Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/eaML0TKj7olP4q-_m62Abua5hyE.roa
File: eaML0TKj7olP4q-_m62Abua5hyE.roa (raw, json)
Hash identifier: gL2P00B/WGSGCdUNNRO9f/LZmAh2aAg0rNDmDcvhTaM=
Subject key identifier: 79:A3:0B:D1:32:A3:EE:89:4F:E2:AF:BF:9B:AD:80:6E:E6:B9:87:21
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 01821C20C20B760FBE120B3CE947A1DEAB39
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/eaML0TKj7olP4q-_m62Abua5hyE.roa
Signing time: Wed 20 Jul 2022 15:01:25 +0000
ROA not before: Wed 20 Jul 2022 15:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 80.90.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1c:20:c2:0b:76:0f:be:12:0b:3c:e9:47:a1:de:ab:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jul 20 15:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79a30bd132a3ee894fe2afbf9bad806ee6b98721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:5e:e6:2f:e4:60:e9:db:90:61:11:69:f7:
37:49:81:ef:93:01:44:09:bf:80:41:b1:89:50:48:
5d:2a:56:f2:72:74:87:03:a8:39:fa:7c:10:8f:8c:
a3:53:b6:3e:ec:89:1f:94:72:cd:70:fb:b8:c9:d4:
39:08:d0:ad:1a:b0:9e:bb:4b:24:a9:4e:91:db:ba:
0f:08:2a:f6:1e:9b:ae:28:dc:86:fb:44:73:c6:ea:
4d:bd:da:7a:07:ee:28:ab:cf:ec:88:8c:7d:ea:17:
f5:bd:2a:1c:7f:56:a1:b6:68:50:1f:d5:dc:57:f0:
c4:25:89:c5:5d:a6:f4:7f:2c:aa:d8:06:3d:d6:b4:
28:c4:0d:04:1c:6e:60:a6:c0:f7:ba:2c:42:e0:be:
c5:b5:0b:f1:c2:f2:97:91:2d:db:96:7e:d8:b9:cf:
49:20:6c:1f:35:b7:a3:03:79:19:e2:1a:10:f1:ec:
64:55:cc:14:34:23:0b:8f:8a:ab:3d:5f:1d:d7:88:
a0:09:f2:5a:1a:b8:05:56:be:1f:82:ca:18:34:9d:
80:a1:79:c7:ce:be:e3:fc:21:85:6f:25:65:b7:3f:
e7:0e:b9:e8:a1:be:84:84:22:47:2a:94:9b:28:8a:
7e:aa:5c:6b:7b:4a:4e:5f:c5:d9:cc:8d:0a:5a:8a:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A3:0B:D1:32:A3:EE:89:4F:E2:AF:BF:9B:AD:80:6E:E6:B9:87:21
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/eaML0TKj7olP4q-_m62Abua5hyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.180.0/22
Signature Algorithm: sha256WithRSAEncryption
97:af:97:39:9b:b3:59:64:3e:ea:4a:ca:f2:87:53:f0:a6:90:
e1:1e:c7:ca:34:b9:42:15:e7:2b:5a:13:4b:e3:77:bf:06:55:
55:ef:bf:ed:4f:7a:b6:41:fb:33:cb:45:ad:b2:76:08:c7:6a:
a7:53:37:88:83:2b:2e:bd:ea:f6:3a:3b:e1:e6:a9:43:96:7b:
e0:06:d5:31:d7:0d:1b:e4:76:67:0f:6e:47:4d:c1:c6:c7:f1:
e2:0a:96:6b:98:ee:c9:0f:ef:34:1f:5c:75:8c:0f:69:1e:b2:
f7:53:2f:03:1e:f7:0f:34:a1:83:1e:92:87:d7:52:d4:59:00:
8b:24:ee:a2:7b:da:af:df:a7:76:21:c2:38:30:94:5a:9b:9b:
e9:9d:00:66:e5:47:d7:f0:e4:37:1e:b0:56:7e:40:5b:d8:a5:
e0:e1:c9:57:d7:cb:56:f5:c6:27:a1:f6:bd:fc:5c:d3:17:4d:
6e:7b:6b:fe:9b:be:63:2b:e7:03:67:fa:49:37:8c:f2:0e:42:
f7:5f:75:dd:55:d6:c2:21:dd:5d:48:c0:3d:97:39:67:54:ca:
ec:90:9b:d8:21:be:96:2e:64:ba:b2:47:06:f2:c2:03:5d:95:
c3:eb:e7:e9:74:91:9c:a3:c1:a0:23:6f:9c:32:66:9b:7e:90:
10:e4:7b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:23 2024 by rpki-client on console-ams.rpki-client.org