Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/XGpO-BgatimqEaqKeZqr_y0VzN4.roa
File: XGpO-BgatimqEaqKeZqr_y0VzN4.roa (raw, json)
Hash identifier: EcnWNna7tz2xPQ1x9z75VgxkHmB1Gd6fqMP8SOs5/BA=
Subject key identifier: 5C:6A:4E:F8:18:1A:B6:29:AA:11:AA:8A:79:9A:AB:FF:2D:15:CC:DE
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 06D2B3B3
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/XGpO-BgatimqEaqKeZqr_y0VzN4.roa
Signing time: Sun 10 Apr 2022 02:44:14 +0000
ROA not before: Sun 10 Apr 2022 02:44:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35994
IP address blocks: 80.67.67.0/24 maxlen: 24
80.67.75.0/24 maxlen: 24
80.67.80.0/24 maxlen: 24
193.108.155.0/24 maxlen: 24
195.245.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114471859 (0x6d2b3b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Apr 10 02:44:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c6a4ef8181ab629aa11aa8a799aabff2d15ccde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:c1:a8:f5:67:2b:7e:3b:c5:ab:bc:1a:3c:
19:52:0f:c5:d9:a2:90:29:8b:ab:98:76:3a:7c:5f:
1c:0a:34:6e:c6:3c:68:ce:a2:f5:03:a4:4f:f5:2f:
09:8f:3d:dd:e0:61:3b:c1:34:55:60:2d:a8:9e:bf:
1f:a0:8c:cd:2c:6a:00:4a:62:7c:fb:7e:d7:e8:23:
0c:ed:c3:d0:29:ac:37:05:d5:c8:76:d7:87:b9:d4:
c2:8e:d2:7f:60:0f:9c:e2:cd:ce:a9:7d:c5:fe:a9:
4c:2c:9d:dd:84:2e:80:b3:a2:5e:5e:73:e7:59:49:
a1:29:82:39:50:63:e7:34:8e:9a:07:fa:5f:04:a9:
cf:62:e0:fe:b2:3a:87:1f:fa:28:38:6f:59:11:6c:
60:c5:0f:80:90:08:88:82:f9:af:9a:b8:e6:b8:31:
40:a6:3f:59:54:ef:56:f3:94:aa:f4:3b:26:49:b3:
30:38:05:9a:cd:8c:f6:6f:02:01:7d:7c:4f:91:d2:
c9:6a:a4:08:5a:1b:14:5a:a9:0c:fc:3a:99:6a:56:
a7:e8:ce:db:65:71:4c:d7:03:ed:2e:39:11:18:87:
f6:51:14:b6:e1:2b:dc:a0:cf:b3:76:f8:48:80:f9:
9c:0a:4e:70:4f:cb:0e:33:35:ab:38:b6:ff:a6:f8:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6A:4E:F8:18:1A:B6:29:AA:11:AA:8A:79:9A:AB:FF:2D:15:CC:DE
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/XGpO-BgatimqEaqKeZqr_y0VzN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.67.0/24
80.67.75.0/24
80.67.80.0/24
193.108.155.0/24
195.245.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:10:da:03:00:40:c5:53:94:82:de:ac:5d:01:b8:06:66:50:
93:32:a1:90:64:f9:37:f8:63:fa:ad:ff:56:70:a9:82:e7:b4:
fd:62:7b:31:15:9d:23:23:1f:a6:02:17:9c:c1:23:38:63:bc:
e3:67:ca:61:ca:f1:99:03:3d:3e:9e:43:8a:64:ff:48:ed:0e:
c4:f8:de:f0:5b:72:11:97:1e:d7:3a:67:a2:d0:5c:36:65:e0:
88:95:45:a1:7d:a6:2a:c2:73:99:0e:ad:ee:5e:a2:2b:96:ff:
16:2f:10:39:6d:d4:01:64:0a:04:ff:0a:52:cf:e2:55:ca:71:
40:7a:a6:ea:f6:a1:ab:06:e3:1f:e1:b7:67:11:af:1c:df:29:
3f:fc:79:f8:69:88:6f:24:26:a4:7d:a5:05:40:e8:25:c5:47:
9a:99:ea:44:15:3c:56:7e:c4:9f:b5:5c:a5:80:39:ff:3e:63:
9c:65:6f:88:77:92:91:62:63:5b:f0:37:67:dd:fa:e3:54:ee:
cc:a7:58:73:34:df:df:67:6a:61:6c:fe:d7:c1:ab:db:07:fd:
59:9f:9b:0a:c8:80:56:5e:3b:df:65:01:4b:8a:b4:a8:d0:e2:
c6:35:1f:fe:25:4c:5f:ea:74:e5:66:1f:06:a5:be:97:eb:3f:
e4:fe:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:41 2023 by rpki-client on console-fra.rpki-client.org