Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/dGajjTzqlOCQ7zZLAJceDH5yWuA.roa
File: dGajjTzqlOCQ7zZLAJceDH5yWuA.roa (raw, json)
Hash identifier: gL/zPsVg+QKhbbfq7n+01f9r1TxE3vDwUD+HXIOrMc8=
Subject key identifier: 74:66:A3:8D:3C:EA:94:E0:90:EF:36:4B:00:97:1E:0C:7E:72:5A:E0
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 0F1D73CC
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/dGajjTzqlOCQ7zZLAJceDH5yWuA.roa
Signing time: Thu 24 Feb 2022 19:32:15 +0000
ROA not before: Thu 24 Feb 2022 19:32:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47570
IP address blocks: 80.232.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253588428 (0xf1d73cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Feb 24 19:32:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7466a38d3cea94e090ef364b00971e0c7e725ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:c0:36:f9:d4:d2:28:28:fb:bf:06:be:1c:
01:c2:d1:b0:ac:a6:6c:eb:51:5c:30:be:24:62:5e:
4f:5b:b4:ea:b9:4d:93:c9:ce:4d:22:4c:e3:d3:dc:
ed:f5:7a:fe:3c:61:78:a4:b3:85:ff:d8:b5:79:fe:
9c:83:b0:df:30:6e:61:13:80:4d:59:70:57:e4:48:
93:7e:a1:63:92:3c:ad:9d:8b:bd:5a:83:9b:c7:ac:
15:c0:94:5f:5d:b0:19:5e:e8:c3:03:43:61:31:78:
8a:92:52:8a:e9:74:d8:ee:c2:fc:3e:4f:64:8f:c3:
05:1f:17:1a:27:b4:a4:97:db:7a:4f:23:8d:00:49:
cd:f3:70:c2:ea:bf:68:8a:82:bb:05:5b:36:4e:49:
8b:1e:24:83:bd:34:75:57:b1:20:d2:be:83:58:1c:
48:32:18:a4:7e:b5:1c:bb:ce:5b:7e:d3:9d:16:3b:
20:ae:88:8c:a7:37:1f:1d:1e:93:42:5f:9f:d4:77:
e2:44:5e:3b:88:a2:85:29:76:9d:1f:3d:eb:d4:89:
98:10:05:b1:4f:b7:74:c7:4f:51:f3:80:04:2d:e0:
3b:99:f2:b9:db:95:b7:80:0d:97:6e:6f:9d:68:e2:
05:d1:ce:a2:12:aa:ea:db:64:b4:35:e0:1b:f4:2c:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:A3:8D:3C:EA:94:E0:90:EF:36:4B:00:97:1E:0C:7E:72:5A:E0
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/dGajjTzqlOCQ7zZLAJceDH5yWuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.232.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e0:69:b5:7f:b0:19:8a:9b:3d:b3:ab:4a:a7:d4:d4:43:8f:
fc:3c:da:9c:54:f8:53:e2:13:41:a5:2e:f6:a0:6f:5d:4e:20:
5a:f3:e8:31:79:57:87:29:3d:89:46:0c:01:8b:e2:44:9b:7f:
fe:67:c7:2b:db:96:6b:0a:e9:a5:f7:95:77:3f:5a:a0:65:5e:
53:3b:71:9f:11:42:31:ed:9b:1f:ca:3c:af:fb:9d:9a:83:5d:
db:1e:d3:99:2e:f1:3a:07:9c:f7:23:f4:1f:d7:0b:24:54:d0:
96:bc:fc:33:d1:da:07:d0:ea:71:03:fe:38:e9:74:9b:9a:c8:
7a:4c:14:fe:e1:f2:df:bc:ad:b2:fd:a0:04:b5:63:b9:a0:b7:
cf:6f:9c:c7:d9:67:91:83:fe:b1:0d:5c:73:be:42:b7:72:cd:
d8:d5:e5:df:ff:57:e6:12:c6:17:e4:3e:bb:2a:3a:11:a7:b6:
83:5e:89:e7:b8:50:ae:95:d8:f2:b5:5a:39:fe:b7:a6:30:03:
90:4f:0e:67:ce:6e:26:14:c4:3b:35:08:03:f8:a9:ff:9d:cd:
fb:8e:0b:c0:81:d7:60:de:22:e5:c6:15:49:0b:2a:38:59:db:
d5:82:7a:40:da:c0:ef:70:c6:cb:73:7e:5d:b8:d4:9c:9f:3b:
f4:f1:97:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org