Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/aLPuu1Kgf3XyqhT2AfD7EjpWReU.roa
File: aLPuu1Kgf3XyqhT2AfD7EjpWReU.roa (raw, json)
Hash identifier: kJHpihj6b+7yqbDffxB5Ur0yiLsZAJdToFpuS6qO7/0=
Subject key identifier: 68:B3:EE:BB:52:A0:7F:75:F2:AA:14:F6:01:F0:FB:12:3A:56:45:E5
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 18D84757
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/aLPuu1Kgf3XyqhT2AfD7EjpWReU.roa
Signing time: Wed 20 Apr 2022 05:39:17 +0000
ROA not before: Wed 20 Apr 2022 05:39:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35407
IP address blocks: 80.233.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416827223 (0x18d84757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Apr 20 05:39:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68b3eebb52a07f75f2aa14f601f0fb123a5645e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:5e:5b:fb:2c:08:97:9c:ff:3a:46:79:30:
d5:ca:99:fa:95:d2:a6:8e:2d:a2:03:d2:7c:1a:e1:
a5:d3:08:40:7a:13:85:11:d6:54:9e:fd:c3:dd:da:
28:42:98:db:ff:ec:f7:8a:df:ec:19:02:2f:04:e6:
b3:be:a5:b8:ef:1c:22:4e:0a:95:cf:57:ab:ce:9f:
c6:9f:50:b9:35:cc:1c:b3:b7:43:cf:13:d7:62:b5:
bb:3c:a1:50:a2:f8:13:a1:94:90:5e:ce:93:40:8d:
38:2b:0b:be:e1:00:7b:af:5b:47:38:ff:ec:49:43:
e9:ca:e9:c9:24:b6:e5:f3:20:7e:6a:46:8f:a5:f4:
1c:57:0a:93:0c:6f:50:20:40:0d:55:57:87:43:09:
9b:04:74:79:06:65:5c:c7:e9:75:c8:e4:8b:3e:c8:
dd:1d:02:ab:2e:cc:56:8f:eb:fd:0a:12:b4:7a:e5:
d0:f5:25:ab:19:21:e3:ac:eb:1a:e8:22:b6:52:fe:
b3:b8:e0:2f:29:da:28:88:04:11:e7:fd:8c:0e:32:
99:74:43:39:d8:cd:72:53:4e:e2:7b:d4:ba:b1:40:
1e:92:b6:3b:e8:e0:60:d9:a9:4e:13:2a:f2:9c:cd:
75:fe:35:ee:06:08:19:5d:1d:6e:6d:6e:3c:25:03:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:EE:BB:52:A0:7F:75:F2:AA:14:F6:01:F0:FB:12:3A:56:45:E5
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/aLPuu1Kgf3XyqhT2AfD7EjpWReU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.251.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8c:5e:e8:21:41:0b:be:db:c5:61:b1:c1:0f:1b:a3:07:88:
dc:de:25:d5:b5:11:79:fe:bd:c2:6c:62:38:76:d1:f8:f0:88:
b6:1c:39:c4:ed:01:e7:df:6c:92:44:4a:f6:f1:22:93:4f:65:
40:33:29:10:6a:36:0d:77:69:f9:2e:79:83:eb:bd:02:83:41:
69:4d:4f:12:81:2c:a6:e8:ac:7b:69:59:83:93:bc:d3:0e:38:
94:b6:11:cc:43:d7:5a:e4:62:a0:3d:21:64:d7:14:ad:02:78:
c8:31:65:ce:38:bc:32:d8:d2:d9:b7:32:bd:f6:b9:09:a6:2d:
68:ab:d9:88:15:80:2f:26:4a:48:7e:e5:02:10:66:19:00:84:
ce:6e:85:bd:a9:ea:da:0c:69:d6:25:50:b9:64:30:7f:2a:de:
a8:b4:bc:0b:35:00:1d:2d:c3:a2:4b:02:8e:72:11:36:9b:d8:
b6:29:64:a9:24:29:cc:13:a9:8f:93:07:6d:9f:29:66:f3:06:
de:31:c9:ce:d6:89:a1:68:20:75:ab:91:cc:af:cb:28:1d:3b:
bc:41:71:a6:8c:33:0f:57:d3:87:4b:7a:43:40:3c:fa:20:fe:
a8:14:7b:9e:e7:b6:41:c0:a2:2c:3a:08:24:98:26:3c:ea:b0:
36:cc:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org