Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DtR3xnTQAkq5P0nGlIoWMoyjdaM.roa
File: DtR3xnTQAkq5P0nGlIoWMoyjdaM.roa (raw, json)
Hash identifier: 2fAjoU5Xf9IRmwjxbfqzqn9PMTyqWNnASx7ElSl0c3w=
Subject key identifier: 0E:D4:77:C6:74:D0:02:4A:B9:3F:49:C6:94:8A:16:32:8C:A3:75:A3
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0183AC7CA4FBB2D9EC52F31A7D5418C079C4
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DtR3xnTQAkq5P0nGlIoWMoyjdaM.roa
Signing time: Thu 06 Oct 2022 08:49:53 +0000
ROA not before: Thu 06 Oct 2022 08:49:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 80.71.231.0/24 maxlen: 24
80.71.233.0/24 maxlen: 24
80.71.236.0/24 maxlen: 24
80.71.237.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
81.29.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:7c:a4:fb:b2:d9:ec:52:f3:1a:7d:54:18:c0:79:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 6 08:49:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ed477c674d0024ab93f49c6948a16328ca375a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:2d:87:57:93:52:7b:11:0c:14:5a:1d:c4:
55:26:16:2c:05:6c:5d:00:cf:a0:4d:3a:19:a2:51:
4c:17:98:b6:79:44:82:0b:ac:f2:41:cd:2c:55:44:
14:e5:c9:49:59:b0:19:a0:0e:4a:b4:4a:32:dc:d9:
26:c0:5a:67:5c:df:f0:0e:b5:31:26:d2:f3:59:14:
a6:9c:8b:d5:ac:f4:04:b1:62:03:5d:65:74:20:3f:
a3:07:a4:bc:2f:9a:18:32:c0:52:20:55:5a:e0:f8:
37:2e:11:99:db:fa:90:21:26:7d:d4:15:af:1d:5b:
68:35:1f:59:73:c7:5e:75:68:da:4b:52:a2:82:8c:
de:23:d2:bf:2a:c6:09:0c:8c:88:04:b2:b2:6d:e5:
d5:b2:25:34:7a:95:42:1a:d4:b6:86:22:c1:bc:c5:
bb:45:e4:12:08:dc:b7:50:c7:0a:3e:5f:dc:40:8e:
c9:78:e0:84:a6:ae:80:61:04:e3:a6:fc:45:aa:60:
1e:06:8f:e0:c4:e5:98:f7:1b:1a:94:3c:7a:29:a3:
29:1e:7a:7a:ed:bc:2f:df:92:d8:1a:26:12:3d:47:
1f:38:25:02:92:77:4d:71:2e:0c:01:42:27:b7:21:
7a:7b:e0:56:3c:da:a5:43:2b:0f:99:a7:2f:8e:e8:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D4:77:C6:74:D0:02:4A:B9:3F:49:C6:94:8A:16:32:8C:A3:75:A3
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DtR3xnTQAkq5P0nGlIoWMoyjdaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.231.0/24
80.71.233.0-80.71.234.255
80.71.236.0/23
81.29.156.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e6:65:30:8a:46:75:f1:9b:de:51:31:89:7a:f1:03:f7:47:
56:14:78:55:42:c5:53:a3:67:27:8e:f1:21:cf:2d:a2:51:35:
85:3a:27:b3:0d:b2:1e:18:87:ce:d5:d3:df:78:8a:0b:92:7b:
01:a6:67:8f:55:33:d5:59:6d:af:c7:07:fe:fe:82:82:2b:c7:
4c:95:1f:61:de:e0:76:80:c2:49:cd:8c:9c:ff:e7:25:43:ae:
fb:90:41:b1:b7:93:09:a7:2a:b3:9b:18:92:4c:c2:b1:1e:fe:
a7:36:8f:90:41:08:21:fc:6f:70:f4:de:fc:28:ba:ed:a3:53:
64:78:02:b4:8a:b8:d4:68:cc:ae:f4:d3:39:80:0d:f8:5a:f7:
d5:30:ae:ff:55:27:a6:fa:4a:47:04:f1:44:ca:c9:35:f4:d2:
1e:47:17:1a:e6:75:c5:db:79:4d:df:19:ff:f4:17:17:40:1f:
8e:9b:67:94:ad:62:1d:5e:c6:78:ec:4e:42:59:6b:0a:1f:6c:
0a:6f:a2:3b:e4:99:55:6b:5a:0d:11:d8:3e:1c:ec:bf:2e:cc:
aa:6b:99:8c:05:f4:59:f0:35:92:4f:21:8d:a2:0c:6d:c5:ce:
d8:ef:e5:2f:50:03:e8:05:6a:c7:1b:34:5b:96:64:c8:1a:f1:
91:8c:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org