b8:f6:56:2f:ce:5f:70:60:2f:38:
18:32:5c:9b:7b:1e:21:83:0b:ec:d1:38:b3:eb:46:
cf:18:ef:69:14:5e:b9:f7:ce:7d:b5:fd:e1:79:29:
21:08:56:b9:1a:bb:88:f2:3f:fb:e5:d9:8e:a4:f6:
fb:99:2f:bc:b0:d4:d7:3f:ef:d5:ad:53:6d:7e:62:
de:67:a4:76:ca:b1:3e:c2:fb:c8:4b:c5:e1:40:b4:
24:b4:eb:43:b0:f3:18:b6:cc:f0:5b:8b:df:6b:c9:
f3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:39:A1:46:1E:E0:4F:E2:FB:FE:8F:70:9F:E4:61:3F:DC:F5:95:1F
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/yTmhRh7gT-L7_o9wn-RhP9z1lR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:2f:e4:d4:fa:1b:cc:40:7c:c4:e5:d6:f2:f4:d1:79:5d:c3:
a5:14:e0:93:8c:d1:ad:43:56:e6:dd:d1:b0:2f:56:0e:3e:a9:
1e:d4:e2:85:b5:78:33:d2:a3:b4:0d:76:df:6c:1c:f3:93:9d:
f9:09:30:a8:46:26:0b:12:e1:57:f3:08:39:2a:d8:ef:5c:3a:
a9:d6:d0:97:05:29:86:61:80:8c:5c:70:31:16:2b:01:3b:d1:
3e:da:ad:9b:1f:72:3b:af:00:98:98:8e:e9:d9:69:26:d4:09:
8f:85:fe:c5:88:ed:91:80:8b:c6:91:4f:46:75:86:be:73:18:
aa:aa:b1:5b:0a:66:ec:73:c4:6f:9b:f1:3a:37:4c:bf:40:d8:
2d:b2:d5:a3:40:95:e0:97:55:34:84:9e:9b:31:04:2c:45:2b:
3d:d0:cf:1e:fd:98:0b:8b:c8:12:40:3c:14:1f:0e:f2:62:4b:
60:d2:a5:6d:df:20:5d:d0:82:8b:e9:fc:aa:ac:58:0c:37:14:
d0:f3:ff:9d:62:28:e5:d4:ed:25:ae:fb:41:1d:36:d8:e3:b6:
a7:7b:cb:dc:6e:97:f7:92:44:6e:2f:2f:4d:b6:a0:03:17:ca:
f7:9d:dd:3f:28:84:00:8b:05:e8:7e:2b:2c:6f:cf:a3:9a:f9:
0d:24:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org