Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/pS1zlU7pVpZMRyst6byDG9zVRHU.roa
File: pS1zlU7pVpZMRyst6byDG9zVRHU.roa (raw, json)
Hash identifier: YImcSD29sP7xWjtULu20RYyFJ5UkyQTT/SSUDSmbfM0=
Subject key identifier: A5:2D:73:95:4E:E9:56:96:4C:47:2B:2D:E9:BC:83:1B:DC:D5:44:75
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 05E11D5C
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/pS1zlU7pVpZMRyst6byDG9zVRHU.roa
Signing time: Sat 01 Jan 2022 11:02:59 +0000
ROA not before: Sat 01 Jan 2022 11:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35994
IP address blocks: 80.67.67.0/24 maxlen: 24
80.67.80.0/24 maxlen: 24
193.108.155.0/24 maxlen: 24
195.245.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98639196 (0x5e11d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 11:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a52d73954ee956964c472b2de9bc831bdcd54475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:36:be:95:1e:45:a9:bc:10:a3:34:04:ac:a7:
11:ee:e0:5a:08:3d:55:e4:7e:8b:58:21:32:34:4f:
2e:10:70:3f:7f:11:5a:80:96:4b:f7:81:47:4e:56:
c8:e2:b1:79:6b:1e:23:41:45:65:09:76:f5:5e:97:
66:00:74:f6:6e:e7:06:a5:71:be:e5:56:97:a7:dc:
01:f7:dc:d4:95:6b:99:3b:d9:1e:26:59:ce:9c:ea:
98:11:ba:5c:0d:29:3f:f1:e9:c6:f6:3a:a2:7a:bc:
f5:38:ad:4f:d7:97:b0:da:11:9b:ed:6c:ac:e7:c9:
d5:eb:d3:c8:a7:a8:0d:1f:03:46:86:03:8b:e7:97:
ed:1e:8b:84:88:a1:46:7d:7b:72:f4:cc:46:a0:b5:
84:8c:4d:be:60:54:c1:de:3b:2b:a4:f7:78:dd:36:
10:97:a4:2d:c4:4a:85:6c:50:78:ea:91:45:12:e0:
f8:90:11:01:87:6f:6e:81:db:56:f3:e2:bf:71:b2:
c3:0d:be:64:ca:d7:6a:90:24:18:7f:21:2b:7c:0e:
c4:d5:da:59:a2:bb:98:fb:6a:5f:13:e5:41:f6:96:
27:98:89:9b:bd:e9:64:96:d7:50:98:ae:2a:72:a9:
e4:71:67:b6:b4:e1:86:1e:43:2a:8a:72:b0:17:14:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2D:73:95:4E:E9:56:96:4C:47:2B:2D:E9:BC:83:1B:DC:D5:44:75
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/pS1zlU7pVpZMRyst6byDG9zVRHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.67.0/24
80.67.80.0/24
193.108.155.0/24
195.245.124.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a0:a3:9d:9b:9d:33:33:45:59:c0:9b:88:d7:ab:76:0f:ec:
b9:53:27:f6:bc:59:f9:13:84:c2:e1:3a:8f:99:f4:28:39:e0:
41:d3:3d:86:72:0b:96:ff:80:11:75:58:96:dd:57:d8:77:0f:
fa:9d:93:27:ad:b0:68:5e:7f:fd:60:b2:eb:39:43:8a:7e:f0:
ab:79:d9:2f:98:0a:46:b9:51:cd:09:5c:9e:1c:fd:92:50:99:
22:85:59:69:cd:48:16:7e:03:a2:b3:2c:cd:76:06:76:01:4f:
14:1c:73:b1:5d:e2:cf:ef:6c:59:3f:6b:59:f0:2f:e3:c6:68:
a1:e6:88:bb:32:26:a2:ac:db:b9:bb:c9:90:48:eb:38:82:3a:
b0:da:17:02:d7:94:c1:63:80:f8:08:d5:b2:80:db:7d:c6:5c:
22:24:d3:3a:95:35:b0:80:33:e2:b8:02:4a:1d:68:25:9e:47:
b0:69:13:21:78:10:da:c6:32:83:7c:21:12:fb:5f:03:47:14:
5f:88:9e:cf:41:b6:a7:77:d4:c8:26:18:20:de:ee:ae:df:7e:
4d:c9:fa:43:21:a2:67:5f:1c:f0:77:e2:fb:f3:34:96:b4:9b:
51:b7:45:2d:04:56:88:9e:54:e1:a2:a5:f7:b0:92:39:ae:73:
87:79:7c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:23 2023 by rpki-client on console-ams.rpki-client.org