Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TU3-yXKnakhyTMl4abdfQuJaSW8.roa
File: TU3-yXKnakhyTMl4abdfQuJaSW8.roa (raw, json)
Hash identifier: OFTdMzXucZH/iw5G2yanYLsHL0eAnousprCRb8uAxmY=
Subject key identifier: 4D:4D:FE:C9:72:A7:6A:48:72:4C:C9:78:69:B7:5F:42:E2:5A:49:6F
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17E25E2A
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TU3-yXKnakhyTMl4abdfQuJaSW8.roa
Signing time: Sat 01 Jan 2022 00:54:40 +0000
ROA not before: Sat 01 Jan 2022 00:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197616
IP address blocks: 80.233.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400711210 (0x17e25e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d4dfec972a76a48724cc97869b75f42e25a496f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:a6:69:69:7c:9a:cc:23:d0:53:45:03:46:
bb:45:c9:0f:df:9e:77:12:96:54:f3:f5:99:3c:9c:
fe:4c:a2:01:1e:c1:38:f3:47:e2:99:56:c3:55:ba:
4c:11:ff:ad:b0:7d:32:6f:46:df:f0:b5:a8:e1:1f:
84:22:bf:0e:47:e3:5f:ce:56:f0:58:43:4c:12:8a:
58:ef:b0:86:fd:ef:be:d0:f9:44:f0:17:a8:b4:30:
76:03:11:96:52:51:ad:90:7e:2d:5e:1c:b0:1a:9c:
97:4b:b2:e3:77:38:cb:cf:78:93:6c:ee:50:1a:3e:
fd:cf:ef:50:b7:92:ea:0c:52:1d:0a:7c:75:56:60:
77:c2:bd:eb:69:7c:2c:9f:bb:7c:0d:6f:ee:5e:29:
de:de:b1:14:c8:ad:d7:fa:39:d5:2e:d3:d7:14:c3:
39:2f:95:3d:07:cb:92:de:b5:40:34:26:55:92:0d:
71:d0:56:d1:63:db:23:b2:95:ba:0a:88:80:ea:8d:
08:76:53:39:e1:a1:f7:3d:d1:e4:e4:7b:a5:95:be:
21:ab:a5:09:9e:d4:28:27:52:98:60:b7:20:2d:78:
05:02:b6:79:05:f7:cd:44:96:e9:06:70:d8:94:53:
d4:ed:ee:cc:73:2b:25:b8:78:9e:90:f0:2b:15:e5:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4D:FE:C9:72:A7:6A:48:72:4C:C9:78:69:B7:5F:42:E2:5A:49:6F
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TU3-yXKnakhyTMl4abdfQuJaSW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.240.0/22
Signature Algorithm: sha256WithRSAEncryption
32:38:b8:c4:ec:94:07:5d:e9:18:5c:0d:e6:28:55:67:eb:11:
ea:41:19:86:37:fe:d4:c6:05:69:b8:ac:14:85:3e:de:c4:a2:
63:18:08:b3:0c:bc:90:fa:00:c1:aa:5e:d9:87:f6:26:bf:6a:
90:b6:50:da:c2:3f:f2:c3:5e:43:34:bf:1b:6a:e6:37:93:77:
61:dc:64:78:46:fd:e2:fa:d7:d9:a1:5d:87:39:4a:8b:03:e6:
33:00:b5:49:ee:49:c0:20:72:f8:b7:32:e6:1f:80:7e:f7:f1:
a4:7c:7c:53:65:4a:47:61:7e:6f:c4:41:b4:1b:56:cc:eb:4e:
10:ec:3d:9a:13:bd:3e:6d:ba:01:2c:0f:ee:75:52:a3:e2:dc:
be:9c:ba:01:ea:2c:f4:e2:7e:e6:bd:dd:66:a4:46:39:7b:8f:
0b:25:91:eb:a5:f3:f8:d5:65:09:99:57:bb:e7:2c:ec:5f:b4:
75:4e:54:a2:01:2a:e2:72:be:32:73:3d:b2:cf:46:65:90:19:
85:94:6c:8b:f7:e1:fe:57:01:8e:e6:fe:f9:a6:6a:83:db:f2:
0b:a7:37:78:94:f1:c3:48:d4:79:04:ad:da:cc:a7:38:c0:e8:
35:ff:c3:68:8b:f8:2a:90:4b:37:28:3e:0a:ed:d7:17:58:3a:
99:33:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org