Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/wJU7cgcyoVYFi0LbzdDdZ3jRkCg.roa
File: wJU7cgcyoVYFi0LbzdDdZ3jRkCg.roa (raw, json)
Hash identifier: wqOk4exe1E/WJTUZA53lSn9cvitUQyJnv80MnxRARxQ=
Subject key identifier: C0:95:3B:72:07:32:A1:56:05:8B:42:DB:CD:D0:DD:67:78:D1:90:28
Certificate issuer: /CN=1df38ecae04225ff347811b1d37fdb2a3f6e472b
Certificate serial: EE273C
Authority key identifier: 1D:F3:8E:CA:E0:42:25:FF:34:78:11:B1:D3:7F:DB:2A:3F:6E:47:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfOOyuBCJf80eBGx03_bKj9uRys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/wJU7cgcyoVYFi0LbzdDdZ3jRkCg.roa
Signing time: Sat 01 Jan 2022 09:57:52 +0000
ROA not before: Sat 01 Jan 2022 09:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 80.71.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15607612 (0xee273c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df38ecae04225ff347811b1d37fdb2a3f6e472b
Validity
Not Before: Jan 1 09:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0953b720732a156058b42dbcdd0dd6778d19028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:d7:1d:85:80:ea:c5:1e:d5:7e:df:6d:19:
c1:86:dc:b6:ce:81:27:00:9d:9c:b5:78:85:fe:08:
3a:96:a0:e5:a8:3f:e3:d5:a4:9a:53:69:b4:bf:42:
c9:d2:60:1b:4d:0c:5c:a4:81:39:b6:1d:55:3a:7c:
44:58:99:08:eb:85:eb:54:d3:9f:49:c1:b5:09:10:
53:aa:b2:a4:a2:23:72:96:61:2e:b2:5c:91:55:9a:
b5:b8:8c:73:3e:ba:b1:3a:1e:d6:c8:dc:27:5a:f1:
9b:51:24:6c:8a:d8:b1:ec:41:9f:77:b4:a9:59:ec:
9c:9a:0c:f3:22:1d:ed:19:21:ff:36:f7:02:e8:51:
6e:55:92:66:9c:12:ed:e7:5c:2a:58:08:c8:5b:b1:
f0:20:9d:d7:8e:0f:03:3b:22:06:04:db:e8:9a:10:
bd:74:ee:46:b7:74:89:2f:f4:ae:f7:15:54:9d:39:
ed:92:6b:63:ed:e9:23:23:3d:d5:3f:a1:d7:a6:4f:
3d:da:7d:97:82:c4:c5:dd:f0:1a:fd:80:39:63:79:
d4:65:a2:7d:f7:d0:76:7e:05:be:ea:be:b7:be:29:
41:62:4f:4a:b1:d7:5d:7b:08:71:9b:ed:15:69:f4:
be:3c:f0:04:a7:b9:7f:61:58:bb:08:7a:44:c1:a6:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:95:3B:72:07:32:A1:56:05:8B:42:DB:CD:D0:DD:67:78:D1:90:28
X509v3 Authority Key Identifier:
keyid:1D:F3:8E:CA:E0:42:25:FF:34:78:11:B1:D3:7F:DB:2A:3F:6E:47:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfOOyuBCJf80eBGx03_bKj9uRys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/wJU7cgcyoVYFi0LbzdDdZ3jRkCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/HfOOyuBCJf80eBGx03_bKj9uRys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bf:1e:87:4e:cb:02:a6:b4:ff:d0:b6:c2:aa:f1:6f:9c:9e:
df:1b:82:fc:02:29:64:65:78:61:f8:64:48:80:2f:43:a6:30:
33:a6:9e:3d:f5:51:4b:16:b1:06:e0:89:32:46:05:64:2d:fd:
36:bf:88:39:a8:33:29:50:5a:0e:20:d1:3c:97:c3:20:6e:09:
13:c1:f8:02:14:21:99:07:9a:03:35:9b:e2:21:ab:db:53:4b:
81:9a:cd:27:8b:18:32:42:65:20:c2:c2:53:08:58:84:3c:04:
7e:2c:52:02:98:ac:07:92:76:6a:2f:16:60:56:d2:93:83:e2:
37:ae:9f:16:c0:e1:45:c5:fe:41:90:ec:f6:a4:29:eb:5b:74:
7e:30:2f:66:e3:6a:00:46:4a:ab:bf:8f:68:24:3e:cf:b0:e6:
54:d6:3c:a5:f1:78:87:ac:5b:19:b3:73:97:3b:46:a1:10:aa:
b1:5e:36:d6:b3:70:79:81:45:0b:5e:18:00:41:02:8f:10:66:
55:49:9d:6b:66:0f:1b:15:87:85:ad:60:47:34:0d:da:66:48:
9a:59:b4:cd:f8:5b:ed:71:33:bc:31:8a:a4:7d:68:c6:20:48:
e3:32:48:cb:2c:87:0d:c4:1a:36:ee:f0:26:e1:ee:77:70:f7:
34:65:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:28 2023 by rpki-client on console-ams.rpki-client.org