Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/4mtHyvigITr9lfautKTXHUsVcgc.roa
File: 4mtHyvigITr9lfautKTXHUsVcgc.roa (raw, json)
Hash identifier: KC+GeQgngOXmlZ8g55JEw8XYDhDEKHD05eDj6NUl5OI=
Subject key identifier: E2:6B:47:CA:F8:A0:21:3A:FD:95:F6:AE:B4:A4:D7:1D:4B:15:72:07
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 018211E0A0CA645E55DD7D9DD3CE9C0FD307
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/4mtHyvigITr9lfautKTXHUsVcgc.roa
Signing time: Mon 18 Jul 2022 15:15:09 +0000
ROA not before: Mon 18 Jul 2022 15:15:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 80.90.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:e0:a0:ca:64:5e:55:dd:7d:9d:d3:ce:9c:0f:d3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jul 18 15:15:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e26b47caf8a0213afd95f6aeb4a4d71d4b157207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:c4:f1:0d:28:c2:da:53:82:d1:ab:a4:77:
b1:09:2f:e9:fc:45:1b:be:66:d1:8f:ad:43:39:53:
3b:3a:d0:4a:ce:77:32:27:c1:10:c3:ed:8c:2f:c6:
03:9a:f1:49:43:27:62:23:c7:08:b6:ee:6c:61:40:
76:59:e9:d8:af:fa:a0:07:67:63:43:84:db:a0:87:
52:04:78:19:5f:a8:e7:29:ad:79:54:23:a4:07:d1:
0b:bf:f6:60:76:d6:a3:ae:ef:b2:a1:de:b2:3b:e4:
7e:c6:6d:78:c2:0e:f8:f9:e8:82:e3:08:56:30:4f:
db:ee:97:d7:8d:97:d1:f6:00:99:9d:e4:4d:4a:21:
a0:c2:0c:65:ca:f1:be:55:76:70:22:97:e8:ad:3d:
63:f5:69:0c:14:ff:b9:ef:7c:2a:f4:eb:3f:24:f0:
1c:31:6d:cd:01:8c:f4:96:16:64:90:d9:0e:62:eb:
08:6a:19:ba:80:37:a5:d4:6e:84:e3:6f:6e:38:51:
fe:95:41:81:5b:c9:e6:02:03:18:e4:1d:ee:e5:a5:
13:0f:ec:b8:ce:4a:e9:7d:3d:5c:84:cb:f4:f9:20:
b6:ee:ac:b7:71:92:45:84:ce:6b:fb:71:65:d4:37:
6f:dd:c6:80:3b:8d:a9:e2:9d:65:0b:31:00:5f:07:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:47:CA:F8:A0:21:3A:FD:95:F6:AE:B4:A4:D7:1D:4B:15:72:07
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/4mtHyvigITr9lfautKTXHUsVcgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.180.0/22
Signature Algorithm: sha256WithRSAEncryption
73:d7:0f:e6:d8:4d:61:f6:f7:fe:33:93:0a:d1:7e:9c:a4:d5:
f1:79:31:a1:86:ab:25:f6:e0:89:e4:44:24:56:b1:eb:ba:a7:
70:d8:61:f1:96:af:c5:7e:92:7d:30:5c:46:84:29:01:19:49:
ca:f3:5f:98:d0:15:15:72:d4:10:48:ae:b5:2f:21:3d:24:e9:
6d:75:37:22:c9:36:f4:a3:cc:31:2d:25:db:3f:ec:e5:76:09:
34:c8:39:a2:6a:6c:69:46:78:1b:42:da:04:34:29:8c:d9:ae:
73:02:cb:a1:19:e7:5f:00:0e:d7:1a:8e:3b:b9:13:2d:ff:c6:
de:d1:c1:28:f8:9f:63:31:e1:88:35:b7:14:74:3f:53:b0:26:
cf:5e:de:37:1a:20:de:ad:2f:ff:4b:05:bd:ac:b9:82:e7:a1:
5a:70:b1:51:7d:fc:41:ee:31:2d:f7:02:47:3c:b7:8b:a0:f9:
5d:a1:9b:74:ce:93:1e:8f:c7:4f:05:bd:7e:ee:12:5d:e9:4e:
2c:d8:15:63:ba:3e:bc:87:c4:1c:19:95:c6:2a:7e:2a:96:a4:
bb:31:8e:4c:5c:78:bb:8d:87:9a:fb:18:3a:c9:d1:0f:e4:22:
d3:26:9c:a5:0c:7e:fc:cc:e4:d8:d7:cc:2e:9c:7a:7e:7b:ee:
5a:64:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:15 2024 by rpki-client on console-fra.rpki-client.org