Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/4vDu3paJgQiHXedDfO4vLPrH0uc.roa
File: 4vDu3paJgQiHXedDfO4vLPrH0uc.roa (raw, json)
Hash identifier: O7KmI6D2eYxObo89vbFqeeu3GfwizDVlKWo1pAT6Tcg=
Subject key identifier: E2:F0:EE:DE:96:89:81:08:87:5D:E7:43:7C:EE:2F:2C:FA:C7:D2:E7
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 1A2B91BF
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/4vDu3paJgQiHXedDfO4vLPrH0uc.roa
Signing time: Sat 01 Jan 2022 15:59:52 +0000
ROA not before: Sat 01 Jan 2022 15:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61207
IP address blocks: 80.73.48.0/20 maxlen: 20
95.130.64.0/21 maxlen: 21
2a04:8080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439062975 (0x1a2b91bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Jan 1 15:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2f0eede96898108875de7437cee2f2cfac7d2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:c8:6e:28:96:4c:35:54:23:6b:c0:6b:90:
cf:37:56:8e:eb:6a:b1:e8:1e:b7:87:40:75:f7:bd:
8c:86:a4:69:60:9e:4b:d1:8a:0b:75:78:07:6d:93:
06:4b:0d:57:5d:95:c7:91:b6:4e:70:eb:43:1e:dc:
7a:21:8a:45:a3:48:38:b4:55:3e:9d:6d:f0:c9:13:
51:12:d9:0d:c0:50:b7:53:35:4b:8a:7a:ae:65:4f:
99:43:91:43:c1:36:84:0e:58:f5:01:d7:54:92:0d:
f9:dd:40:29:81:78:0e:78:bb:04:37:f9:e6:9e:27:
4e:3c:03:db:a3:20:40:40:0b:37:51:24:bd:e3:34:
45:b3:39:c3:f3:a3:26:0e:a0:13:bd:54:47:d2:ff:
28:29:44:31:5a:62:30:a7:9d:a6:71:48:81:af:51:
c0:a8:29:30:50:fb:f0:ae:2d:37:47:0e:89:15:3a:
d1:9f:fc:c5:cc:f4:6b:54:3a:b6:c8:ae:eb:01:9e:
4a:7d:54:b8:6e:18:c2:89:91:88:72:8f:9f:d8:91:
59:9e:3a:de:ba:d6:9c:0c:19:66:cc:02:38:ec:2d:
1f:4a:d9:3b:7e:9b:9a:c6:89:2a:cc:52:3b:59:d6:
3d:5f:bb:ea:31:d8:d2:40:03:11:3d:8e:78:cd:0e:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F0:EE:DE:96:89:81:08:87:5D:E7:43:7C:EE:2F:2C:FA:C7:D2:E7
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/4vDu3paJgQiHXedDfO4vLPrH0uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.48.0/20
95.130.64.0/21
IPv6:
2a04:8080::/29
Signature Algorithm: sha256WithRSAEncryption
03:75:e5:a8:68:74:99:10:4f:03:20:33:bb:13:e0:5c:d6:de:
2b:47:1e:c5:31:4b:cc:97:72:68:51:40:4a:b6:3f:7c:d0:f3:
eb:b4:73:01:76:e4:fc:c3:fd:64:ef:12:4a:2f:5c:97:0c:32:
4d:56:6b:5a:69:ae:f4:6b:eb:9b:b7:e1:b5:a6:e2:cf:a3:8a:
90:62:a8:56:01:c8:a2:fb:be:2f:40:c1:4f:0a:32:4c:89:a2:
c2:61:f2:23:0a:35:59:d5:8f:63:fa:3d:84:0c:98:f5:6b:3b:
d9:01:de:bb:6d:ed:09:69:95:20:7a:4f:ce:3a:24:61:58:f7:
8f:bc:9b:48:69:08:78:6c:75:3c:ac:12:37:d9:e6:78:56:c8:
6c:f8:32:75:69:f0:e7:b5:78:f2:a7:be:ea:a0:cc:82:f6:14:
c4:c6:68:99:7e:37:5d:62:2c:6f:b0:fb:62:ad:a2:d4:bd:64:
04:35:6c:90:a6:6a:29:1b:01:6b:1e:b5:b9:0f:b7:8b:f0:a3:
ed:0e:60:7d:c2:8c:a1:0f:84:4f:d9:12:14:ca:5a:04:1b:eb:
81:01:fb:4f:65:e7:2a:df:8b:04:8d:8d:4a:c6:e9:21:41:28:
ab:47:d0:4b:b5:9b:45:e4:cb:76:8d:60:40:0d:56:10:68:5a:
6b:45:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:50 2023 by rpki-client on console-ams.rpki-client.org