Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/5gQvlKUxPjlA1p3iEBhjElQuwio.roa
File: 5gQvlKUxPjlA1p3iEBhjElQuwio.roa (raw, json)
Hash identifier: SpKfvZxsmLpBX87/I7JNhF09XkMP1PoZHevg93gFKdE=
Subject key identifier: E6:04:2F:94:A5:31:3E:39:40:D6:9D:E2:10:18:63:12:54:2E:C2:2A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 022CE6
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/5gQvlKUxPjlA1p3iEBhjElQuwio.roa
Signing time: Fri 01 Jul 2022 07:01:02 +0000
ROA not before: Fri 01 Jul 2022 07:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1547
IP address blocks: 80.94.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142566 (0x22ce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Jul 1 07:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6042f94a5313e3940d69de210186312542ec22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:e3:d5:ad:c1:71:3b:a2:28:1e:0e:e3:9b:
2b:8b:f6:10:64:b9:7d:49:11:97:95:c8:a8:8a:6d:
53:46:9f:00:5c:c4:41:ae:f4:1c:86:65:c3:83:0c:
d5:55:78:08:b4:01:5e:85:6e:9f:1e:3d:b8:ee:40:
29:2a:25:a0:42:6c:a8:b1:4e:e5:bc:db:d3:a7:cf:
10:c2:e7:22:ef:e9:42:4c:cb:80:f5:cf:54:85:bd:
03:d5:90:8d:6b:d3:1d:e6:c8:21:7f:ee:3c:44:30:
9b:e6:d5:c0:9f:df:1d:88:83:ff:5e:b7:8b:c4:25:
d0:b1:ae:2b:26:21:73:0b:e4:cb:3f:86:3a:03:7a:
7a:db:d4:e9:e0:94:20:fa:28:d8:2a:e1:1a:63:70:
d6:26:bf:f3:29:51:eb:e8:a6:05:a4:f0:b3:45:a9:
f3:ed:e1:f0:da:dc:b9:59:2d:97:71:97:bb:81:60:
e7:d2:8c:2d:56:dd:76:1a:d9:17:d0:4d:66:99:55:
74:ac:77:9c:f5:d7:09:e9:c4:f5:99:0a:4a:49:01:
1a:a7:5f:50:0e:8f:bf:d4:10:88:66:b1:36:7e:5d:
32:4b:b5:08:3a:53:21:5d:81:dd:a3:be:90:ae:fa:
50:63:d3:4e:72:6a:56:10:29:bb:05:a5:13:8a:17:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:04:2F:94:A5:31:3E:39:40:D6:9D:E2:10:18:63:12:54:2E:C2:2A
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/5gQvlKUxPjlA1p3iEBhjElQuwio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.241.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e9:d7:81:a5:3d:71:32:6c:c1:1f:9c:8f:29:c7:58:15:ce:
3e:78:a1:46:ab:e8:0b:4d:8d:54:dd:25:80:3f:84:e2:e0:a3:
45:fa:7c:3b:f1:31:98:d2:36:e2:f1:f0:c3:03:ef:7a:87:6b:
2f:59:af:77:ec:3e:78:a4:aa:97:bb:62:0a:92:bb:11:c0:74:
41:b4:f3:72:cf:5f:d6:43:6f:12:05:8c:2c:92:33:78:6d:35:
9f:cc:da:e7:da:f0:9e:be:a9:34:bf:02:cf:4a:74:d3:d5:e2:
dc:1a:28:bf:11:aa:63:b3:30:18:35:c1:bf:d4:38:9b:21:ff:
31:77:78:f0:82:72:59:8e:7a:d2:89:bb:7e:e6:51:e8:1c:e8:
aa:26:31:80:00:cb:c3:81:68:47:ab:cf:f8:39:69:be:bb:06:
f4:6e:bf:d5:8d:db:c9:74:67:9c:0c:57:f4:a2:f6:2e:5a:3b:
f1:32:9b:07:c2:50:fb:bc:1d:77:42:0b:48:08:b8:35:34:45:
7f:73:38:01:ab:85:23:93:cf:a6:0b:09:42:7c:99:1d:aa:a5:
2a:a4:89:ce:f5:8c:ba:d5:84:a8:59:de:bc:16:f2:34:3f:64:
ed:7e:89:d2:c6:16:5d:34:9c:56:7b:0e:ba:a0:cc:57:56:07:
fc:5b:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org