Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/XS7pUJXgJZvwg97htjqMNiiwt30.roa
File: XS7pUJXgJZvwg97htjqMNiiwt30.roa (raw, json)
Hash identifier: JDo3L711PAhteJdPfSKHXkAZAcC3hRHNowwY1vTGdUU=
Subject key identifier: 5D:2E:E9:50:95:E0:25:9B:F0:83:DE:E1:B6:3A:8C:36:28:B0:B7:7D
Certificate issuer: /CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Certificate serial: 02EBE484
Authority key identifier: 97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/XS7pUJXgJZvwg97htjqMNiiwt30.roa
Signing time: Fri 11 Feb 2022 01:59:01 +0000
ROA not before: Fri 11 Feb 2022 01:59:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21105
IP address blocks: 80.89.4.0/22 maxlen: 22
80.89.0.0/22 maxlen: 22
80.89.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49013892 (0x2ebe484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Validity
Not Before: Feb 11 01:59:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d2ee95095e0259bf083dee1b63a8c3628b0b77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:6a:f2:6e:18:47:f8:d7:1e:61:d5:59:52:
3f:5c:7d:4e:c5:0d:78:7a:80:cb:dd:13:59:96:55:
b0:fb:57:6a:45:17:5b:56:fd:5c:12:be:91:92:0b:
a1:34:0d:70:97:5d:1c:56:62:54:d6:1c:41:18:6c:
ee:f8:4b:88:22:7e:58:d1:9c:07:6a:c3:2c:6d:bb:
4a:11:4b:86:fc:94:0b:e2:58:89:a6:95:d3:b5:dd:
83:3f:78:57:f9:26:46:ba:e8:41:df:60:b3:c1:35:
dc:37:21:d9:5e:7d:af:62:2e:9c:9f:5e:c6:56:90:
2e:5a:19:15:f5:da:1f:7b:b2:4d:a8:ee:74:86:11:
c4:ac:47:01:4b:9d:87:60:86:88:14:dc:1f:e3:27:
b9:cf:98:ae:89:f5:54:a3:2a:5c:5a:09:27:16:7a:
6a:fb:50:18:b4:85:e8:ce:77:87:1a:d5:68:e8:49:
b5:18:31:3b:7f:80:91:41:83:d2:ce:e4:67:dd:5e:
fe:0d:4c:f0:6d:d6:f2:9a:62:7e:db:51:1d:02:02:
35:d5:da:6c:ea:79:8f:66:1a:e6:81:86:2b:db:9d:
e0:ce:ec:3a:9c:1c:0e:fc:44:4d:1f:e3:99:58:02:
1c:42:80:59:85:9d:c9:1d:b9:6c:99:8a:69:92:44:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2E:E9:50:95:E0:25:9B:F0:83:DE:E1:B6:3A:8C:36:28:B0:B7:7D
X509v3 Authority Key Identifier:
keyid:97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/XS7pUJXgJZvwg97htjqMNiiwt30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/lzEK2mobvXqmjhQCI7-cYlozvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.0.0-80.89.11.255
Signature Algorithm: sha256WithRSAEncryption
a1:4b:31:41:71:4a:4c:89:68:b2:9c:91:d0:b6:ed:8f:d1:6e:
9f:6a:b2:d9:67:b2:aa:1a:3f:fe:9d:73:ab:d7:76:51:48:38:
b9:3d:be:44:16:fc:ba:bf:73:d6:9b:46:48:54:1c:b1:8c:ec:
ec:91:bc:72:dc:41:d5:eb:29:9f:10:87:f4:90:b1:55:a0:b5:
90:21:95:3d:e5:41:8c:3b:9e:be:67:41:3f:70:6b:e7:eb:67:
99:24:8a:af:22:f5:82:2c:ea:31:78:55:cb:f4:54:1a:c2:5d:
cd:b8:d3:74:e8:d5:41:72:af:0d:11:98:b4:cd:10:e6:34:70:
78:02:70:63:b5:3b:9a:e4:a6:ce:ce:6f:16:e0:f9:c4:04:d3:
03:26:64:7f:cf:84:39:7d:90:83:02:64:02:96:46:68:df:86:
a2:95:e1:56:ba:66:83:08:6a:1e:a5:3f:63:f6:64:47:90:46:
19:67:fa:d3:4f:e3:51:8e:5f:71:89:33:00:eb:d3:29:2e:14:
3d:c4:a3:9b:de:1c:84:6e:59:53:a0:dc:d0:13:39:6c:57:fd:
7e:e2:d3:fe:bb:be:dc:7f:0b:13:36:7f:6b:40:d6:35:5d:ef:
dd:bb:c0:0d:0d:38:df:e6:0d:0c:bc:63:9d:d0:65:10:ac:d1:
49:c3:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:57 2024 by rpki-client on console-ams.rpki-client.org