Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/66KLS8LMcFHr67oGyIfuR9yxBGY.roa
File: 66KLS8LMcFHr67oGyIfuR9yxBGY.roa (raw, json)
Hash identifier: vMJhoRdACcpp/U7XPzzFQrOWgMIH6FSbb32Lfybt2CY=
Subject key identifier: EB:A2:8B:4B:C2:CC:70:51:EB:EB:BA:06:C8:87:EE:47:DC:B1:04:66
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17D3FD07
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/66KLS8LMcFHr67oGyIfuR9yxBGY.roa
Signing time: Sat 01 Jan 2022 00:54:31 +0000
ROA not before: Sat 01 Jan 2022 00:54:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41333
IP address blocks: 80.233.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399768839 (0x17d3fd07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eba28b4bc2cc7051ebebba06c887ee47dcb10466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:d7:fa:60:4d:d3:65:37:76:91:48:a1:3c:
3b:da:26:90:a3:96:f7:7f:8a:23:fe:26:ad:99:77:
fd:f1:ed:f0:53:0e:d7:03:8a:d4:7c:18:fb:88:1f:
ae:21:09:31:e3:d9:ec:29:d7:25:89:68:5b:32:af:
91:91:1d:98:62:1f:f3:d7:32:17:87:48:80:71:73:
fd:51:b0:96:82:a3:de:2c:c2:ec:53:1e:d8:11:7b:
f9:34:e9:c3:c5:41:d1:4c:2e:c8:7e:6c:b0:15:13:
2c:c2:da:9a:16:97:e1:05:02:22:e2:7f:de:35:71:
32:ef:58:8c:06:f0:d7:08:2d:4a:1e:9e:a1:15:2a:
87:a8:c0:35:0f:03:b2:11:42:ca:b6:1a:04:00:b4:
6b:a4:ff:18:ae:7d:a0:21:e2:e8:ce:2a:5a:31:46:
a8:32:f4:d6:dd:8f:0d:90:70:2b:ac:54:68:88:e3:
9f:64:2b:e0:d4:b3:e2:c4:83:05:26:bd:4b:b3:be:
c5:3b:20:d6:9a:9d:d1:a2:e3:b0:c7:3c:7a:e9:66:
e3:8d:40:ad:4e:cd:b8:a7:c1:50:5a:65:50:ac:f4:
7d:93:c0:d8:de:19:7a:ab:24:74:1a:ce:99:51:a9:
2d:8d:45:85:08:f7:93:7b:35:f3:83:31:09:0b:57:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A2:8B:4B:C2:CC:70:51:EB:EB:BA:06:C8:87:EE:47:DC:B1:04:66
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/66KLS8LMcFHr67oGyIfuR9yxBGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.246.0/24
Signature Algorithm: sha256WithRSAEncryption
06:30:07:0c:8c:9c:09:ff:ec:ad:89:bf:d1:31:a8:b9:0e:9d:
1a:71:d7:a3:07:6d:26:d0:54:ff:8b:1e:9e:bc:3b:99:6b:c9:
ff:8a:3f:4e:e9:66:b9:f6:3e:36:f5:93:73:da:3d:ea:f2:ab:
79:2a:37:da:c3:7d:5e:2d:a4:de:fb:52:55:95:94:01:34:df:
ce:b9:ff:a5:09:5e:27:c8:0c:55:78:80:4f:cc:dd:4f:fc:62:
bd:57:a8:2a:63:53:6d:af:ae:08:be:01:3f:bd:a2:50:b3:68:
76:88:b8:2d:78:b9:be:6a:ea:de:d0:b0:62:a5:8a:f8:ca:d4:
c3:ef:b3:9d:1a:dd:7b:67:42:9e:52:26:f5:f5:c8:89:3e:b1:
46:b8:4e:bb:c2:50:ea:e2:ae:d4:4e:65:52:62:27:25:3a:c4:
d4:3b:8d:df:1c:5a:7e:14:41:f6:f2:70:dc:2d:44:8d:2b:a7:
f3:27:82:1b:55:a1:94:04:01:62:07:9f:ad:47:35:aa:e0:a2:
a1:75:4c:66:88:f8:70:95:9f:b6:2d:e6:0a:ba:29:e1:46:49:
73:d6:34:78:2d:b1:4a:4b:fa:34:ae:f1:f4:b3:2c:7f:de:47:
29:9d:c7:1c:4d:0a:f9:58:be:af:2a:14:66:37:d1:42:cb:50:
9f:9a:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org