Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/qBLUYPB1rq5Kv_GDnlHNkp2R8l0.roa
File: qBLUYPB1rq5Kv_GDnlHNkp2R8l0.roa (raw, json)
Hash identifier: SgmFTQzeozwtzWkVOJUKqJQd1PMqEgQlL4n+y1O8hB0=
Subject key identifier: A8:12:D4:60:F0:75:AE:AE:4A:BF:F1:83:9E:51:CD:92:9D:91:F2:5D
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 126C0A00
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/qBLUYPB1rq5Kv_GDnlHNkp2R8l0.roa
Signing time: Sat 01 Jan 2022 02:55:46 +0000
ROA not before: Sat 01 Jan 2022 02:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39153
IP address blocks: 80.248.80.0/20 maxlen: 20
80.253.16.0/20 maxlen: 20
109.71.192.0/21 maxlen: 21
2a00:5d00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309070336 (0x126c0a00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Jan 1 02:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a812d460f075aeae4abff1839e51cd929d91f25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:7d:13:b8:d8:a4:94:aa:0e:a4:92:d7:59:
41:a6:ac:e5:70:6d:87:cb:cc:3c:24:4a:2e:25:cb:
f8:a7:54:17:20:83:b2:f6:77:d8:b0:ee:5b:2a:28:
2e:03:e7:3e:a4:6e:17:de:40:e2:2c:68:6f:3f:4f:
01:d7:95:ff:2b:d1:c8:8c:e1:3c:be:55:c9:5b:44:
77:db:75:08:66:85:c8:05:a7:89:c5:c3:57:25:d1:
1d:42:40:4f:1d:02:b3:e8:c2:ed:d2:32:ab:0d:d2:
6a:e3:c1:5d:60:13:9d:89:30:18:d1:83:b9:1a:d1:
10:d9:c4:57:20:f5:1d:b7:43:c3:fa:90:e3:41:85:
78:0a:2d:2b:0b:83:50:33:dc:a9:67:c0:33:76:ec:
fc:9b:3a:52:f2:81:a2:46:0c:86:c9:9d:c4:f1:ed:
22:b7:35:21:fb:b1:25:e6:68:35:a7:f4:54:f6:34:
47:02:33:30:83:ab:87:29:fb:6c:0c:15:d8:a6:61:
b4:f0:49:df:3c:dc:9a:f4:86:82:ff:5e:92:f1:c4:
0e:62:18:c7:45:bf:21:b0:34:0d:15:84:f3:20:74:
fa:6a:a5:e0:86:07:60:1c:18:13:a0:c3:53:52:8b:
85:26:16:68:33:6f:e2:96:dc:67:40:05:e5:ae:bc:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:12:D4:60:F0:75:AE:AE:4A:BF:F1:83:9E:51:CD:92:9D:91:F2:5D
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/qBLUYPB1rq5Kv_GDnlHNkp2R8l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.248.80.0/20
80.253.16.0/20
109.71.192.0/21
IPv6:
2a00:5d00::/32
Signature Algorithm: sha256WithRSAEncryption
4d:8c:11:3a:6f:6d:63:52:1b:97:66:4a:2f:f4:0d:53:c1:91:
58:29:cc:e9:8e:67:9c:fa:84:cc:2b:66:41:ea:8b:1e:67:83:
e7:70:f3:ed:9e:ac:72:45:0c:9a:78:15:b6:06:34:c4:b9:a7:
70:c6:a8:e5:19:13:4d:07:c6:5c:0c:60:5d:02:55:d6:dc:2a:
09:3c:ef:2f:e3:4c:db:af:53:78:5a:f3:f2:43:cc:fe:37:c1:
9f:69:8f:f1:39:ac:f0:8c:f8:ce:c1:28:cd:fc:5b:7a:3d:b2:
bd:8a:fb:72:f5:d7:4a:39:a6:16:07:c5:d2:11:b7:2c:a1:d4:
8f:9f:53:a3:74:6c:9c:eb:cb:91:16:65:b0:d2:95:9f:bb:81:
80:e3:9c:59:1a:91:01:c7:d8:f5:03:f4:5a:ad:8d:c3:9c:46:
fe:e3:0e:47:55:30:92:12:13:14:9e:66:bd:8b:a8:ed:75:bb:
0b:2e:f2:e4:87:d9:31:f1:68:7f:33:61:c4:17:90:a6:6c:39:
be:21:2f:89:92:4c:3c:1c:46:11:c2:1b:d7:cc:b0:78:00:e8:
a2:7e:4b:d4:6b:84:53:58:ec:bd:a7:5e:c7:90:49:4c:66:d2:
55:61:c7:20:d5:3a:de:46:e2:64:1c:65:5e:ac:c3:03:d2:6c:
7a:1f:32:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:26 2024 by rpki-client on console-ams.rpki-client.org