Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/I5v9uhCwK45eEK75XCxAItKLjvY.roa
File: I5v9uhCwK45eEK75XCxAItKLjvY.roa (raw, json)
Hash identifier: 13KcVIxAV6rZfjEp0Z1SQ5g963Oi/JO+PeHsf0KqN/U=
Subject key identifier: 23:9B:FD:BA:10:B0:2B:8E:5E:10:AE:F9:5C:2C:40:22:D2:8B:8E:F6
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 02D0442A
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/I5v9uhCwK45eEK75XCxAItKLjvY.roa
Signing time: Sat 01 Jan 2022 16:06:22 +0000
ROA not before: Sat 01 Jan 2022 16:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24806
IP address blocks: 194.182.64.0/19 maxlen: 24
80.211.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47203370 (0x2d0442a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 1 16:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=239bfdba10b02b8e5e10aef95c2c4022d28b8ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0f:9b:f2:cd:df:9b:81:10:20:fa:18:95:92:
c5:4d:6e:09:9b:88:d7:0c:ea:31:ea:ea:95:2c:81:
c6:5e:19:1e:6c:98:16:e1:ba:12:1a:55:bd:71:3d:
36:7a:73:7f:7f:6c:ff:99:b1:a1:33:c9:4d:0d:af:
17:24:8f:83:f1:ad:fa:10:bd:36:13:68:58:ab:8b:
70:92:cc:18:fe:30:89:58:bc:3d:12:cd:1b:7b:b3:
27:6f:1a:7a:14:1b:21:11:5b:d5:a9:28:2e:28:ac:
4e:10:de:7f:ed:c7:2f:f0:5f:54:8f:56:7a:35:bd:
ba:4f:42:81:64:7f:e2:6a:e1:2f:1d:60:49:9f:5f:
c6:ec:2a:13:b1:15:78:a3:22:20:50:a3:00:53:e1:
05:55:3d:e1:ef:e8:d2:3c:a6:40:49:05:b9:ea:4f:
ed:1b:84:c6:71:e8:2e:38:3c:83:34:05:04:af:d9:
04:f2:b7:76:9c:7c:3c:43:3a:2a:4b:0a:5e:fd:11:
0a:ad:1e:62:eb:c1:a0:ee:9f:65:6a:55:09:8b:14:
87:50:37:75:25:0a:92:ed:73:7f:7a:0e:45:fc:0a:
52:ef:77:1d:90:fc:8c:ba:ac:79:ae:78:93:dc:ac:
60:94:85:e5:01:69:3c:79:1d:42:2a:cd:86:47:ee:
cd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9B:FD:BA:10:B0:2B:8E:5E:10:AE:F9:5C:2C:40:22:D2:8B:8E:F6
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/I5v9uhCwK45eEK75XCxAItKLjvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.211.192.0/19
194.182.64.0/19
Signature Algorithm: sha256WithRSAEncryption
47:18:7c:d9:44:e0:c1:f2:ae:82:65:e6:2c:cf:e3:44:24:2e:
a5:21:b9:2f:b0:39:a8:3e:f6:0e:32:8c:26:01:d4:fd:46:e8:
d6:d1:3b:85:1a:5d:0f:47:4f:d2:c1:53:94:5a:a4:a2:49:45:
ac:bd:64:59:f4:97:ce:fd:f0:25:4b:7e:2e:e8:47:4a:8b:ca:
41:49:9f:88:30:c4:c6:6b:78:51:d2:72:75:32:10:c7:2f:c1:
fd:73:04:5d:2c:fd:ca:12:5f:87:18:ca:8e:66:ee:32:31:d3:
27:e6:1f:48:63:30:10:8a:a3:ec:bc:65:84:57:b2:4c:18:a0:
cf:62:52:22:52:40:63:8e:65:9b:d1:61:f5:87:59:3c:c0:cc:
77:4b:ff:46:ab:14:c2:e0:3f:00:ee:b3:13:2a:ae:01:3f:13:
4d:1a:82:25:31:35:7c:f5:b0:47:55:33:52:e5:ca:fb:5b:cb:
9d:dc:8a:8e:80:2b:73:e8:b1:e9:f9:4e:49:4b:41:88:7e:fd:
bf:d6:25:49:1b:ed:6c:4d:2d:7a:bd:df:a4:ef:96:37:de:29:
5e:a1:ee:35:08:55:77:62:e0:02:12:d8:48:0d:7b:55:e2:7f:
6d:e3:a4:f3:9b:6e:18:43:80:94:ef:01:30:b4:9a:76:78:79:
37:66:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:07 2023 by rpki-client on console-fra.rpki-client.org