Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/KGIDaTW2C4jGUOTdlo-P6HBOj5M.roa
File: KGIDaTW2C4jGUOTdlo-P6HBOj5M.roa (raw, json)
Hash identifier: GnHAZ0eSsb/rE2yCsloWUKF+cpBTdxGs9t1KSRk97Uk=
Subject key identifier: 28:62:03:69:35:B6:0B:88:C6:50:E4:DD:96:8F:8F:E8:70:4E:8F:93
Certificate issuer: /CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Certificate serial: 7316
Authority key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/KGIDaTW2C4jGUOTdlo-P6HBOj5M.roa
Signing time: Tue 25 Jan 2022 14:11:10 +0000
ROA not before: Tue 25 Jan 2022 14:11:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 80.91.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29462 (0x7316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Validity
Not Before: Jan 25 14:11:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2862036935b60b88c650e4dd968f8fe8704e8f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:c9:a2:7b:1a:b2:d0:4d:6e:15:3a:14:7b:
8f:14:b3:ca:27:14:b3:50:49:50:59:9f:c1:61:f6:
e6:d4:c0:87:e1:2f:be:95:c4:1c:b5:3e:77:0c:d1:
88:d3:18:8f:a1:e4:ab:44:39:70:01:28:63:f6:4f:
7d:3f:42:95:ae:d4:a0:c8:a0:5e:0b:00:90:38:bf:
d2:13:8b:5b:b1:9e:76:48:ee:fd:5d:dd:14:af:29:
6a:ab:63:6f:df:51:b7:a6:4b:cd:db:9f:fd:b4:af:
c3:a1:d8:d3:41:f3:7f:41:7e:4f:2e:0f:1c:1d:18:
51:5b:bf:f3:a6:62:ea:ed:3e:ce:a9:e1:3d:d2:bc:
49:6f:d9:c9:a8:40:a0:15:57:05:16:9f:fe:43:2b:
66:c5:3c:b8:cd:22:a8:49:8d:25:5d:55:22:1b:e5:
e1:66:9f:43:5a:63:c3:81:37:58:65:2c:69:aa:49:
0a:c2:50:12:f8:79:d6:ab:2f:83:0a:e6:5a:e0:c3:
4c:a1:12:f4:c1:6f:7a:ba:57:0e:e6:6d:b5:cb:5f:
7c:fa:ea:4c:5f:c4:87:ad:75:f7:28:fb:f9:4b:fd:
5a:34:10:1a:4c:a6:2d:12:cd:34:b8:ad:59:81:47:
d5:d6:db:f9:ca:a7:ae:49:87:dd:35:bc:2f:48:cc:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:62:03:69:35:B6:0B:88:C6:50:E4:DD:96:8F:8F:E8:70:4E:8F:93
X509v3 Authority Key Identifier:
keyid:2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/KGIDaTW2C4jGUOTdlo-P6HBOj5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:36:bf:c8:28:bc:69:ae:84:b0:94:35:09:6c:32:dc:8b:6e:
58:81:31:ee:b7:0b:64:6d:44:83:23:df:57:d3:4f:80:82:cf:
5b:e9:c6:a8:fe:ec:2a:a3:d5:d9:be:9b:fb:79:62:1d:70:dc:
ba:01:56:a0:39:55:2d:e0:2d:de:6b:71:42:2f:78:f7:73:5a:
01:d0:67:df:33:70:a3:a6:24:d4:5d:01:d7:f3:d5:bd:4e:f2:
eb:08:c6:73:d6:e5:e5:50:1c:21:8b:9f:e6:bb:81:79:04:58:
17:b6:d8:88:d4:b3:67:3c:c2:72:89:a2:9d:7a:90:2c:56:23:
81:f5:19:76:18:92:bd:8f:ec:a2:75:41:15:a5:ff:f0:4a:c3:
b5:eb:1e:a8:12:c1:a6:25:a4:f4:26:02:0d:59:b4:ab:cd:23:
29:f9:9a:bd:95:99:5c:72:ff:23:1e:b6:3e:ad:cf:ce:b4:09:
f8:28:ba:4a:17:61:08:34:b2:cd:16:8e:06:3c:61:f9:84:30:
f2:4d:64:22:92:ae:38:9b:5f:b1:e5:41:fa:14:8f:25:a4:d2:
42:51:94:d1:d8:5a:af:f0:fd:55:0b:47:2c:80:40:b5:a4:e5:
af:68:68:17:08:44:9d:65:29:de:75:e0:09:a9:c0:6c:fc:bc:
5c:73:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net