Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/skdwCCPg4vs9D3Z69IBdMBsYOY8.roa
File: skdwCCPg4vs9D3Z69IBdMBsYOY8.roa (raw, json)
Hash identifier: 5WOGhK8+Q0aXcND8z478HNUijC5aMDzY2QBizmAgOo8=
Subject key identifier: B2:47:70:08:23:E0:E2:FB:3D:0F:76:7A:F4:80:5D:30:1B:18:39:8F
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 0EF11F41
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/skdwCCPg4vs9D3Z69IBdMBsYOY8.roa
Signing time: Sat 01 Jan 2022 05:55:39 +0000
ROA not before: Sat 01 Jan 2022 05:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197301
IP address blocks: 194.62.168.0/22 maxlen: 23
80.71.128.0/20 maxlen: 21
2a01:7a80::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250683201 (0xef11f41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Jan 1 05:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b247700823e0e2fb3d0f767af4805d301b18398f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:0c:6e:6b:3b:98:7e:ab:49:34:8a:42:05:
83:cb:fa:8b:e4:ba:c5:6e:96:78:65:27:32:c8:7c:
a6:92:6f:3b:a7:c7:4e:26:54:36:c9:c6:9f:24:fb:
2f:1e:54:00:5e:8f:2e:96:d2:22:a2:33:8d:13:ed:
bb:b2:8e:ba:ff:43:0e:2c:b1:f2:bb:68:6e:d5:a0:
e5:82:57:ce:21:41:fa:e1:70:ec:26:b5:5d:be:57:
3e:30:61:71:fd:4a:e8:ba:c6:71:0e:2a:f2:b9:83:
03:7b:0f:a7:f7:dd:75:ec:56:bc:fc:7c:8f:d6:87:
76:13:e2:08:93:03:8f:d1:0c:05:a1:a7:91:ea:a1:
7c:63:eb:bc:cc:0b:42:19:7a:ad:57:79:20:21:8c:
0a:65:b2:54:bd:3f:d3:60:a7:7a:66:19:69:54:c5:
f0:6a:f9:39:f2:e0:41:ef:66:2b:58:c2:40:60:38:
92:91:cb:c0:5a:c9:f8:6c:0b:4c:44:ab:49:f6:d1:
14:91:fa:fb:d2:0f:5f:94:77:31:86:61:e9:5e:51:
3e:ba:02:65:4c:d6:f1:1b:2c:52:bf:d8:e8:d5:6b:
dd:6e:b7:68:7b:0a:d1:b3:cc:a1:1d:18:7f:98:eb:
d1:6a:9f:ca:81:17:4c:71:00:47:80:66:c9:f2:73:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:47:70:08:23:E0:E2:FB:3D:0F:76:7A:F4:80:5D:30:1B:18:39:8F
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/skdwCCPg4vs9D3Z69IBdMBsYOY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.128.0/20
194.62.168.0/22
IPv6:
2a01:7a80::/29
Signature Algorithm: sha256WithRSAEncryption
71:1e:e8:f2:c8:c4:e7:38:84:d8:3a:73:00:c8:70:00:a2:3c:
7c:e2:0c:62:54:e5:19:49:6e:20:69:d2:d7:22:e0:63:95:b2:
18:36:0a:a4:03:31:0b:e5:1f:56:0c:47:b8:a6:f5:d6:67:d8:
41:c3:3d:4f:71:73:42:25:62:7f:f7:5b:b0:bb:0e:0e:f0:95:
32:ee:9a:89:66:9d:d9:78:0d:8a:6f:5a:45:4d:e0:10:b8:8e:
eb:ed:cb:8e:76:e9:70:fb:f6:4d:de:c9:12:82:80:c5:86:78:
39:f3:70:f9:86:75:c8:66:c2:fc:c4:6f:58:43:c7:60:37:0f:
a5:06:d9:71:74:b9:7d:2b:5a:22:b5:03:0c:28:dc:9b:82:26:
ab:13:10:03:52:cc:0b:60:ea:18:17:95:93:14:48:ef:30:31:
d3:f7:86:4b:08:7b:63:3c:b8:0a:58:53:de:16:a4:a1:ea:57:
30:dc:36:91:c5:d8:1b:1d:bb:bf:00:09:97:a0:fc:47:46:19:
8b:e2:e0:11:fe:82:23:fa:6b:47:66:9b:0c:da:05:1a:f5:86:
d6:0a:fe:3a:3c:85:a9:5f:c7:8f:53:05:e5:9a:79:3b:ef:52:
63:d4:38:36:d5:70:4d:14:64:47:c0:e1:e0:a1:7b:be:d4:21:
11:82:3f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:15 2024 by rpki-client on console-fra.rpki-client.org