Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/_mYQUoydrALwgq9031ADPKKlUSw.roa
File: _mYQUoydrALwgq9031ADPKKlUSw.roa (raw, json)
Hash identifier: SqMvOn3lcitAr+M1jEPumtA81io1U+MQtnpATwkTiDA=
Subject key identifier: FE:66:10:52:8C:9D:AC:02:F0:82:AF:74:DF:50:03:3C:A2:A5:51:2C
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0306A4D6
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/_mYQUoydrALwgq9031ADPKKlUSw.roa
Signing time: Sat 01 Jan 2022 13:57:06 +0000
ROA not before: Sat 01 Jan 2022 13:57:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25487
IP address blocks: 217.13.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50767062 (0x306a4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 13:57:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe6610528c9dac02f082af74df50033ca2a5512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:47:16:26:1b:57:0c:5c:0b:38:9b:44:13:
ef:15:02:74:fa:7a:2a:57:4d:66:7a:55:22:86:fd:
51:49:6a:98:29:4e:5b:07:ef:1c:1e:be:96:8e:0b:
c3:b8:1f:c3:d0:eb:24:39:ed:71:f2:af:a0:24:b6:
8e:c9:72:6d:7b:8b:d6:3f:26:f3:ea:e9:80:9e:ca:
a8:28:a1:6f:a2:7a:59:0b:fc:fe:bf:12:b1:ac:a4:
c7:db:d0:4a:de:14:56:81:90:f4:12:ed:85:68:8d:
db:74:3d:81:d0:de:ae:39:a0:5b:1f:94:c5:aa:93:
2e:0c:9f:d0:ac:2a:52:6e:32:b4:3e:b2:58:8c:1d:
eb:b3:46:b8:77:45:55:52:ac:78:0d:b6:5d:6d:19:
22:c4:02:1d:86:53:0e:b0:eb:be:ee:df:62:23:d1:
ee:e2:9f:76:7e:3a:85:a4:ec:53:4a:48:26:9b:9a:
eb:b3:1d:b3:7b:bf:85:96:64:7c:41:fa:4a:00:cc:
16:83:48:29:a5:30:50:68:8b:40:64:d7:4e:b1:17:
5b:bd:1a:0c:9c:a1:73:7b:99:ed:77:f5:31:0c:e5:
6e:b6:5f:56:38:9a:90:c6:2a:bc:ab:45:ff:c8:14:
02:39:0b:77:13:66:95:55:8d:cb:ec:42:b7:f5:87:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:66:10:52:8C:9D:AC:02:F0:82:AF:74:DF:50:03:3C:A2:A5:51:2C
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/_mYQUoydrALwgq9031ADPKKlUSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.13.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:01:3a:87:1d:d3:13:e0:ea:e9:95:79:1a:3a:2f:17:60:eb:
35:49:8b:ea:76:20:a5:51:9b:27:23:19:70:d0:12:0e:e6:56:
2e:2d:d5:e1:f8:c8:92:1d:8e:a1:8b:95:d3:d6:e7:86:1b:53:
6b:46:2f:b2:7a:66:e1:15:82:fd:87:82:b9:31:dd:bc:e1:d2:
88:7d:b2:c4:d7:d3:b6:77:23:8b:4f:50:1e:d4:44:f3:6f:2e:
43:e3:75:7c:71:e8:ce:71:84:03:99:82:7b:45:c7:be:d2:f8:
e0:c5:65:9e:04:e3:ae:8a:09:6a:d8:f9:ee:93:a0:39:a2:71:
03:f4:e4:02:b1:b8:27:3a:d3:78:5a:c9:ab:21:95:c4:df:48:
66:d0:fa:d9:89:92:27:32:4e:05:27:8d:5c:84:de:b3:f7:55:
eb:3a:dc:6a:bf:ff:50:09:1c:4d:a9:07:76:dd:9d:9a:27:be:
f2:92:ae:45:81:69:ba:19:86:0e:df:1a:1d:77:14:1b:3b:78:
89:a1:94:7c:91:d7:b2:cd:fe:0a:30:66:59:e9:aa:b0:c5:5b:
f1:62:de:a2:17:2a:f3:f1:b9:e4:e9:e8:57:fc:59:ce:3d:7b:
3b:d3:da:92:b6:f5:05:00:74:f6:24:17:68:7f:2b:da:f3:29:
92:92:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org