Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/K7yfV32O3hW3dhddBSQeTzJCzro.roa
File: K7yfV32O3hW3dhddBSQeTzJCzro.roa (raw, json)
Hash identifier: co1xRON9F6rB1LM9jmD8Q9YftSDQ8P/ZT5VV/ePloro=
Subject key identifier: 2B:BC:9F:57:7D:8E:DE:15:B7:76:17:5D:05:24:1E:4F:32:42:CE:BA
Certificate issuer: /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial: 01850D6DBB5DCF6AA74E39BE14FD547A2CD7
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/K7yfV32O3hW3dhddBSQeTzJCzro.roa
Signing time: Tue 13 Dec 2022 21:39:33 +0000
ROA not before: Tue 13 Dec 2022 21:39:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 80.73.247.0/24 maxlen: 24
164.152.216.0/24 maxlen: 24
2a11:1680:1::/48 maxlen: 48
2a11:1680:1c::/48 maxlen: 48
2a11:1680:17::/48 maxlen: 48
2a11:1680:1a::/48 maxlen: 48
2a11:1680:15::/48 maxlen: 48
2a11:1680:b::/48 maxlen: 48
2a11:1680:14::/48 maxlen: 48
2a11:1680:f::/48 maxlen: 48
2a11:1680:d::/48 maxlen: 48
2a11:1680:3::/48 maxlen: 48
2a11:1680:16::/48 maxlen: 48
2a11:1680:c::/48 maxlen: 48
2a11:1680:a::/48 maxlen: 48
2a11:1680:5::/48 maxlen: 48
2a11:1680::/48 maxlen: 48
2a11:1680:1b::/48 maxlen: 48
2a11:1680:e::/48 maxlen: 48
2a11:1680:4::/48 maxlen: 48
2a11:1680:1f::/48 maxlen: 48
2a11:1680:2::/48 maxlen: 48
2a11:1680:1d::/48 maxlen: 48
2a11:1680:18::/48 maxlen: 48
2a11:1680:13::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:6d:bb:5d:cf:6a:a7:4e:39:be:14:fd:54:7a:2c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Validity
Not Before: Dec 13 21:39:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bbc9f577d8ede15b776175d05241e4f3242ceba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:d2:6c:7c:64:a9:3d:ca:fc:cd:97:0b:c2:
2d:47:bf:e9:3c:d6:66:71:de:9b:cb:cd:02:e9:29:
db:2a:f6:99:e4:73:71:38:6a:d4:c9:32:29:0c:68:
6f:1a:00:19:3a:3e:50:df:96:78:a6:88:a3:a1:11:
9d:f1:f8:8f:8a:e0:a6:50:53:db:d5:58:2d:7d:d5:
e5:9d:1f:77:69:5e:7c:44:fe:5d:17:17:16:52:a9:
be:0c:cb:74:96:23:d6:cb:88:85:45:c1:c4:e6:6b:
e7:04:ae:d4:7b:35:86:49:5d:46:bd:d8:a8:14:8f:
d6:64:d6:db:61:2c:16:e6:11:7f:6e:75:e1:9f:6d:
05:4d:d5:a4:48:a8:1a:1d:53:fc:21:76:18:7c:7b:
f5:de:32:96:ef:20:9d:45:26:e0:c0:b9:e4:01:21:
8b:a7:67:d8:4c:29:a3:2c:fd:dd:d7:b9:e0:de:b3:
a0:43:71:28:80:97:2b:29:8c:d5:6c:07:c9:8f:9e:
c6:a5:a0:7d:a3:3d:1f:fd:91:d0:a1:06:8b:6a:8e:
7a:6f:32:dd:be:0a:0f:3f:88:a4:98:a2:4e:d1:44:
fb:bf:02:78:4b:ea:5b:6e:25:42:f6:38:53:d8:47:
63:6f:e0:af:8c:b8:33:fd:51:21:42:6c:b6:fd:3a:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BC:9F:57:7D:8E:DE:15:B7:76:17:5D:05:24:1E:4F:32:42:CE:BA
X509v3 Authority Key Identifier:
keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/K7yfV32O3hW3dhddBSQeTzJCzro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.247.0/24
164.152.216.0/24
IPv6:
2a11:1680::-2a11:1680:5:ffff:ffff:ffff:ffff:ffff
2a11:1680:a::-2a11:1680:f:ffff:ffff:ffff:ffff:ffff
2a11:1680:13::-2a11:1680:18:ffff:ffff:ffff:ffff:ffff
2a11:1680:1a::-2a11:1680:1d:ffff:ffff:ffff:ffff:ffff
2a11:1680:1f::/48
Signature Algorithm: sha256WithRSAEncryption
2c:22:94:1d:42:7a:c9:48:f0:12:54:d9:7f:c9:9b:3e:7c:00:
ad:87:d1:f5:fc:fb:90:12:21:76:f7:41:1e:ce:c2:c0:f2:07:
2f:6c:35:10:7e:05:3a:87:74:e3:a4:48:e7:2a:7d:61:89:4b:
42:d6:dc:8a:61:7e:66:c9:a8:5c:98:c6:17:b5:a0:c7:32:82:
3d:f0:3b:3c:93:41:22:fb:d8:a4:15:59:04:b8:8e:67:db:14:
3a:9a:07:95:a2:f5:99:90:c8:0c:7d:48:80:02:ad:0d:8d:71:
91:1e:f5:cc:8f:a1:ed:80:60:d4:3e:59:8b:a0:a5:5c:70:8c:
02:c5:a1:99:79:32:48:1b:99:92:40:27:e1:27:d5:21:bc:b3:
1a:ef:5a:9f:48:f0:27:08:e3:b6:c5:d2:8b:37:55:a0:26:8d:
b5:70:eb:94:81:33:ce:b4:51:19:17:2b:f2:ce:f4:3d:81:21:
96:43:65:0f:5f:41:ee:a8:60:bf:41:f2:b2:6c:5f:77:1b:2e:
ba:a2:42:34:e4:a4:04:2c:cc:2f:b0:79:d9:e5:fd:f9:4c:72:
92:2d:c2:57:92:4b:8c:36:c7:37:4c:c8:be:68:95:ce:31:e4:
27:a9:82:b8:47:af:be:5b:30:78:34:66:5a:9e:d2:6b:1c:f3:
b1:54:78:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:07 2024 by rpki-client on console-fra.rpki-client.org