Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/G0XgwOQenSEyzDZMWxJII99Scow.roa
File: G0XgwOQenSEyzDZMWxJII99Scow.roa (raw, json)
Hash identifier: g0al5lpCLytyOLL+LV/uhlT9I4BlDeEYz6ibok1r5WU=
Subject key identifier: 1B:45:E0:C0:E4:1E:9D:21:32:CC:36:4C:5B:12:48:23:DF:52:72:8C
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 0185582425D72B3D1C0CCDFFFBF58CF2DA72
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/G0XgwOQenSEyzDZMWxJII99Scow.roa
Signing time: Wed 28 Dec 2022 09:50:41 +0000
ROA not before: Wed 28 Dec 2022 09:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51007
IP address blocks: 80.84.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:24:25:d7:2b:3d:1c:0c:cd:ff:fb:f5:8c:f2:da:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Dec 28 09:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b45e0c0e41e9d2132cc364c5b124823df52728c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:c9:78:c7:39:b2:70:7d:93:ea:a8:c2:8d:
ae:92:67:f3:30:ed:0b:2f:fd:33:51:4b:15:be:d0:
d5:1a:96:bd:ed:76:40:aa:fa:6e:1a:8b:4a:25:79:
97:c5:81:65:52:bd:07:58:34:6f:d9:9a:bc:19:37:
86:af:cc:65:ed:ab:64:1e:9a:c6:98:f7:7a:ca:8b:
00:0b:2f:94:6f:51:d5:a5:d4:e6:6b:d0:54:ce:b1:
8c:85:52:12:4f:3f:5b:e1:62:7a:6c:b7:4b:e3:49:
2e:1e:89:90:bd:1a:e4:02:c1:d2:12:dc:d3:c4:da:
bf:41:45:b1:f2:4d:f7:7b:72:ae:52:f5:0a:df:60:
5b:92:97:89:57:fb:a1:a7:c1:d1:27:c1:5b:32:e0:
81:f5:8e:84:c9:7f:07:06:9b:ef:a8:e3:a8:58:88:
ee:7a:e0:70:2d:4c:70:56:b0:70:16:e1:ba:f1:d9:
b3:3f:4a:ba:ae:df:1b:ff:5c:e9:a6:25:fc:ae:ea:
97:03:ba:3b:54:f8:4f:6b:92:7a:60:31:e6:38:37:
f3:4f:6d:1a:19:99:bb:a8:ed:c6:a1:54:ac:9b:8c:
de:21:d8:d1:9a:07:5c:3f:0f:90:94:c4:97:6f:71:
20:00:d4:ac:31:a8:9d:fe:18:ba:ef:cf:b3:06:57:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:E0:C0:E4:1E:9D:21:32:CC:36:4C:5B:12:48:23:DF:52:72:8C
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/G0XgwOQenSEyzDZMWxJII99Scow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.148.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a6:b7:3d:b3:4d:7b:f2:18:4a:94:26:e9:2c:ad:1c:0c:07:
b8:f2:49:5c:15:db:c4:87:f2:e0:06:c4:5d:5a:e0:6a:be:9d:
f9:9f:aa:45:f1:bf:79:61:e9:e3:96:ac:1e:e1:75:dd:3e:ae:
cb:df:32:f1:5e:6a:8a:1c:59:5a:03:55:d5:03:e7:7b:5d:7d:
95:83:7a:71:88:62:61:8a:6a:89:76:59:65:b3:27:ca:67:1e:
a9:84:9c:de:52:7c:2d:0b:42:8f:9d:2e:e1:cc:a9:c4:51:e8:
58:e2:08:d3:32:31:41:b7:9e:c7:aa:4e:b4:be:28:38:4e:35:
57:de:2a:02:ab:88:80:93:8b:35:ce:b9:1e:ec:46:40:54:a3:
6c:74:68:3e:43:79:f4:62:20:a8:55:a8:72:2b:65:14:e4:14:
66:3a:56:16:01:62:a6:1d:75:bd:d1:47:68:88:ba:8e:bd:10:
0b:a9:28:e7:eb:51:38:9a:8c:c0:3a:dd:6c:f1:8f:fc:ab:53:
9f:3e:99:28:1a:b2:32:2d:66:86:98:6c:f5:23:f0:6e:d3:09:
af:c6:05:fa:bb:9e:b9:99:29:9f:ed:31:33:c1:c1:27:5b:50:
19:85:67:b5:b9:2d:b0:da:be:f4:11:23:ab:1f:49:9e:cd:bb:
a1:87:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org