Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/brYlzl2LvwWa47N6TUS_Oq-SOQw.roa
File: brYlzl2LvwWa47N6TUS_Oq-SOQw.roa (raw, json)
Hash identifier: FtHNASWotKf2fMkVI17uiBVhh5MPsMa4+LcxAdBWwMU=
Subject key identifier: 6E:B6:25:CE:5D:8B:BF:05:9A:E3:B3:7A:4D:44:BF:3A:AF:92:39:0C
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0BBF7B17
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/brYlzl2LvwWa47N6TUS_Oq-SOQw.roa
Signing time: Mon 16 May 2022 23:30:11 +0000
ROA not before: Mon 16 May 2022 23:30:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 213.142.158.0/24 maxlen: 24
80.253.254.0/24 maxlen: 24
80.253.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197098263 (0xbbf7b17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: May 16 23:30:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eb625ce5d8bbf059ae3b37a4d44bf3aaf92390c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:b0:a0:47:d8:6a:0b:de:fb:68:92:3f:dd:
db:d4:d3:dd:f0:fb:bc:65:82:74:6c:15:0e:1c:7b:
4d:c4:0b:46:12:f1:d8:5e:a4:67:70:d1:71:59:de:
13:0e:37:94:85:fe:8a:ed:27:95:24:43:b7:8f:29:
36:a1:3e:92:a3:66:67:e1:09:92:de:a3:80:62:21:
74:76:8e:5c:8a:92:6a:04:b1:dc:37:af:17:b5:0c:
b9:79:ed:21:e1:e7:9f:32:1e:c9:a3:b3:e5:9d:70:
45:6c:1b:7a:51:61:22:35:1f:3b:c9:cb:6a:9c:6f:
89:7f:d1:b6:52:2f:f8:e4:c5:52:d1:77:fe:02:5c:
d7:df:61:9a:4e:e1:aa:ab:ce:b2:c2:26:84:d7:1b:
30:63:90:b5:ef:1f:55:33:c7:f1:f8:af:b1:ed:f5:
21:eb:a3:9a:19:f9:61:52:3d:ff:32:11:5d:9a:0e:
b1:79:94:28:e2:0b:f4:90:4a:a4:f5:69:46:02:a4:
46:0c:53:12:7b:1f:a6:fa:7f:f3:b0:a9:51:8d:57:
1f:a7:fc:80:90:ca:81:fa:28:d3:38:14:c1:db:5e:
45:a2:f1:66:44:70:f2:e2:8d:2e:00:d7:30:59:66:
08:9f:bb:35:d3:02:dc:0c:7a:a1:10:e0:dd:76:6f:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:25:CE:5D:8B:BF:05:9A:E3:B3:7A:4D:44:BF:3A:AF:92:39:0C
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/brYlzl2LvwWa47N6TUS_Oq-SOQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.254.0/23
213.142.158.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:bb:11:3f:77:0f:ea:be:86:33:35:bf:b1:06:de:e6:18:53:
73:9f:9a:75:12:16:70:08:28:09:16:5b:f1:1f:f3:75:4f:06:
68:5b:03:da:a5:e4:25:27:fb:85:39:1f:31:42:0e:4d:e7:82:
04:47:a1:3f:6a:40:5e:09:fe:b4:c1:3d:d8:9c:59:bd:6e:6e:
51:d3:e3:81:24:2d:49:86:fe:74:a8:cc:ed:68:b2:97:34:af:
82:fa:18:6e:d7:dc:12:a9:bc:b9:f3:5e:87:6a:34:75:44:da:
fd:d4:8d:9f:ea:c2:bd:65:fc:e3:99:6c:8e:f8:66:28:75:04:
cc:d5:e8:46:58:2c:be:38:3f:9d:85:be:69:58:00:ad:f4:25:
0d:26:34:f5:5b:9f:a1:f9:d4:e4:0b:6b:28:87:f6:87:02:9f:
5b:01:be:b5:2b:a8:31:ed:4c:dd:92:9b:9b:b4:1e:28:21:11:
d4:0d:36:46:62:ca:cf:85:38:8a:01:a0:1c:f1:dc:f0:1d:a5:
61:e5:f8:67:15:8c:26:b8:e5:47:17:41:a5:da:7d:c2:33:64:
75:5c:a2:e8:15:75:a4:23:2d:30:4e:7b:0c:d9:6f:ab:93:68:
70:f4:2f:6b:33:26:08:52:1d:2d:8d:26:e2:4b:ff:05:fd:40:
54:32:34:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-fra.rpki-client.org