Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/fQHyooqGUzVAacsvvbm9j_bNrcE.roa
File: fQHyooqGUzVAacsvvbm9j_bNrcE.roa (raw, json)
Hash identifier: +qIGR/KxuKpPJMVqq2rhvCwcRmT7C71mEW3TDIG2n9U=
Subject key identifier: 7D:01:F2:A2:8A:86:53:35:40:69:CB:2F:BD:B9:BD:8F:F6:CD:AD:C1
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 081E296F
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/fQHyooqGUzVAacsvvbm9j_bNrcE.roa
Signing time: Sat 01 Jan 2022 08:59:52 +0000
ROA not before: Sat 01 Jan 2022 08:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55222
IP address blocks: 185.80.124.0/22 maxlen: 24
2a05:7c40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136194415 (0x81e296f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Jan 1 08:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d01f2a28a8653354069cb2fbdb9bd8ff6cdadc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:06:56:98:01:00:fa:82:4d:50:74:46:7a:d5:
a6:be:f0:f3:9e:7d:36:fa:ec:6c:ce:33:4e:7a:0c:
de:00:15:ac:e9:89:9f:e9:4c:d4:7f:9c:d4:a3:ad:
89:67:d3:61:03:1b:fc:af:f6:02:cf:87:8f:a1:0c:
f1:f8:93:9f:db:a9:84:37:91:1d:92:ab:b7:a6:ed:
33:bc:fd:ff:c2:91:c5:46:e5:45:46:49:8d:50:d2:
d4:fd:40:47:ba:34:76:40:bb:88:20:9d:55:60:73:
47:50:86:2d:e4:ec:f6:e2:07:5b:e2:32:9c:03:b2:
df:f2:cf:58:aa:fb:86:d6:04:66:65:89:9e:5c:f2:
db:55:0f:c9:4e:7d:ec:6d:0e:06:80:df:eb:16:22:
82:e8:99:61:7e:dc:97:d1:07:a8:50:de:da:fc:54:
21:68:ad:7d:df:20:ad:60:8e:1c:51:28:dc:94:03:
b9:19:e3:31:61:94:c4:0a:a5:8e:e1:b1:fa:e9:8b:
38:7d:95:7c:9f:d5:36:49:dc:cd:3b:3c:c6:8e:ed:
14:4f:3a:2a:c1:e3:5e:d1:1e:c3:09:75:14:57:bc:
18:23:ff:8e:41:b6:15:85:ff:3a:f1:a9:43:9f:b0:
67:c7:bb:50:2b:73:13:b8:fe:6f:9d:ec:c0:ae:b7:
49:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:01:F2:A2:8A:86:53:35:40:69:CB:2F:BD:B9:BD:8F:F6:CD:AD:C1
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/fQHyooqGUzVAacsvvbm9j_bNrcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.124.0/22
IPv6:
2a05:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
33:cd:e9:ec:22:98:fc:1b:03:43:a4:89:6d:13:12:81:da:71:
e7:89:6b:c6:ee:7e:93:d3:c0:96:91:19:35:ae:bf:17:67:84:
38:84:3d:74:14:24:cf:e1:24:ce:5e:fe:89:78:83:0f:3e:d6:
17:09:2e:00:49:81:f9:6e:af:41:7c:ad:41:3c:51:2b:90:01:
ff:9a:df:0a:e7:31:e5:d6:e4:89:b1:0d:ac:1a:3f:db:69:9e:
87:c5:f3:23:0c:a1:27:7e:15:50:14:fe:60:51:82:90:b9:e7:
7b:89:4b:49:28:fc:bc:6e:ad:df:15:fd:e1:b2:df:b2:6a:e3:
91:c6:de:88:2d:04:3c:04:2d:dc:00:0d:90:27:e6:f6:77:fb:
19:69:1e:3b:55:51:77:ae:28:37:0d:76:7d:51:c0:90:5e:75:
f5:7f:80:b6:81:89:a5:d6:4a:4e:a7:44:d6:48:1f:95:ae:c0:
2d:4f:3d:fe:09:6f:64:7c:d0:20:42:bd:20:72:52:9b:ba:c5:
c6:c6:bc:92:25:e9:29:aa:ec:ee:60:cf:29:a1:24:eb:12:58:
12:d5:be:22:88:c4:95:2d:c4:5d:aa:55:fc:2b:34:e1:ee:36:
9b:15:64:ff:be:b4:a7:b2:c6:89:0d:9c:ef:27:21:92:bc:d5:
74:bf:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:33 2024 by rpki-client on console-fra.rpki-client.org