Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ZWwu8i7rP4AejWUo0MrwzEirP-M.roa
File: ZWwu8i7rP4AejWUo0MrwzEirP-M.roa (raw, json)
Hash identifier: HDMvAc059gDJcgtbnsNab9njN/vIfh8hDxskAozCyX4=
Subject key identifier: 65:6C:2E:F2:2E:EB:3F:80:1E:8D:65:28:D0:CA:F0:CC:48:AB:3F:E3
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0182E92A5401D34C43797ACC8686AE6B929B
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ZWwu8i7rP4AejWUo0MrwzEirP-M.roa
Signing time: Mon 29 Aug 2022 10:34:01 +0000
ROA not before: Mon 29 Aug 2022 10:34:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 80.71.231.0/24 maxlen: 24
80.71.233.0/24 maxlen: 24
80.71.236.0/24 maxlen: 24
80.71.237.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:2a:54:01:d3:4c:43:79:7a:cc:86:86:ae:6b:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 29 10:34:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=656c2ef22eeb3f801e8d6528d0caf0cc48ab3fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:6f:fc:de:c5:f1:a4:4a:06:9c:db:02:70:
fb:70:f1:47:fc:44:ea:e5:7b:20:b0:fb:ee:9c:6b:
f7:49:ab:cd:2b:23:ec:4b:b4:05:31:3a:fa:8b:04:
24:85:69:d9:0c:52:03:87:f6:9d:41:d9:24:06:1f:
36:86:a4:0c:c9:b1:26:a8:65:c0:e0:4b:8e:af:9e:
ed:0f:3e:d2:93:00:fc:bc:63:21:6f:0a:53:b4:69:
f4:0b:5d:e5:56:ab:0d:17:a3:bb:dd:c0:69:09:87:
d9:db:e9:2c:7f:cc:25:05:df:10:b9:e8:04:c3:e4:
b2:c2:18:b0:63:ca:6e:7f:79:37:4f:18:7d:77:8f:
1e:43:d3:ed:a4:01:49:51:b4:2f:86:fe:f4:2a:f9:
40:88:76:28:ef:c0:8d:9f:71:50:ed:6a:c8:0c:8b:
aa:1d:03:1c:06:6f:ae:9b:f8:62:bc:c8:20:93:30:
1e:19:74:5a:ca:10:46:4b:49:6f:bd:71:68:25:0b:
8e:5e:3b:ff:88:b9:2c:20:63:f7:b1:51:7c:0e:cf:
bf:b1:87:0e:40:50:59:47:91:88:29:57:36:30:49:
45:c8:e2:bb:08:1a:9e:a3:a7:d2:ee:be:5d:7e:cc:
e5:17:18:49:29:0e:63:1b:da:8b:c0:2a:04:8a:32:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:2E:F2:2E:EB:3F:80:1E:8D:65:28:D0:CA:F0:CC:48:AB:3F:E3
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ZWwu8i7rP4AejWUo0MrwzEirP-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.231.0/24
80.71.233.0-80.71.234.255
80.71.236.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:d7:ed:a8:e8:52:a6:3c:e3:6d:11:8c:1a:b6:a1:fb:8a:62:
19:dd:6d:7f:1a:a2:a5:c5:57:76:7a:e7:4d:79:5e:1d:ad:cd:
0c:d0:4b:a5:e4:bf:8b:da:0e:0e:c2:9c:e9:c8:65:8b:3b:73:
7f:f2:ba:4f:c9:76:9a:5e:f4:cb:04:21:45:0f:a6:6c:4e:31:
66:f3:df:42:14:4c:07:b6:af:52:fd:c6:46:23:b1:5c:c3:e0:
fa:fb:40:80:1e:e7:f6:83:fa:2c:52:1d:23:42:61:82:ec:3d:
1e:f3:c7:88:a9:67:ed:1a:df:8f:3f:2d:28:24:85:4f:a1:88:
9a:b6:e1:e1:25:d6:37:2d:45:2f:65:b9:45:f1:92:8f:3b:49:
29:f3:5a:c7:bb:9c:74:16:b6:82:a6:1b:b1:fe:48:fb:b1:84:
18:af:c2:00:45:7b:23:51:c3:36:b4:62:77:12:5c:29:bf:17:
d5:d9:81:72:0d:74:44:da:2b:05:41:6a:f9:df:93:0f:05:8a:
8c:67:e4:ae:6d:c3:1a:7f:29:78:40:af:b1:f8:f8:2f:a5:b7:
f2:0f:fb:fc:fb:40:cc:51:2d:5d:08:1d:13:d5:09:d8:61:90:
f6:a1:81:ee:8f:54:07:a3:27:0a:5c:54:56:85:2d:7f:77:12:
fd:eb:1a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org