Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/G_TEqdYebqGK_j5-psLUIzQaorU.roa
File: G_TEqdYebqGK_j5-psLUIzQaorU.roa (raw, json)
Hash identifier: hgqwXQd/XSljqw+51Tm8sE4ShnSdgZnU5VoVlzD1jws=
Subject key identifier: 1B:F4:C4:A9:D6:1E:6E:A1:8A:FE:3E:7E:A6:C2:D4:23:34:1A:A2:B5
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0184294E58B3BE257DE748522A7B4A1557B7
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/G_TEqdYebqGK_j5-psLUIzQaorU.roa
Signing time: Sun 30 Oct 2022 14:31:51 +0000
ROA not before: Sun 30 Oct 2022 14:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210993
IP address blocks: 80.76.43.0/24 maxlen: 24
83.171.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:29:4e:58:b3:be:25:7d:e7:48:52:2a:7b:4a:15:57:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Oct 30 14:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bf4c4a9d61e6ea18afe3e7ea6c2d423341aa2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:34:99:23:15:75:35:1b:c8:60:6e:34:11:
e2:40:4e:9b:ea:d8:ad:7d:d8:b2:dc:d3:f8:82:0b:
ad:56:c4:60:11:2e:68:8d:dd:92:24:ba:ea:24:8c:
eb:fc:c1:0a:3c:c4:35:da:48:dc:f8:88:86:26:92:
90:a2:3c:85:d5:d9:e8:f3:2b:80:f7:01:90:d9:a0:
fc:82:5f:51:aa:bb:73:5e:4e:8e:3e:50:13:e6:08:
5f:ee:a8:89:81:31:85:af:50:ee:f0:83:2c:25:2d:
2a:64:d2:d6:27:a1:b8:58:4c:1e:61:d2:bd:cb:f7:
a3:04:0d:04:4b:67:90:d9:4a:f0:45:96:5a:84:55:
00:8c:9c:83:e7:d8:72:02:bb:63:7f:8f:a2:44:13:
9b:0f:ab:10:6b:cc:25:e1:e5:14:f8:eb:0e:81:39:
a3:d0:e2:3f:e6:cd:91:a4:02:30:c9:76:b3:e2:6c:
88:11:73:a0:9a:fc:c3:c5:66:97:c5:4b:81:16:7b:
00:6a:bf:70:81:f4:65:b1:96:52:cc:ae:34:f5:b7:
a2:a4:0a:79:91:46:fb:14:22:4c:a0:62:dc:38:bc:
9a:4f:49:1c:db:43:f7:b0:55:26:5f:71:a9:f5:6a:
18:78:5f:0e:c3:03:7f:d3:b1:b4:5d:6c:a8:0c:ce:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:C4:A9:D6:1E:6E:A1:8A:FE:3E:7E:A6:C2:D4:23:34:1A:A2:B5
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/G_TEqdYebqGK_j5-psLUIzQaorU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.43.0/24
83.171.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9d:08:f1:a6:bf:0c:9d:e4:aa:c1:47:9d:e1:85:9a:e1:f7:
d7:c3:6f:43:5e:ab:07:30:9f:95:3a:1b:e6:d9:3d:52:b5:af:
e7:10:e5:05:5d:58:31:bf:a0:1e:9a:8b:56:54:d4:54:b7:df:
06:ec:23:dd:eb:81:bd:1c:1f:d7:e9:a0:37:db:25:78:de:e2:
f8:e9:52:ac:79:c8:5a:75:a5:95:b0:ba:b2:d4:69:0f:7c:f4:
8e:cf:12:2b:ab:4d:52:5f:16:8c:bb:d8:f4:fb:11:4e:65:00:
38:0a:23:85:e4:c7:1a:54:4e:98:c6:e3:86:ae:3d:08:41:ea:
c3:50:f8:35:11:31:8b:4d:78:6a:2f:5d:ce:27:38:f4:9b:8c:
dd:5b:61:97:60:6b:4d:43:d9:c1:66:16:1f:42:4e:28:db:ca:
a9:e0:b6:8e:81:03:a1:c3:0d:54:33:28:f8:f7:94:0b:06:a1:
14:3a:b9:eb:c5:84:93:37:e0:d5:0e:82:08:ab:4d:19:3a:a0:
61:45:b9:a3:03:84:16:3d:ff:4d:1a:ee:26:f2:05:9a:c3:2f:
78:18:04:ac:e6:48:0d:14:a8:17:63:40:93:bf:14:24:03:d0:
92:6c:0a:d9:13:da:fb:81:a1:db:a4:4c:fe:01:d7:8c:00:a3:
97:df:f9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org