Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/o2e59Z8SPX0JRCeeYZ2LM2FBIds.roa
File: o2e59Z8SPX0JRCeeYZ2LM2FBIds.roa (raw, json)
Hash identifier: CnsdgfVIYZOvocNpwwQs/9nISOauYQ64XhX93bjfZWA=
Subject key identifier: A3:67:B9:F5:9F:12:3D:7D:09:44:27:9E:61:9D:8B:33:61:41:21:DB
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 018536EEFFA5A22B8D0044F2AA4AB9A49E88
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/o2e59Z8SPX0JRCeeYZ2LM2FBIds.roa
Signing time: Wed 21 Dec 2022 23:05:10 +0000
ROA not before: Wed 21 Dec 2022 23:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60117
IP address blocks: 188.209.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:ee:ff:a5:a2:2b:8d:00:44:f2:aa:4a:b9:a4:9e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Dec 21 23:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a367b9f59f123d7d0944279e619d8b33614121db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8d:31:a4:a4:97:f0:8f:48:10:a9:06:0a:f3:
74:72:38:61:38:82:c7:2b:cb:c5:e9:e9:e7:8d:01:
a8:ec:f0:c4:75:43:41:3a:5e:89:57:93:60:88:74:
66:cb:62:ec:a3:4f:dc:db:55:7c:16:f2:d2:73:de:
0d:9e:20:0e:a7:17:e4:b1:c7:a6:59:9b:5a:3d:fe:
40:5e:08:34:ef:59:1a:4c:2e:36:67:48:37:92:82:
3f:f5:a9:b2:e9:e3:ad:93:de:8b:76:f2:d7:0d:e3:
be:31:8b:a3:7e:03:4a:50:02:be:59:89:63:4c:48:
59:d5:e0:47:70:4e:f2:38:7b:48:4f:5e:7b:e8:c5:
54:2b:c2:fb:c2:7e:3b:8f:80:31:9d:10:b3:5a:fb:
c1:4a:02:1b:11:f7:c8:54:8f:f8:7f:45:61:e2:6c:
93:e6:e0:db:f6:5f:08:ce:17:fc:e7:50:da:13:ed:
ed:08:69:7a:be:16:70:c2:67:ad:93:bc:9b:76:9f:
c8:aa:b9:de:94:7a:eb:b5:25:68:6e:95:9c:2d:ab:
36:16:c7:42:c3:f9:30:36:cc:24:d4:fe:0b:d5:55:
a0:6a:1a:62:5e:bb:86:49:ab:b2:e2:12:95:be:b7:
6a:29:67:e3:6b:b1:96:68:55:43:30:6d:94:21:82:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:67:B9:F5:9F:12:3D:7D:09:44:27:9E:61:9D:8B:33:61:41:21:DB
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/o2e59Z8SPX0JRCeeYZ2LM2FBIds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.55.0/24
Signature Algorithm: sha256WithRSAEncryption
48:14:63:43:8b:a2:9d:65:05:39:ec:b2:17:8a:88:39:f8:90:
54:81:22:c4:07:7d:5f:7e:d2:d3:28:6d:57:47:c8:bb:92:02:
ec:26:e9:46:b3:06:07:21:2d:60:b8:20:b0:43:63:12:46:70:
af:0d:98:ac:e5:7c:d3:ba:b7:aa:72:fe:1d:51:5f:40:22:af:
1e:d0:b0:75:79:5b:a7:c2:ad:79:be:e3:a2:86:82:8c:5d:92:
00:78:47:bd:10:b9:33:6f:6e:86:81:ae:83:03:0c:a9:de:eb:
c3:bf:31:2b:8d:f3:a8:af:de:e9:8e:a5:34:e8:b0:94:04:2d:
4b:dc:bd:a1:fa:f0:29:5b:40:de:48:74:e7:7f:c3:79:88:33:
4b:0a:c4:12:69:9a:c3:f0:c6:4f:7a:83:e0:61:f2:c6:72:8f:
2c:97:db:1a:81:d5:ef:60:d8:62:f0:cd:16:16:89:c3:a9:e4:
45:01:01:e3:2e:a7:3f:f4:46:f2:61:1d:f9:68:42:bf:a5:bb:
e9:1d:6d:42:01:31:2d:a1:c6:a0:ab:a0:a5:48:60:f1:2d:90:
a9:fd:69:1e:09:b4:10:4e:17:ff:c9:82:af:9b:29:a3:ea:9b:
d7:9d:65:47:ab:30:17:f2:2e:11:10:38:5d:f6:79:20:8c:7e:
56:67:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:58 2024 by rpki-client on console-fra.rpki-client.org