Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/bM4uH4mRhCjHVq0a-GtBsqJljHc.roa
File: bM4uH4mRhCjHVq0a-GtBsqJljHc.roa (raw, json)
Hash identifier: AbipKVcQun4do0CUxuTGRWTkoATlc3i/0qKacPjs3Rw=
Subject key identifier: 6C:CE:2E:1F:89:91:84:28:C7:56:AD:1A:F8:6B:41:B2:A2:65:8C:77
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01821A8CFE48DDEFE41D6993002A80BAB380
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/bM4uH4mRhCjHVq0a-GtBsqJljHc.roa
Signing time: Wed 20 Jul 2022 07:40:23 +0000
ROA not before: Wed 20 Jul 2022 07:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201728
IP address blocks: 80.120.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:8c:fe:48:dd:ef:e4:1d:69:93:00:2a:80:ba:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 20 07:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cce2e1f89918428c756ad1af86b41b2a2658c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:ac:a2:10:4e:fa:fe:be:43:5d:a1:7d:75:
a7:3d:c0:ef:89:38:6b:f3:2c:1c:ea:25:6a:1b:e8:
39:3a:a2:1c:7c:74:61:c2:5c:87:34:ea:e9:e7:c6:
d7:e3:5e:3e:a3:02:9a:02:5f:37:a1:32:f0:7d:74:
6e:1b:b1:ea:2d:e4:62:55:d7:8e:72:ac:15:6e:11:
b9:6d:60:5a:54:fd:3f:2c:05:58:49:f1:79:28:65:
75:f8:d2:bb:ee:ae:0f:fb:3e:2a:24:ea:8c:1c:40:
21:12:6e:dc:83:50:f2:b3:59:09:12:10:fc:3a:68:
7d:2e:5d:a8:5c:a2:e2:a9:de:d4:cc:84:61:ea:86:
5e:56:a0:33:34:76:9a:ee:cc:ee:e1:c5:b7:59:e3:
6e:31:c0:2b:e6:61:76:e4:82:dd:97:6f:76:6b:fb:
13:de:c1:51:e6:3d:15:be:fa:be:66:29:ca:6f:ba:
b4:e2:7d:29:f7:98:02:bf:1f:6e:3d:0b:be:20:3f:
a2:7b:99:2d:1b:c1:32:a8:e4:5b:03:c9:a8:64:09:
fa:bb:0c:c6:24:c9:d7:86:e9:f4:06:a4:07:86:ac:
ec:2a:ed:81:21:a9:72:0e:43:4e:a4:b9:83:30:84:
7a:08:1e:b7:dc:54:34:f5:53:69:c8:7f:c6:ad:f2:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CE:2E:1F:89:91:84:28:C7:56:AD:1A:F8:6B:41:B2:A2:65:8C:77
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/bM4uH4mRhCjHVq0a-GtBsqJljHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9a:28:9c:b7:04:75:fd:d5:9c:ed:3a:d0:a1:9f:0c:47:6d:
52:a3:9b:ce:9b:81:7e:f1:60:f1:e8:39:03:89:77:df:35:c6:
43:af:0c:6b:fb:b0:3d:ed:93:ad:1f:87:e4:4f:4d:39:b2:12:
0e:31:11:bc:f1:f5:ab:9c:2d:81:b6:5a:b0:cc:16:c9:33:cc:
d8:71:69:92:53:70:52:d0:4c:73:c4:18:d6:da:7c:7a:5c:c6:
9d:e9:00:ff:75:41:c6:22:86:c1:89:4e:d3:21:0e:0d:06:13:
7e:cf:00:cb:d6:2c:5e:62:14:73:cd:a6:65:e8:fd:76:d6:83:
1e:95:2c:3f:70:c0:2f:e1:a2:1d:d5:71:11:84:28:4b:1d:91:
80:7b:06:b9:09:ea:da:cd:b9:3c:f5:45:59:f9:93:ec:64:98:
6d:1d:ae:36:31:75:5d:1d:d3:39:25:1c:2d:3d:50:dd:4c:5b:
06:25:f4:f7:6d:00:84:d8:16:72:6f:40:9b:d5:c5:ce:95:6d:
37:8e:c2:1e:f5:bb:12:89:ae:c3:e8:16:2c:d0:6c:a3:26:17:
4e:b7:d2:aa:21:25:f7:a4:b8:72:cc:c6:77:2c:12:53:a2:95:
20:c5:0a:d7:56:d7:dd:53:66:60:b1:9f:67:97:2f:ec:1c:f0:
af:3a:3d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org