Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/2FZGwu8sDX_N82S1XEYfLGAz3jY.roa
File: 2FZGwu8sDX_N82S1XEYfLGAz3jY.roa (raw, json)
Hash identifier: BhrFRd7/GUybDBEBxRV8XtSrQb5r40NZOnGqsPDV+Bk=
Subject key identifier: D8:56:46:C2:EF:2C:0D:7F:CD:F3:64:B5:5C:46:1F:2C:60:33:DE:36
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01851CDE1780994CD1F9EFB57AD6B65267B7
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/2FZGwu8sDX_N82S1XEYfLGAz3jY.roa
Signing time: Fri 16 Dec 2022 21:36:35 +0000
ROA not before: Fri 16 Dec 2022 21:36:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 80.246.232.0/24 maxlen: 24
80.246.233.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
80.246.235.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:de:17:80:99:4c:d1:f9:ef:b5:7a:d6:b6:52:67:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Dec 16 21:36:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d85646c2ef2c0d7fcdf364b55c461f2c6033de36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:5f:d2:ac:7a:2a:67:f3:e8:e9:21:2e:8f:
ee:48:f4:20:bf:d6:fb:75:93:b0:a1:14:ea:99:76:
39:00:88:14:65:c3:65:ae:31:8c:f6:8f:0b:35:5c:
83:75:51:60:cd:62:04:b4:b7:9c:74:70:b8:dd:ca:
91:e0:56:04:6f:35:be:f8:36:be:1a:57:29:b0:ca:
93:f5:91:56:1d:b6:8c:c6:57:96:b6:96:64:05:d1:
dd:39:e4:6e:3b:97:84:3b:be:b9:c9:46:d0:b9:15:
24:5f:7a:10:f3:5e:d0:fe:47:a1:ec:9d:6c:d8:12:
88:d9:35:3d:34:7f:97:2e:ea:5a:20:58:4b:8b:f0:
40:dc:42:e1:f2:96:84:d6:db:27:af:6c:13:28:96:
04:e6:c3:ce:d5:13:36:4f:80:56:fb:d3:4c:5e:82:
f0:fc:ed:41:6d:d1:d5:f1:ea:d1:36:62:82:1b:7a:
4c:ec:ad:90:9a:44:b4:31:88:27:4f:f4:cc:0e:8f:
30:6e:9e:f2:86:2a:17:d8:6e:e5:16:dc:fb:7a:48:
0f:12:6a:95:ee:42:6b:8a:eb:92:04:66:bb:09:18:
bf:84:aa:ec:bd:bf:60:ba:45:c7:77:86:3d:bf:ae:
9c:db:0b:bf:d9:5f:ba:c3:cf:d8:7b:f5:e3:71:a3:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:46:C2:EF:2C:0D:7F:CD:F3:64:B5:5C:46:1F:2C:60:33:DE:36
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/2FZGwu8sDX_N82S1XEYfLGAz3jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0-80.246.236.255
Signature Algorithm: sha256WithRSAEncryption
34:9d:5d:89:10:21:f7:7b:5a:1b:cf:60:40:b5:20:87:ac:bf:
05:a4:d3:29:de:f1:22:f4:3e:8a:5d:e2:4f:10:8d:7b:09:e8:
40:b0:62:ee:e3:3f:53:1c:04:15:a8:0b:c7:7b:71:47:62:cf:
ee:65:fc:34:7d:41:a6:ac:c1:6a:8e:38:60:17:7d:c1:85:4c:
41:c1:b7:4e:11:14:6c:72:9e:c7:a3:42:eb:39:c5:a1:64:73:
03:2d:28:2e:d5:25:d3:93:10:35:64:23:3b:ce:b4:d8:73:56:
e4:b8:a9:87:ff:58:4d:c4:70:62:8a:4f:fa:e4:ef:56:20:b6:
93:64:96:7a:3c:1f:8a:fd:d6:9e:d8:47:28:d5:c8:81:a8:b7:
e5:34:17:f7:5f:03:e2:fb:52:45:ff:2a:39:36:c3:03:22:15:
84:13:ff:13:af:52:ff:03:e6:4d:de:f4:42:ea:46:27:7a:8f:
e5:25:33:c6:21:1c:e3:49:23:ee:50:d4:dd:fd:84:38:47:54:
c5:5b:d1:20:57:c0:07:38:6c:11:92:66:2a:c8:27:74:46:a4:
c6:ff:6b:fe:87:23:e6:d0:ab:ce:42:d2:86:48:68:3a:2b:3a:
ab:1a:3c:06:3b:99:2b:58:4f:6a:c5:76:0e:2f:9b:d3:85:04:
1d:b7:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org