Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/YWvXBRqiCU4ZhoDJotyKiNFmQtI.roa
File: YWvXBRqiCU4ZhoDJotyKiNFmQtI.roa (raw, json)
Hash identifier: +oWyfmM2GGAPVLnikhsPYp+w+unW0bFMuW1Ou6UD6uE=
Subject key identifier: 61:6B:D7:05:1A:A2:09:4E:19:86:80:C9:A2:DC:8A:88:D1:66:42:D2
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 01853EA3864DC3AE6FD65E1E6105A00F0238
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/YWvXBRqiCU4ZhoDJotyKiNFmQtI.roa
Signing time: Fri 23 Dec 2022 10:59:42 +0000
ROA not before: Fri 23 Dec 2022 10:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21057
IP address blocks: 80.84.137.0/24 maxlen: 24
80.84.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:a3:86:4d:c3:ae:6f:d6:5e:1e:61:05:a0:0f:02:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Dec 23 10:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=616bd7051aa2094e198680c9a2dc8a88d16642d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:c8:56:e1:e3:d3:2f:c5:05:e5:da:a4:8b:
f7:1b:0e:3a:8a:f7:2f:5e:d3:d7:24:51:83:f2:a8:
24:0c:d1:41:1a:be:ce:ec:58:e4:9c:36:9c:3c:88:
14:6d:38:2a:0c:b4:59:b0:67:db:6c:2b:33:40:74:
a5:9b:8c:46:95:61:5e:f5:8b:cc:84:32:88:8c:d5:
ba:b0:36:58:4d:8b:a6:be:d8:eb:f8:87:cd:03:07:
c6:87:82:85:9d:ce:9d:43:f2:8d:af:59:54:a3:0c:
9d:dd:45:3a:26:1e:2c:9c:6d:03:ad:da:fd:d5:c4:
74:63:e5:cb:ea:9e:69:92:b2:8d:31:c6:98:1a:ed:
7d:5a:70:5a:9c:64:80:03:ab:51:bd:d0:cf:8e:d7:
31:47:fa:42:28:7a:7a:f2:7c:ac:1a:7b:76:11:41:
58:83:fe:69:48:5e:5f:24:43:08:c9:9c:0d:74:73:
56:de:04:d9:a9:38:93:3e:22:31:57:4a:4b:ac:6d:
7c:ff:5d:b6:8c:d2:f2:3d:67:b0:55:44:2d:71:11:
62:2d:10:d9:66:97:eb:03:eb:3a:15:60:c4:dc:0b:
5a:dd:04:a4:1f:c2:07:eb:24:bc:50:d7:b6:01:ab:
c6:1d:20:cb:e9:a1:88:86:38:79:d8:81:93:a0:ff:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6B:D7:05:1A:A2:09:4E:19:86:80:C9:A2:DC:8A:88:D1:66:42:D2
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/YWvXBRqiCU4ZhoDJotyKiNFmQtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.137.0/24
80.84.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a4:24:3a:91:60:a9:c2:a1:17:88:21:f7:05:94:ea:ed:11:
ff:e8:ad:fe:f3:be:60:4d:12:20:b4:d5:b2:c4:9b:35:44:48:
3f:71:9b:1f:4c:44:41:21:1e:85:d6:1e:05:b6:ef:e3:ac:f9:
3b:b8:26:5d:b3:6b:28:b1:64:ba:02:cf:3c:20:35:9c:fd:db:
3d:2b:21:c4:c2:22:bf:92:d6:fd:b3:42:18:5f:53:32:6b:45:
e8:03:14:be:84:02:7f:1f:c8:45:94:47:f7:a0:2c:17:bc:cb:
3f:92:c4:8e:5e:7c:a7:61:49:62:51:f0:b0:66:ef:81:94:b9:
bf:27:a7:ad:cd:bc:a1:73:ea:cf:1f:f3:cf:74:c0:3e:dd:59:
c3:3d:fe:8b:5d:95:d5:e5:92:16:95:29:6d:c2:e9:32:f7:5f:
48:a2:fb:a8:24:3a:af:df:4e:ee:97:24:99:99:15:d5:c6:37:
d1:32:98:f3:cd:6d:82:7e:bf:8d:41:44:8c:2a:b5:a8:bb:26:
c6:c2:42:e0:6d:ad:16:5f:19:21:ec:36:dd:b2:23:0a:5b:36:
5b:e5:47:79:07:6c:2a:fd:a4:36:6c:0f:0d:4f:24:d8:23:50:
0b:32:47:94:11:51:39:ac:f3:25:e4:46:69:40:66:5f:43:91:
12:d7:43:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:43 2024 by rpki-client on console-fra.rpki-client.org