Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gLcfNM6fImrq-d9snkvsQCkXDBs.roa
File: gLcfNM6fImrq-d9snkvsQCkXDBs.roa (raw, json)
Hash identifier: 1SsUF/XholsPjpZxp2+PsuweLt1NdGuvUSOH7Pxzrig=
Subject key identifier: 80:B7:1F:34:CE:9F:22:6A:EA:F9:DF:6C:9E:4B:EC:40:29:17:0C:1B
Certificate issuer: /CN=814abafbb08ff47201d9b1ed633393b6bd92581e
Certificate serial: ADA81C
Authority key identifier: 81:4A:BA:FB:B0:8F:F4:72:01:D9:B1:ED:63:33:93:B6:BD:92:58:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUq6-7CP9HIB2bHtYzOTtr2SWB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gLcfNM6fImrq-d9snkvsQCkXDBs.roa
Signing time: Thu 16 Jun 2022 10:17:51 +0000
ROA not before: Thu 16 Jun 2022 10:17:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204957
IP address blocks: 80.68.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11380764 (0xada81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814abafbb08ff47201d9b1ed633393b6bd92581e
Validity
Not Before: Jun 16 10:17:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80b71f34ce9f226aeaf9df6c9e4bec4029170c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:fb:2d:d7:fd:38:e3:66:3d:ef:97:2d:59:
18:f5:a8:8d:06:17:5c:c6:ca:d2:1e:8a:f1:4e:c2:
38:09:97:10:9c:98:4b:00:a4:24:26:57:68:43:28:
5e:f2:2f:a9:5c:c1:d9:3c:20:5a:fe:50:c9:5a:5b:
3d:e3:f5:b6:25:51:e1:41:38:7d:57:c6:4d:3f:4c:
77:42:69:aa:54:e4:2c:0f:6b:d4:f3:7c:8d:88:13:
cc:2a:5c:15:36:22:c2:b1:d2:c9:2e:3b:6d:33:26:
9c:04:a2:e1:4e:b7:9b:1d:73:44:9c:da:fc:ad:4f:
7f:67:ca:8f:0e:10:d6:2f:cb:43:73:bb:d2:86:3c:
e5:5e:9e:ed:93:2f:44:cb:30:63:28:43:73:78:32:
ee:09:88:2f:b9:13:66:cc:e2:4d:60:ec:39:61:48:
78:28:38:c4:93:58:81:a1:63:1e:06:69:1b:76:92:
35:74:1f:a8:d6:ee:a5:41:36:04:82:01:77:3d:39:
cb:bb:ed:02:08:7b:ac:c2:dc:30:06:89:49:c5:74:
1c:a9:b9:07:9b:a9:7b:76:87:6d:31:28:b9:3a:c8:
7d:b0:94:af:61:7b:50:f3:15:b3:94:45:26:de:75:
d5:61:c9:a7:c2:8d:a6:3f:30:93:14:0b:c2:11:93:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B7:1F:34:CE:9F:22:6A:EA:F9:DF:6C:9E:4B:EC:40:29:17:0C:1B
X509v3 Authority Key Identifier:
keyid:81:4A:BA:FB:B0:8F:F4:72:01:D9:B1:ED:63:33:93:B6:BD:92:58:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUq6-7CP9HIB2bHtYzOTtr2SWB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gLcfNM6fImrq-d9snkvsQCkXDBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gUq6-7CP9HIB2bHtYzOTtr2SWB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.159.0/24
Signature Algorithm: sha256WithRSAEncryption
82:0b:97:55:43:ba:65:ef:0c:46:c7:e6:20:69:26:1e:93:35:
83:04:fc:30:39:d4:06:6a:e0:b4:95:39:b2:12:ba:2b:2e:87:
fb:68:b3:f1:08:58:ee:f3:09:cc:10:dd:a4:b0:d4:27:6a:db:
17:76:a7:9d:66:95:1f:54:a5:41:79:3c:e3:22:f1:5b:c6:d6:
96:61:c2:74:d1:a2:30:bf:a6:6f:48:e2:02:ad:1d:d3:0b:ad:
db:54:bd:de:ac:eb:ec:20:4a:e9:b1:6b:ec:c2:3e:ee:42:7d:
d9:03:6f:aa:10:d4:6c:f3:3f:00:f1:c9:47:4d:71:25:50:37:
57:a2:b8:98:f0:4b:db:bb:12:82:36:47:91:ca:e1:4c:11:eb:
4b:51:f1:cf:1e:b4:fb:bc:79:73:1d:cf:8b:44:fe:94:89:8f:
7a:2e:0a:8e:34:78:6c:d9:c4:a6:a8:6a:5e:fc:06:c8:dd:8a:
7e:cb:09:a0:62:80:7f:cc:1e:10:f2:b6:6a:4a:2d:e9:e0:ea:
e5:4c:a9:6d:7f:a3:db:42:38:92:b7:58:0e:d8:1f:77:6f:d5:
f0:35:b3:f6:bd:f7:7e:07:50:9e:1c:24:ee:64:76:9c:42:f2:
f9:da:0a:15:a3:96:34:19:35:65:74:5e:13:a5:bd:b6:1d:a3:
df:83:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:21 2024 by rpki-client on console-fra.rpki-client.org