Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/24S3ukPXNGETIV-wJZwByEYT4WE.roa
File: 24S3ukPXNGETIV-wJZwByEYT4WE.roa (raw, json)
Hash identifier: Y5EOClspNOn2yC3BwF71M9M4hJnuKe6IVK9LInF6QNg=
Subject key identifier: DB:84:B7:BA:43:D7:34:61:13:21:5F:B0:25:9C:01:C8:46:13:E1:61
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 06EC4C18
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/24S3ukPXNGETIV-wJZwByEYT4WE.roa
Signing time: Sat 01 Jan 2022 01:59:25 +0000
ROA not before: Sat 01 Jan 2022 01:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199296
IP address blocks: 80.94.23.0/24 maxlen: 24
80.94.19.0/24 maxlen: 24
80.94.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116149272 (0x6ec4c18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 1 01:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db84b7ba43d7346113215fb0259c01c84613e161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:0c:cc:6b:d3:14:ad:51:9b:a6:0e:cc:d9:
82:9e:35:c3:c0:cd:8e:78:94:3f:96:dd:be:fe:aa:
fb:c0:d5:f7:32:6b:1c:2e:0c:49:b8:16:6c:d7:9b:
1b:c3:97:ba:c8:f0:49:b7:27:5f:f1:31:df:52:69:
07:57:45:75:83:89:ae:72:7f:da:c1:d5:08:48:96:
ab:83:0f:fe:0a:b8:1e:d0:ef:97:6d:1c:2d:1a:e8:
53:63:b5:81:82:10:2a:df:49:fc:61:54:00:1f:e9:
d6:50:c0:30:0b:0a:85:2a:28:9b:72:bd:15:a0:a5:
d6:41:0a:d2:81:8f:ac:6b:3f:f4:fd:26:59:b1:f6:
b4:32:f8:fd:eb:ac:39:4e:4f:5b:2e:1d:83:74:3a:
ea:5f:df:52:8b:4f:6a:fd:56:6c:0c:ef:08:6a:f9:
1b:da:13:31:13:e0:fe:42:3b:64:70:e3:1c:b7:94:
87:9c:98:dc:8c:cb:10:b0:ea:af:69:6c:c5:70:fe:
83:de:67:d5:7a:40:3a:a7:19:28:85:a6:f6:24:73:
9f:9e:bb:95:7a:fc:61:c5:e7:84:78:ff:57:d0:8c:
63:1a:02:61:2c:c6:07:a6:1e:2e:a9:3a:f8:e6:5e:
cd:43:15:65:7b:17:3b:3e:56:33:2e:1e:0c:6d:95:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:84:B7:BA:43:D7:34:61:13:21:5F:B0:25:9C:01:C8:46:13:E1:61
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/24S3ukPXNGETIV-wJZwByEYT4WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.19.0/24
80.94.23.0-80.94.24.255
Signature Algorithm: sha256WithRSAEncryption
3a:77:e1:c5:a4:40:6f:c9:f2:58:7e:36:b1:cd:9e:bc:ec:0c:
5e:27:99:01:c3:52:92:44:0b:d3:1b:18:7d:87:d2:cb:26:da:
55:ab:64:f6:1d:1e:37:96:7c:b0:2c:32:9c:20:06:26:02:0d:
94:16:4a:89:e0:9f:8d:f7:ea:bf:cf:97:19:6e:6a:f0:37:fc:
fb:5c:7f:cb:b6:a7:6e:72:11:50:2c:69:a6:62:83:2e:0e:b9:
7d:ff:84:a3:a7:25:e1:96:69:35:e2:e3:53:bf:61:c1:47:0f:
00:1e:eb:d8:2c:ec:3a:92:27:6e:25:23:52:b5:0f:9c:51:fe:
44:3f:4f:e8:b3:a6:0f:5c:16:2a:e4:2b:ac:69:b9:20:29:b9:
e4:80:5f:a7:49:76:7d:24:80:14:f8:ab:91:a8:3d:93:bd:e5:
97:21:2c:48:a5:dc:2b:b3:cf:a8:5a:17:42:87:1b:71:60:29:
89:92:19:f1:31:6c:d4:ba:cc:18:3b:eb:cf:dc:80:57:7b:eb:
3e:d2:61:69:31:41:8c:e0:3a:2f:2d:0e:34:5f:63:17:5c:33:
74:12:38:80:d7:ca:14:24:e6:29:83:a1:eb:8e:00:23:8f:2a:
87:e1:3f:96:c0:d5:7c:48:ab:1d:e3:57:6c:52:5a:51:38:72:
d1:bc:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:31 2024 by rpki-client on console-ams.rpki-client.org