Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/CwSERlzqG_0omfBbzfemX0YGM2g.roa
File: CwSERlzqG_0omfBbzfemX0YGM2g.roa (raw, json)
Hash identifier: XV8miYinbihz5rmfyrAQy0PwmPXRQWnGfWBLEJDkCN0=
Subject key identifier: 0B:04:84:46:5C:EA:1B:FD:28:99:F0:5B:CD:F7:A6:5F:46:06:33:68
Certificate issuer: /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial: 081CD626
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/CwSERlzqG_0omfBbzfemX0YGM2g.roa
Signing time: Sat 01 Jan 2022 03:01:20 +0000
ROA not before: Sat 01 Jan 2022 03:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21183
IP address blocks: 80.91.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136107558 (0x81cd626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
Validity
Not Before: Jan 1 03:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b0484465cea1bfd2899f05bcdf7a65f46063368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:67:be:7f:f8:40:4f:97:ba:45:28:f2:71:
36:58:9b:0e:14:57:a6:2d:5e:bf:28:55:ca:a6:8b:
f4:da:f8:a3:02:c2:9a:04:09:f6:24:56:c0:78:b7:
df:89:af:62:6a:b8:9a:59:ec:c0:d0:9a:4c:92:03:
f0:c1:f0:7b:97:c3:9c:1c:d0:26:55:72:a2:d5:bf:
ec:d5:af:aa:1e:c8:8e:a0:a9:df:66:9e:62:9e:b4:
4c:70:0e:aa:a5:cd:3f:55:60:04:f8:d8:be:ab:41:
03:d8:ae:71:cc:95:d1:7c:37:d2:fd:f9:46:98:be:
af:d1:2d:9a:60:9f:22:c8:29:ab:b6:7c:d9:37:51:
93:98:0e:9c:c4:aa:79:5b:cd:db:7d:16:99:5b:11:
2e:b8:7b:b8:84:5e:a3:66:f5:bc:1b:0c:13:dd:57:
a4:80:e8:27:55:e9:b2:d0:d9:3a:45:41:20:8b:c6:
5a:8e:af:de:d6:af:e7:33:80:d9:94:4a:7a:b5:e5:
bd:3a:13:50:49:9b:7e:ec:18:67:e1:3b:22:c0:b4:
fc:64:5b:54:86:28:ba:1c:8d:9c:e9:46:c5:25:d6:
43:75:32:e1:32:03:a4:9a:70:53:60:81:ea:48:cb:
be:a1:00:5e:ce:22:79:09:0a:e5:22:09:8b:bf:85:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:84:46:5C:EA:1B:FD:28:99:F0:5B:CD:F7:A6:5F:46:06:33:68
X509v3 Authority Key Identifier:
keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/CwSERlzqG_0omfBbzfemX0YGM2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.124.0/24
Signature Algorithm: sha256WithRSAEncryption
11:78:94:ce:64:ac:b0:25:67:e7:fd:27:23:3d:9e:41:3a:7c:
19:33:ae:43:23:d3:79:1b:76:49:d4:84:90:ea:d1:ac:1b:1f:
ea:ed:51:f4:e7:16:a5:d8:97:b2:43:f4:8f:74:3b:03:0e:15:
59:7a:fb:cc:9e:9e:2d:62:8a:01:b6:63:ec:e7:6b:81:b8:35:
56:14:16:2a:0b:10:e7:df:af:fe:ad:0b:79:05:80:1c:aa:14:
f5:6e:a8:55:c1:76:dd:e4:f1:af:a6:6c:0a:6e:23:ca:8a:bd:
63:87:23:f1:45:f3:9d:0c:e7:0b:e2:af:6b:e4:04:c5:2c:b8:
b6:9f:2d:98:21:37:b8:a5:71:f2:d5:39:1c:4d:a4:b9:20:12:
ea:2d:40:bf:de:05:99:9d:99:3f:b2:89:ff:25:8c:04:5e:44:
af:5d:16:5a:f5:f1:be:dd:8f:14:ae:b1:f0:0f:9a:6e:a0:6a:
d2:b6:41:b4:89:7d:df:fb:25:57:75:6a:c2:24:0f:22:57:4f:
c3:ac:8d:a5:ba:a3:a9:2e:d6:77:fe:fe:30:89:c2:1d:4a:49:
9a:83:9f:dc:2a:f9:7b:d4:1c:d7:77:28:ef:a2:5f:27:65:78:
13:2e:a9:cc:d9:4b:7b:05:22:2f:09:83:cd:dd:f5:80:2c:29:
75:79:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:16 2024 by rpki-client on console-ams.rpki-client.org