Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/20P08AtyOSavuOym3arbOFMjJ84.roa
File: 20P08AtyOSavuOym3arbOFMjJ84.roa (raw, json)
Hash identifier: 9oGzi2NXFO2/LZKbEtpAWdQkI0STYr4+zWFd/2nGEXg=
Subject key identifier: DB:43:F4:F0:0B:72:39:26:AF:B8:EC:A6:DD:AA:DB:38:53:23:27:CE
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 018540DCF974C1B1048275001A3E3E651C6B
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/20P08AtyOSavuOym3arbOFMjJ84.roa
Signing time: Fri 23 Dec 2022 21:21:41 +0000
ROA not before: Fri 23 Dec 2022 21:21:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62143
IP address blocks: 80.64.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:40:dc:f9:74:c1:b1:04:82:75:00:1a:3e:3e:65:1c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Dec 23 21:21:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db43f4f00b723926afb8eca6ddaadb38532327ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b7:85:92:3b:90:ad:a0:39:1d:6b:d6:95:90:
9f:9b:a6:0c:5a:62:5d:45:2f:3c:8f:7e:e6:90:78:
fa:4b:a8:3c:2d:40:14:05:a3:25:7c:5f:e4:66:c7:
62:89:ab:a6:30:4c:8d:f8:df:c4:28:b9:20:52:95:
c8:1f:e4:92:73:4d:24:49:84:66:ec:40:b8:2d:61:
1c:b1:5b:07:24:10:1b:84:f4:66:c4:67:f6:39:d1:
2e:65:53:33:5b:b9:d7:32:f1:99:d2:24:fc:87:ca:
52:0e:17:c2:8c:4b:38:77:b2:c5:1e:c1:5e:a5:47:
1d:5c:bb:0c:6c:2c:58:f1:ed:84:bb:85:a5:69:17:
05:06:42:51:39:b3:5b:38:9e:c7:5c:08:2b:4a:ab:
0c:9b:a9:5c:64:86:05:85:a6:83:fc:d2:f0:77:0c:
69:f5:68:bb:4e:a1:22:cc:27:24:53:d3:77:69:54:
b2:e1:25:3f:e0:00:1a:4a:fb:b1:c2:64:6f:fc:27:
3b:4f:9c:5c:2d:15:60:47:eb:44:7a:08:e1:b4:d6:
74:e1:9d:76:0f:36:94:ed:a8:4d:8f:4a:be:68:fa:
45:b3:a1:bd:22:f9:2c:c6:a0:df:8f:a3:6f:bd:b6:
5f:fa:8a:50:09:5a:86:15:d5:91:24:e1:64:96:7a:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:43:F4:F0:0B:72:39:26:AF:B8:EC:A6:DD:AA:DB:38:53:23:27:CE
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/20P08AtyOSavuOym3arbOFMjJ84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f5:6e:52:b8:ec:17:17:f8:45:07:36:92:5e:a9:53:ef:6f:
9a:ab:2c:cc:15:ba:ce:f1:f0:ee:06:d8:17:02:6a:61:30:a9:
78:c5:2b:48:15:c4:76:11:92:bd:69:6e:ed:93:29:e4:6c:a9:
f2:eb:14:54:23:be:e7:93:a7:8f:32:a1:74:b3:99:60:10:bf:
7a:56:d2:77:5b:43:39:59:e1:d1:06:ce:c6:9c:78:44:2e:ae:
eb:42:99:b3:b1:bf:9d:47:50:b3:a6:8b:49:16:bb:55:27:c8:
39:d9:85:bd:89:7c:f1:bb:2b:e7:9b:6b:e0:14:3a:99:fe:fd:
3d:ab:80:60:ee:18:70:53:bb:df:ed:16:bb:85:e3:61:14:f3:
db:17:6a:b6:9e:d4:fb:fc:df:2c:aa:bd:3d:e0:1a:c6:91:9c:
ec:58:45:cc:2d:17:87:c5:f4:0b:33:6e:77:63:db:81:ae:6b:
ad:f8:90:e3:f4:74:a9:65:e6:ea:73:1f:e7:3c:f4:8b:bd:26:
18:e6:28:a5:67:c8:eb:b6:eb:3d:28:b0:38:1e:c4:9d:86:45:
2a:f8:a6:ac:3b:01:4f:5e:72:df:3b:3b:6a:04:43:3c:72:d4:
ca:34:c1:fd:10:e5:75:83:a4:72:0c:9b:ca:24:f4:45:c8:1e:
1a:4b:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:08 2023 by rpki-client on console-fra.rpki-client.org