Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/NFOMUdraqQvowxTdg8x3krN3IKo.roa
File: NFOMUdraqQvowxTdg8x3krN3IKo.roa (raw, json)
Hash identifier: VtWLvSanhhtb6t5owDSgEUGoasdbLm/efvEzbYWBOII=
Subject key identifier: 34:53:8C:51:DA:DA:A9:0B:E8:C3:14:DD:83:CC:77:92:B3:77:20:AA
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17CF9B80
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/NFOMUdraqQvowxTdg8x3krN3IKo.roa
Signing time: Sat 01 Jan 2022 00:54:29 +0000
ROA not before: Sat 01 Jan 2022 00:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25107
IP address blocks: 80.233.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399481728 (0x17cf9b80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34538c51dadaa90be8c314dd83cc7792b37720aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:30:e8:13:c2:b2:6c:3d:49:ae:99:f2:45:
e8:71:75:2d:c3:59:e4:44:c9:65:46:54:e6:54:68:
e3:77:87:72:1d:03:41:7d:b5:83:7f:28:54:de:84:
33:a9:99:93:da:5f:1a:9b:6f:aa:f6:b3:4a:d9:3a:
2c:f3:de:91:33:5e:f4:6e:d1:70:06:3f:e0:5e:56:
e8:5f:ab:6d:8f:34:f1:18:f4:e7:2f:43:cd:45:0e:
c8:e5:1a:b3:c7:53:b7:86:78:90:0b:1f:8c:f0:c2:
5c:34:0c:5b:1b:e2:65:a9:08:6b:c4:cd:bf:55:5e:
a0:67:52:77:23:d5:7a:85:46:99:15:18:92:bd:7a:
ec:69:06:40:4d:69:1b:2c:ad:af:08:6f:5f:6f:45:
9e:09:b5:4f:4b:0d:06:32:23:4d:37:7e:60:e6:79:
1a:5e:2d:df:2a:ef:d7:e2:7c:e1:ea:79:d1:59:22:
ef:3c:95:68:95:e1:2e:f6:b7:7b:af:06:50:48:e4:
4d:c8:c2:a8:a9:d9:25:da:d5:f7:3c:67:b4:c7:eb:
8f:a5:53:ee:e8:35:3c:ea:a5:b4:a0:58:fb:87:44:
90:94:3c:34:9f:ac:90:51:aa:04:05:29:ff:c6:f7:
9d:25:67:d3:2d:01:d9:8b:0a:14:49:ca:1d:58:ec:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:53:8C:51:DA:DA:A9:0B:E8:C3:14:DD:83:CC:77:92:B3:77:20:AA
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/NFOMUdraqQvowxTdg8x3krN3IKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.138.0/24
Signature Algorithm: sha256WithRSAEncryption
94:8d:f1:04:2e:1e:4f:62:b6:3e:29:36:83:eb:ae:77:28:92:
93:0e:82:05:2e:2a:74:52:60:7d:d4:78:4d:7f:88:42:22:b0:
a6:51:a7:ac:9c:2b:c6:cf:17:5a:c6:b6:2a:f2:c4:e5:d0:f2:
ff:4e:e2:f1:8d:0c:c2:ac:6d:70:8d:84:ff:51:6b:83:f5:0b:
f3:75:a6:66:30:7c:9c:b2:70:c8:97:cf:cf:8f:2b:36:ac:18:
c1:62:90:5b:35:b2:3a:e9:5a:40:cc:dd:2c:02:aa:0b:ee:ef:
a7:bd:4d:bf:d7:3b:b5:62:2b:8b:11:f5:af:39:05:dd:5e:3f:
ca:82:0b:6c:e9:3d:6d:21:a5:84:2e:bd:e5:bb:4a:b7:d5:f3:
22:1c:72:ba:85:cc:0d:71:ca:fa:e5:58:f8:81:53:83:0b:7b:
0e:c6:05:1a:c8:07:d5:14:06:52:bd:d4:d0:82:18:60:6f:ae:
b8:b3:ad:c3:71:a8:0a:f3:1c:c4:34:82:ce:22:c2:f4:e6:29:
56:ac:19:85:be:ee:3b:7a:95:33:08:5c:86:4d:4a:e5:a3:5b:
62:63:00:87:4d:ce:cf:b9:bb:76:6d:1d:3d:e5:ea:91:11:63:
60:99:cc:92:f1:0d:ee:e8:08:e5:ea:09:ec:8a:92:57:92:f7:
44:93:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-fra.rpki-client.org