Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/9fkF-lQJ1mnZ2smm-FPj_9pwkc8.roa
File: 9fkF-lQJ1mnZ2smm-FPj_9pwkc8.roa (raw, json)
Hash identifier: xfHZS2sQsUkGrfYy3d2k3aNMTppJT/DJw/1zBZRS5/I=
Subject key identifier: F5:F9:05:FA:54:09:D6:69:D9:DA:C9:A6:F8:53:E3:FF:DA:70:91:CF
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17DACFB5
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/9fkF-lQJ1mnZ2smm-FPj_9pwkc8.roa
Signing time: Sat 01 Jan 2022 00:54:34 +0000
ROA not before: Sat 01 Jan 2022 00:54:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47499
IP address blocks: 80.233.230.0/23 maxlen: 23
80.233.228.0/22 maxlen: 22
80.233.252.0/23 maxlen: 23
80.233.160.0/23 maxlen: 23
80.233.190.0/24 maxlen: 24
80.233.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400215989 (0x17dacfb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5f905fa5409d669d9dac9a6f853e3ffda7091cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:57:98:c1:e4:cd:af:d9:56:7d:10:e0:87:b1:
fa:0a:b6:49:ee:2f:d3:da:32:1c:6a:e1:3d:09:99:
ca:fd:38:f3:a1:d9:42:f4:4a:88:be:34:be:f4:e0:
6b:53:ca:cf:25:75:86:a7:86:ce:0d:f4:ea:1b:3d:
1e:5f:4f:6e:c3:91:90:4a:e6:f0:10:e5:a7:a2:1a:
c4:a2:b2:f2:2d:fa:b0:f3:de:3f:ce:14:13:f3:6d:
d2:bf:1d:1d:f6:f3:8c:d6:f4:43:51:af:f1:ca:9f:
24:09:47:30:da:5a:66:07:33:8b:c0:f9:34:be:58:
00:e1:56:ca:e4:e1:f1:69:ee:a3:c9:6e:a1:db:16:
80:2a:15:ea:3b:f7:6e:bb:b8:fc:7d:8b:0f:ea:85:
66:e6:b6:26:04:fe:21:6c:ba:d6:86:0f:82:28:8e:
a4:c0:80:e6:4f:bc:46:33:f1:f9:51:aa:17:40:f2:
0c:c4:2b:93:e6:46:0a:50:02:fb:4e:7f:3f:dc:5b:
4a:71:43:e6:ea:71:87:b3:ca:15:94:6d:64:90:81:
c6:1e:77:e0:66:f8:77:7c:e4:10:71:0e:45:46:df:
9d:14:1e:f4:57:4d:c3:f7:e0:9d:26:ff:84:a2:bb:
4a:59:ba:2b:95:ce:09:b6:3e:01:4f:39:e1:30:4e:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:05:FA:54:09:D6:69:D9:DA:C9:A6:F8:53:E3:FF:DA:70:91:CF
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/9fkF-lQJ1mnZ2smm-FPj_9pwkc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.160.0/23
80.233.188.0/22
80.233.228.0/22
80.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
30:22:f9:86:c1:44:3f:b0:06:e1:4b:9c:49:5d:cd:f4:22:7f:
06:74:b5:4a:05:7c:31:c1:ff:31:2c:bb:78:36:86:d4:39:c7:
4b:ca:33:74:09:8e:ba:22:90:6f:70:0c:79:76:f5:65:40:54:
b5:66:da:e9:1a:dc:65:c5:41:94:b4:fc:66:8a:45:c2:7d:b1:
eb:f1:fd:46:c6:43:61:7d:1f:0d:8f:c3:0c:0c:19:e5:be:8d:
c5:49:b9:53:dd:37:8c:e1:1f:b7:56:86:f5:77:b7:ea:c7:f1:
b1:dd:0c:b0:dd:96:33:fd:27:a8:e7:5f:b8:43:16:b1:13:6e:
86:51:13:1e:00:83:57:a7:66:b3:fb:1c:14:b5:b7:07:03:a8:
ca:08:c0:32:a9:17:d9:b9:3b:d3:04:65:73:83:b6:d8:20:18:
45:f9:82:fc:34:1e:08:ce:d5:42:c2:a7:3d:0d:bf:2f:16:d1:
44:4a:7a:92:af:07:b8:5b:2e:4e:0d:bf:75:dc:80:68:05:5a:
e8:5b:84:57:f9:8c:45:a2:8d:03:21:4f:a5:51:e4:af:fc:18:
ac:ee:a1:91:f0:58:35:7f:54:1c:6c:28:44:d6:3a:72:fa:60:
7c:2b:eb:e8:22:6c:08:e8:a2:c1:1b:e4:d8:f3:a2:34:b9:8e:
cf:04:f7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-fra.rpki-client.org