Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_BByQMuDjOxgq3CpINwDiyqAgI0.roa
File: _BByQMuDjOxgq3CpINwDiyqAgI0.roa (raw, json)
Hash identifier: ksn2LQcMGt+mAupdFcACDUeTtFK1EsguzsBgkZP361s=
Subject key identifier: FC:10:72:40:CB:83:8C:EC:60:AB:70:A9:20:DC:03:8B:2A:80:80:8D
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01835983763CB1F82C3D2049C7783A3147D7
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_BByQMuDjOxgq3CpINwDiyqAgI0.roa
Signing time: Tue 20 Sep 2022 06:08:51 +0000
ROA not before: Tue 20 Sep 2022 06:08:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 80.71.224.0/24 maxlen: 24
80.71.238.0/24 maxlen: 24
80.71.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:59:83:76:3c:b1:f8:2c:3d:20:49:c7:78:3a:31:47:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 20 06:08:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc107240cb838cec60ab70a920dc038b2a80808d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:e3:bc:f6:67:a2:1e:59:8a:1c:bf:06:d2:
68:f6:f5:67:8f:96:4e:2f:9f:04:20:0e:a6:7c:e2:
fd:1f:4c:10:13:04:1a:5e:2a:13:77:be:1f:43:aa:
38:35:bd:3a:a7:00:ca:c6:c8:23:03:f7:bc:18:41:
9e:d0:59:52:f8:bd:98:51:83:0f:d6:de:9c:b9:6a:
20:48:e5:38:e6:2e:1e:66:e4:3c:de:8c:8a:71:b4:
e5:aa:28:75:b8:45:5d:70:e0:f3:97:c5:e0:9b:0e:
20:79:54:a1:9a:1c:09:24:b6:6e:38:49:29:7d:10:
38:9d:5b:f4:1c:62:f0:7e:cf:e2:85:3a:83:5b:96:
f9:91:51:f7:9f:1e:ee:72:dd:44:a1:4a:0a:cc:ed:
6b:fc:ac:e7:5a:8b:73:1f:34:20:6f:37:2d:fd:2e:
d1:8f:8b:5a:ea:a0:9a:33:7c:1d:8a:27:ad:db:72:
72:a4:b2:ad:14:ab:8d:e7:3a:a1:ac:17:6b:b6:34:
25:b4:4d:6f:83:e1:4d:41:8d:67:a6:11:c7:ca:21:
24:fc:b7:e1:3e:c9:7e:8f:81:61:d0:bc:5d:a3:23:
8e:e3:5e:34:37:18:d5:83:05:ac:88:c2:eb:34:7f:
f6:1c:e1:78:e2:e7:f7:a9:61:aa:0e:d1:a5:05:36:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:10:72:40:CB:83:8C:EC:60:AB:70:A9:20:DC:03:8B:2A:80:80:8D
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_BByQMuDjOxgq3CpINwDiyqAgI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.224.0/24
80.71.236.0/24
80.71.238.0/24
Signature Algorithm: sha256WithRSAEncryption
49:92:05:90:1c:01:a6:89:b6:fc:f1:c4:c4:25:5b:93:53:7c:
68:63:12:10:98:bb:d7:f5:36:a8:06:12:e6:0b:16:45:a1:f7:
29:18:7a:11:4b:06:9c:8b:d3:8a:ae:13:f5:cf:80:6f:aa:8e:
33:88:11:ff:64:29:d3:5d:37:1f:f0:7f:b1:e0:a9:44:e3:d8:
51:5f:23:4f:78:4f:90:9d:70:95:aa:cc:4f:6a:7d:b4:a9:37:
35:93:71:34:dd:90:47:6b:88:dc:32:d1:44:04:8c:2d:94:c7:
04:58:f1:96:82:e7:86:76:5b:25:11:50:53:32:48:90:04:49:
cd:49:cc:bb:02:3a:9b:ec:cb:cd:5f:89:31:c4:d9:f8:fe:2b:
06:18:a5:e5:a6:e4:d0:ba:19:45:dd:dd:31:fb:fd:53:23:dd:
68:e5:28:23:f2:39:97:80:ae:ef:ce:7d:b6:f7:2c:58:a4:79:
3e:e1:fd:55:09:b8:25:f7:3f:7d:75:00:bc:c0:0f:1c:8d:18:
16:7e:e7:4a:4c:14:90:9c:8f:43:f3:5c:ec:4a:ed:66:e3:c5:
ce:c0:34:d8:25:37:63:fb:38:1b:f5:da:cf:bf:5a:ea:cb:b6:
93:96:04:b7:da:37:41:b5:91:1d:57:b5:23:8a:0e:a3:41:5c:
01:76:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:40 2024 by rpki-client on console-fra.rpki-client.org