Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/_11n766GFcZ3fsNFw0f7S7KGCkM.roa
File: _11n766GFcZ3fsNFw0f7S7KGCkM.roa (raw, json)
Hash identifier: +ovC7edUQQXtDWouOmKnDwqeK536mdqphu0UiKiH9CE=
Subject key identifier: FF:5D:67:EF:AE:86:15:C6:77:7E:C3:45:C3:47:FB:4B:B2:86:0A:43
Certificate issuer: /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial: 0181D816E7587AE4B59C1C47F95E0C2F80E3
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/_11n766GFcZ3fsNFw0f7S7KGCkM.roa
Signing time: Thu 07 Jul 2022 09:56:28 +0000
ROA not before: Thu 07 Jul 2022 09:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43905
IP address blocks: 80.79.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:16:e7:58:7a:e4:b5:9c:1c:47:f9:5e:0c:2f:80:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Validity
Not Before: Jul 7 09:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff5d67efae8615c6777ec345c347fb4bb2860a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:82:84:0c:09:f7:ad:9d:d5:7e:91:6c:90:
2c:09:50:71:7b:60:5a:54:b5:24:e3:69:4c:69:50:
49:77:20:cb:94:ba:cf:ca:db:73:0f:83:19:73:6c:
3f:83:36:09:bf:2c:f0:42:0c:39:6b:2d:3d:cd:bb:
5b:59:41:01:c7:3d:bd:79:7e:bc:07:94:1f:92:64:
0e:99:f4:21:24:0a:4d:16:68:57:22:93:19:8f:0b:
48:c9:16:4e:f3:f5:fc:2c:8b:3d:5d:f0:20:f6:b9:
b2:51:81:9d:27:7b:c5:c6:94:0f:98:28:6b:24:40:
0d:05:12:fc:5f:2f:74:5e:8e:c4:5b:08:59:3e:2c:
80:18:74:e0:a2:c2:bc:b7:cc:55:a7:01:ed:7b:13:
a5:2a:1a:e8:3f:b8:af:93:4a:f1:e7:85:9c:2d:bc:
9b:a5:d2:4b:6c:ee:0e:96:c0:d1:d3:56:07:db:27:
f9:67:23:45:3d:af:53:84:69:2b:9b:85:33:4e:cf:
cb:15:8b:26:27:85:56:2f:ae:32:92:01:81:cb:74:
f3:93:83:92:43:fc:1f:82:9c:51:13:44:b9:0c:06:
f2:3d:49:41:ba:92:d8:3e:e4:1b:57:4a:8f:ab:bd:
80:13:3a:f4:41:9e:cc:ff:0c:a7:de:25:12:1e:ed:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5D:67:EF:AE:86:15:C6:77:7E:C3:45:C3:47:FB:4B:B2:86:0A:43
X509v3 Authority Key Identifier:
keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/_11n766GFcZ3fsNFw0f7S7KGCkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.153.0/24
Signature Algorithm: sha256WithRSAEncryption
49:23:f8:3a:47:b8:68:33:e4:cc:c2:51:a0:3f:ee:e1:16:16:
40:d2:15:e7:40:f3:e3:eb:33:0b:3d:9f:54:04:d5:93:bf:c5:
2d:d2:43:cd:d0:23:f9:b7:f8:d7:46:a8:9d:38:19:8b:4f:0b:
d6:dc:0e:c5:3d:d1:e3:16:75:b3:a5:ee:cb:19:36:62:ba:13:
5e:c1:4a:1a:f7:34:fe:7e:54:bd:ec:48:9d:63:34:f6:44:ac:
14:0d:de:d1:91:74:e8:70:07:78:b3:e0:4b:41:df:18:14:ba:
29:8a:d1:94:c3:98:10:bb:e5:59:41:8b:95:83:4e:3e:97:20:
24:ad:a5:b3:1f:56:96:a7:cd:a9:b7:79:2d:9a:3f:c2:3c:c9:
3d:43:3f:0a:47:a9:e5:25:e5:85:3c:f6:0a:83:c2:3e:75:84:
31:f6:d6:05:2a:1e:b8:66:85:d1:89:13:f6:0e:a1:e8:6b:9b:
cf:0f:12:18:cb:f6:3b:ac:35:72:d0:e4:fa:80:c8:8c:20:b4:
61:6a:e4:67:84:5b:61:e6:b2:d1:0c:4a:a3:bb:4b:24:11:e4:
92:be:b0:bc:02:1f:8d:af:11:36:d3:2e:5f:ba:bb:2a:be:22:
25:bb:da:59:42:ab:24:49:6c:6c:fe:eb:68:fa:e9:99:88:54:
06:ed:26:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org