Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/P4RZOwYv6YJlEDQa2XX2jmzKy-k.roa
File: P4RZOwYv6YJlEDQa2XX2jmzKy-k.roa (raw, json)
Hash identifier: fd8AyjEmnVaF6hIEc8CK71+xjM0kQCFtpb/Q8V9JMXI=
Subject key identifier: 3F:84:59:3B:06:2F:E9:82:65:10:34:1A:D9:75:F6:8E:6C:CA:CB:E9
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 06ECF495
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/P4RZOwYv6YJlEDQa2XX2jmzKy-k.roa
Signing time: Sat 01 Jan 2022 01:59:25 +0000
ROA not before: Sat 01 Jan 2022 01:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204444
IP address blocks: 80.94.27.0/24 maxlen: 24
80.94.28.0/23 maxlen: 24
213.155.167.0/24 maxlen: 24
212.14.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116192405 (0x6ecf495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 1 01:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f84593b062fe9826510341ad975f68e6ccacbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:26:56:1c:27:78:78:e6:f4:58:e6:2c:05:
09:7f:4e:d7:cb:5f:be:fa:e5:78:37:75:02:f6:c7:
c6:63:80:f8:3c:7a:9d:b7:af:20:98:ac:4e:d9:0d:
e1:6e:e0:de:bf:5e:66:a9:92:36:58:18:8f:87:7f:
7f:50:9f:f2:30:16:57:f1:e2:7e:bb:48:5f:ad:1c:
e2:c1:29:5c:3f:5c:e8:61:16:ef:7c:ac:24:30:17:
af:89:e2:16:d4:3f:a4:5d:4d:0b:e4:6d:36:d2:7d:
af:01:e7:fb:d9:54:4d:4a:b3:b4:45:47:cb:eb:ee:
23:a1:55:f1:63:a5:3f:cd:fc:de:27:47:c2:d9:b7:
d9:e8:02:d5:06:55:28:42:4e:81:ed:bc:4b:f8:62:
a6:82:c5:82:c4:4a:76:c4:ff:d5:5a:dc:33:38:2e:
88:87:8b:eb:61:63:52:e1:ad:94:d3:40:d2:42:f4:
60:5a:af:3d:95:63:ca:ee:66:e8:9d:07:00:5f:cd:
4c:7b:45:46:a2:6b:0b:ea:69:5d:d8:ae:3d:e0:1e:
43:f0:43:fd:6e:93:40:20:5e:60:43:a6:4f:b9:9c:
2f:09:12:4a:1c:a4:9e:d6:7a:37:76:24:fe:37:72:
41:47:46:3f:df:ca:3e:c0:5d:e4:dc:b9:1f:b1:d5:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:84:59:3B:06:2F:E9:82:65:10:34:1A:D9:75:F6:8E:6C:CA:CB:E9
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/P4RZOwYv6YJlEDQa2XX2jmzKy-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.27.0-80.94.29.255
212.14.60.0/24
213.155.167.0/24
Signature Algorithm: sha256WithRSAEncryption
58:af:f3:71:8b:d6:d5:76:93:73:ca:90:7e:82:04:e2:63:66:
b7:95:19:40:34:0a:e5:74:5f:e8:82:55:96:1e:45:10:bb:04:
2a:65:2b:9c:1a:f1:30:81:ff:ca:df:81:16:4a:ac:43:6a:4e:
02:2e:24:3e:5f:a1:26:20:6f:c2:a9:ad:a0:cd:c8:9a:19:ff:
6c:e5:53:12:d4:6a:be:a9:3e:99:6c:90:d7:28:66:fc:89:0f:
b5:06:5d:b3:0e:04:ff:5e:8d:af:32:93:eb:53:6b:91:c1:99:
a4:1e:f3:5f:99:1a:1a:e4:eb:e0:dd:20:1b:6d:7f:80:09:45:
ba:ca:06:e0:bd:fb:5f:08:2d:ab:3d:59:d6:f9:23:d2:66:bd:
b5:9c:7b:a7:ff:74:90:8a:c3:87:0b:68:e9:40:9d:64:2a:f0:
ac:fa:ff:a6:c7:46:9f:bd:b6:3d:b8:74:d9:76:08:17:68:43:
d9:57:e7:76:5a:ce:6e:ca:8e:58:ac:e9:5e:56:40:6a:77:26:
eb:03:6a:82:b4:13:93:c4:86:30:9b:bf:0d:8a:2a:6f:be:bb:
ee:00:f2:75:8d:7f:09:43:fd:d1:bd:40:fd:51:7b:1f:2b:60:
98:25:34:54:b0:f5:b1:c7:59:86:6c:ac:8e:d3:e1:e6:c6:9a:
8c:32:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:31 2024 by rpki-client on console-ams.rpki-client.org