Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/J20EJ5d-wLJ6eLmkzoB3rHSZxkE.roa
File: J20EJ5d-wLJ6eLmkzoB3rHSZxkE.roa (raw, json)
Hash identifier: luYUs9ASECj+JfAXdWuBnxNGL73bCZg17iJ5Hbo/s3s=
Subject key identifier: 27:6D:04:27:97:7E:C0:B2:7A:78:B9:A4:CE:80:77:AC:74:99:C6:41
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17D72E2C
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/J20EJ5d-wLJ6eLmkzoB3rHSZxkE.roa
Signing time: Sat 01 Jan 2022 00:54:32 +0000
ROA not before: Sat 01 Jan 2022 00:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43915
IP address blocks: 80.233.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399978028 (0x17d72e2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=276d0427977ec0b27a78b9a4ce8077ac7499c641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:4d:92:f4:bd:7a:87:ce:29:b6:91:44:c9:
75:92:c3:ec:13:af:aa:68:9d:56:53:b8:89:a1:45:
19:03:18:bb:fe:95:49:68:36:b8:86:36:4d:61:b0:
3c:db:65:4e:72:2d:30:c4:17:1e:7a:2e:ba:c4:c4:
26:2f:68:79:8c:9f:ed:a0:c2:8f:4b:82:c5:e6:9f:
09:f0:b0:9a:d7:79:58:b0:6b:78:6e:07:d2:63:ff:
af:7d:a3:d3:f0:a2:fd:e5:50:ec:b7:e1:4d:cc:f8:
36:43:3f:2d:0c:d8:5a:bd:0a:f5:01:7a:9c:52:ec:
46:16:77:56:f9:2a:25:43:db:32:73:cd:f0:e0:cf:
9b:aa:3c:85:87:b5:69:9d:99:5d:90:96:7c:ac:7a:
d9:a5:bd:ed:ef:d9:83:2b:47:a0:cd:0f:15:73:7a:
ac:56:0a:97:50:9d:47:10:78:58:a5:e7:38:fd:19:
2e:aa:e8:46:b4:6b:a6:cb:36:cf:0d:3d:e5:9c:ea:
6d:37:65:05:b6:d5:43:9b:96:f5:e4:f4:41:a4:c2:
a0:f9:e0:a8:98:ae:40:2d:77:dd:a4:42:1c:3c:c1:
52:d9:6a:c0:93:e3:c8:65:90:ab:35:75:88:f9:21:
d4:dc:9d:67:e1:92:fb:01:62:bb:f8:bc:90:3b:8d:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6D:04:27:97:7E:C0:B2:7A:78:B9:A4:CE:80:77:AC:74:99:C6:41
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/J20EJ5d-wLJ6eLmkzoB3rHSZxkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.238.0/24
Signature Algorithm: sha256WithRSAEncryption
94:aa:b5:66:76:92:60:4c:cc:6b:fa:29:5b:02:29:a1:f5:81:
0d:42:82:85:fe:b7:8f:13:af:be:f1:d7:d1:ef:68:64:52:b3:
20:fe:ba:76:eb:c0:e1:81:f6:88:80:a8:90:1e:71:d2:1f:24:
03:7c:fa:4b:89:7e:0b:81:95:10:28:e2:48:17:ae:7b:6e:76:
2c:7c:23:f2:2e:03:3f:f6:e9:8d:ef:96:9a:66:77:2a:f2:df:
bb:63:a2:df:f8:0e:46:ea:dc:e8:40:54:d8:85:e2:67:60:c0:
76:4b:c9:82:4c:6c:94:07:55:89:53:d8:32:fa:3c:68:32:5f:
8f:70:2a:d4:db:1e:b5:01:d4:b5:78:95:1b:53:c5:6d:2f:65:
53:73:a0:5d:4a:ff:3d:c4:99:48:e9:f5:ec:d6:88:dd:c8:09:
ba:91:7d:fc:dd:1d:f1:4e:01:81:26:69:b3:96:2c:b7:1a:31:
24:22:19:c0:99:21:14:2b:81:99:bb:10:65:5d:71:cb:ba:e0:
47:29:c7:b4:89:6e:09:72:62:c8:b9:99:1a:be:80:08:4d:08:
4c:6f:79:c6:e1:d9:75:79:5a:33:af:da:de:2f:70:da:c5:0e:
53:3b:8d:d4:e5:5c:fa:82:6a:8d:be:89:fd:c8:6f:46:d3:71:
bc:94:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org