Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/oupTIHeMeWCZWOAJ9qqQf96X5dA.roa
File: oupTIHeMeWCZWOAJ9qqQf96X5dA.roa (raw, json)
Hash identifier: Fu2cWGJJ/v4aNUhw4mXDPIlVlWGKJR85f2Ovg5Nq2x0=
Subject key identifier: A2:EA:53:20:77:8C:79:60:99:58:E0:09:F6:AA:90:7F:DE:97:E5:D0
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 06C0EB65
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/oupTIHeMeWCZWOAJ9qqQf96X5dA.roa
Signing time: Sat 01 Jan 2022 14:06:24 +0000
ROA not before: Sat 01 Jan 2022 14:06:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29129
IP address blocks: 80.247.80.0/21 maxlen: 21
80.247.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113306469 (0x6c0eb65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jan 1 14:06:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2ea5320778c79609958e009f6aa907fde97e5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:ce:36:6a:4a:7e:65:f4:d9:dc:4b:5a:2d:
cb:22:1f:a8:5c:50:42:cd:af:ff:c8:51:8c:3f:84:
a3:6a:de:7a:7b:69:d7:bd:58:8f:3b:ab:40:8a:f9:
5d:1a:f2:89:bd:c1:24:25:44:a6:5d:2c:8b:90:f7:
cc:5e:7d:bd:8b:58:25:be:69:ea:36:6a:e7:de:f9:
9c:89:cd:55:9f:94:dc:39:46:32:b9:7a:b6:7f:e3:
f2:34:52:a9:9a:d7:5b:a6:40:00:73:97:18:01:77:
18:98:ba:44:5d:c7:92:4e:2b:90:5e:fc:78:4b:bf:
29:de:98:7f:46:9d:17:cf:3a:e6:70:cd:ff:06:b8:
ef:bd:26:d8:d7:0b:e0:f2:8a:67:22:77:02:ec:9b:
cb:fa:19:82:07:16:f4:57:eb:f6:79:a3:76:92:f1:
d3:ef:23:a2:25:bc:45:f6:94:5b:48:f5:87:b6:a8:
4c:89:df:b3:5e:84:3a:60:7f:98:ec:e3:0e:ec:28:
0f:68:be:aa:e6:f3:11:e6:cd:56:45:a0:ff:50:47:
d0:42:6e:5e:fd:f8:0b:52:81:60:3f:7b:e1:43:83:
ef:55:32:9d:ef:71:80:cb:1a:38:54:74:b6:32:f1:
f5:8e:39:be:cb:1c:de:be:3e:c9:6d:5d:a5:70:df:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EA:53:20:77:8C:79:60:99:58:E0:09:F6:AA:90:7F:DE:97:E5:D0
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/oupTIHeMeWCZWOAJ9qqQf96X5dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.80.0-80.247.91.255
Signature Algorithm: sha256WithRSAEncryption
63:46:93:0b:4b:e7:8d:72:c3:5b:e4:6b:5c:4e:e3:d3:13:7d:
0e:97:63:0b:08:d3:ae:92:dc:e3:be:2c:7d:3a:76:18:9b:3e:
ab:05:ed:6b:e0:c6:ef:7b:ac:ba:ae:f5:51:a5:0f:07:9f:78:
da:4a:b2:1b:c9:41:3e:de:32:2f:a1:79:a0:e0:c5:40:69:eb:
b0:37:44:67:f2:d7:96:10:26:fe:dc:05:ee:5a:1d:95:16:79:
49:c4:e6:79:e2:ab:ed:b0:cf:c6:32:2a:dc:87:03:27:82:06:
ef:19:9d:3b:ac:b3:4b:e8:20:97:f2:82:ac:d9:91:e6:a5:97:
49:be:3e:8c:2a:ec:be:a9:2d:10:c2:7d:96:b7:48:f0:17:ec:
cf:a0:9e:35:26:8c:9f:d6:19:f1:27:7e:47:a4:1c:e4:b4:85:
d9:ba:4a:e0:d6:2c:d8:82:1b:03:e9:c0:89:dd:8c:3c:3b:4a:
1a:de:e6:0f:62:21:8a:c0:75:e6:b0:ea:84:e2:3c:d9:67:ce:
99:67:6e:00:5d:20:13:8a:b4:ef:1f:96:7b:f4:ae:a7:f3:77:
12:f1:e9:f7:07:a8:5f:e8:c6:f3:19:d4:fb:f4:e7:f0:48:86:
c3:37:0d:5b:14:65:fc:a8:dc:e5:24:e2:8a:ca:8f:99:ca:10:
9a:08:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:00 2023 by rpki-client on console-fra.rpki-client.org