Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3JzXmEMRI5xYBV73lMaPy0prE-s.roa
File: 3JzXmEMRI5xYBV73lMaPy0prE-s.roa (raw, json)
Hash identifier: 6soiIv+L+9pnGb4ys1DJsiR4O0PlRWjvPh14iycd21k=
Subject key identifier: DC:9C:D7:98:43:11:23:9C:58:05:5E:F7:94:C6:8F:CB:4A:6B:13:EB
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 08F4EAD0
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3JzXmEMRI5xYBV73lMaPy0prE-s.roa
Signing time: Sat 01 Jan 2022 08:05:24 +0000
ROA not before: Sat 01 Jan 2022 08:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209172
IP address blocks: 80.95.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150268624 (0x8f4ead0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 08:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc9cd7984311239c58055ef794c68fcb4a6b13eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:11:c9:52:00:d2:24:1b:44:62:82:c1:e9:
a8:59:a6:28:a5:af:d9:7f:00:8e:33:49:65:2f:aa:
6c:a0:21:57:92:e4:f7:90:9d:ba:ef:04:38:bb:9f:
c0:1e:a9:7a:7c:d5:c6:5c:5c:c7:ed:0f:ac:6f:70:
f8:29:52:76:58:bb:ae:71:36:e2:bb:b2:1d:9e:cf:
42:03:7f:2a:c9:b8:62:c1:17:8e:09:d3:f6:a2:82:
9a:a9:d3:73:e9:de:13:e3:f8:64:d7:2a:4b:ea:00:
27:6b:c5:4e:ae:90:e4:ff:d3:8a:c9:f8:52:69:47:
08:e4:04:c4:c7:6e:76:0b:0a:07:bb:4b:d5:e8:8c:
f4:30:1c:32:46:82:80:82:28:0c:24:f1:85:fe:5a:
0c:c9:11:24:30:d5:64:78:d1:c5:39:0a:e0:ea:54:
47:c2:2b:48:ca:b1:04:b5:0d:12:1a:f9:14:00:ec:
4e:c0:13:25:5f:4e:e2:c9:aa:20:8b:5c:34:f3:bd:
24:2b:d5:fb:92:e7:21:67:80:e7:71:9a:fb:95:2b:
57:ca:29:af:61:a0:9a:da:59:41:0c:a5:96:5d:71:
73:df:a5:e3:72:05:13:80:bf:b0:06:6e:c2:88:81:
16:fc:93:9f:51:10:c7:61:eb:8c:ee:a7:eb:e0:15:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:D7:98:43:11:23:9C:58:05:5E:F7:94:C6:8F:CB:4A:6B:13:EB
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3JzXmEMRI5xYBV73lMaPy0prE-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6c:d8:c6:62:cc:82:3b:d4:ff:7e:bf:4d:80:03:fc:e1:19:
0d:20:a2:28:29:c6:64:16:8a:d3:1a:ca:d9:0c:ff:5f:13:6e:
a5:bf:34:2d:c8:bf:ec:4b:22:ba:b2:e3:50:a3:21:19:03:c5:
91:82:e5:d5:69:04:b0:07:cf:f2:0f:92:cf:59:47:e1:09:f6:
3d:df:38:9a:c3:cc:22:da:c4:03:74:c5:33:96:d3:41:90:c0:
d9:fe:2d:13:81:12:ba:f1:30:85:1c:ec:68:29:46:8c:1b:46:
a2:e0:e9:0b:30:e9:b9:1c:91:2e:05:60:d1:ba:42:12:e4:51:
8a:a6:80:af:12:25:16:09:c1:69:8e:ad:b7:9d:03:97:54:1d:
94:c0:6d:1d:e5:8b:54:ee:e0:36:aa:c3:fb:2c:ed:81:34:2a:
5c:08:ac:7f:6f:a7:70:27:3f:6d:ce:79:1f:f7:29:c7:ab:ae:
ad:e4:a4:45:05:0b:d3:27:7c:c1:3a:d3:b9:bd:8f:5e:27:d2:
62:27:98:8f:31:24:02:fe:c9:e7:2b:64:bf:9f:79:ea:05:06:
b0:4f:7c:cf:34:23:3f:64:4e:97:c4:aa:6b:88:11:8d:00:a2:
c4:1a:44:bc:8b:d4:47:9f:c6:78:01:d4:1e:a6:ba:73:5a:f3:
d4:76:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:35 2024 by rpki-client on console-ams.rpki-client.org