Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/rYB2E2WWjfYhq-X6uuM_2yn0mtY.roa
File: rYB2E2WWjfYhq-X6uuM_2yn0mtY.roa (raw, json)
Hash identifier: W5SB3mHQgeZW64xuvufGEnXjCyoLl4vSMiTgwjiN2kg=
Subject key identifier: AD:80:76:13:65:96:8D:F6:21:AB:E5:FA:BA:E3:3F:DB:29:F4:9A:D6
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0182AAFC4CEF84750DA1BD24C45D869E7389
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/rYB2E2WWjfYhq-X6uuM_2yn0mtY.roa
Signing time: Wed 17 Aug 2022 08:47:17 +0000
ROA not before: Wed 17 Aug 2022 08:47:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 80.71.236.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:fc:4c:ef:84:75:0d:a1:bd:24:c4:5d:86:9e:73:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 17 08:47:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad80761365968df621abe5fabae33fdb29f49ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:83:94:5f:67:28:68:70:63:6a:8d:8e:83:
88:0e:e2:81:f8:71:d8:96:db:6a:3f:83:2a:3b:18:
01:e6:f5:ed:ec:05:18:ce:45:b7:eb:f1:aa:d6:b8:
35:af:da:67:b3:b1:4a:bf:7b:9f:1f:5a:e3:c1:dd:
86:76:e3:c3:02:a3:96:af:cc:da:b4:69:a4:64:28:
d3:ec:54:44:c4:b8:44:f8:66:72:a8:89:3d:70:38:
18:5f:a1:02:87:2b:f5:d4:a1:c2:0b:a6:f9:bd:c7:
da:1a:ec:b9:0b:a7:28:c8:d1:17:9e:20:69:7d:b1:
88:d5:aa:77:3e:3d:5c:41:14:bb:0e:04:b3:b7:fe:
43:58:33:5e:4d:7c:6f:e5:67:a2:13:1d:d6:d1:25:
ce:b0:ec:14:5d:e1:14:f8:72:18:e1:16:f4:b7:1e:
96:0b:20:7d:3d:56:4e:ae:22:24:67:8f:80:3f:9b:
cb:61:41:ff:8b:80:c0:91:c6:f1:a0:55:78:43:e0:
5b:ad:4f:19:cf:83:29:09:0a:e8:00:4d:28:a8:19:
d7:18:f1:79:ba:dd:ee:79:3b:ad:23:7a:05:ec:e5:
3c:9b:70:ad:2e:b7:10:d4:7f:5c:fe:8a:6d:f2:58:
f4:92:3d:73:86:68:de:bf:57:9e:c3:fb:31:bc:ee:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:80:76:13:65:96:8D:F6:21:AB:E5:FA:BA:E3:3F:DB:29:F4:9A:D6
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/rYB2E2WWjfYhq-X6uuM_2yn0mtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.234.0/24
80.71.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f2:52:1b:25:b8:48:63:70:84:07:31:a7:6a:7b:6b:6a:44:
35:6f:6f:51:7e:3e:cd:22:b4:c4:f9:6c:ce:cc:49:b7:ff:36:
c1:75:71:3e:26:a0:d7:08:08:82:c1:8c:07:74:44:c6:9e:b7:
bb:c4:4f:b3:60:e6:05:19:99:eb:2e:c8:04:bc:a4:ef:c9:b8:
8f:9a:d5:fa:c1:67:0d:f7:35:a5:43:59:b2:72:b8:9c:88:26:
17:51:d2:19:24:52:65:fa:0f:6d:fb:15:ba:f2:18:80:c5:ad:
79:00:b4:18:20:79:e0:0f:a7:e2:6e:ef:a9:ad:d3:3b:1b:9c:
18:20:51:cc:7f:19:df:e3:37:f2:cb:88:c9:f7:f6:d5:7a:bd:
32:e0:3e:b9:5a:00:4d:3b:d8:e9:d6:8b:2b:f6:65:65:28:74:
49:8d:c9:5f:b7:89:d6:b0:6d:d8:00:cc:5d:a9:38:0c:32:71:
be:db:2a:72:51:7f:14:ab:ec:d5:ed:4a:be:62:00:c6:d9:a5:
23:31:be:4f:4d:1c:11:c9:50:a0:9d:b3:15:5f:c2:5c:ac:28:
a9:3a:20:b5:b8:79:e3:36:1a:a1:14:8f:ae:b8:06:77:f6:2b:
48:12:23:85:d3:0b:9f:71:0b:57:e6:76:ed:a9:49:ee:eb:a1:
b2:b0:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org