Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/gPqGtHNUIDenb3kM_9MJdYS2qYM.roa
File: gPqGtHNUIDenb3kM_9MJdYS2qYM.roa (raw, json)
Hash identifier: ca19dYIl6HTcpuSEV3ar2obxW6qWWZ3eJSXdllS5A+Q=
Subject key identifier: 80:FA:86:B4:73:54:20:37:A7:6F:79:0C:FF:D3:09:75:84:B6:A9:83
Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial: 0182CA3D10DB712984998FBF4BFA54DAEFAA
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/gPqGtHNUIDenb3kM_9MJdYS2qYM.roa
Signing time: Tue 23 Aug 2022 10:26:15 +0000
ROA not before: Tue 23 Aug 2022 10:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61071
IP address blocks: 88.213.211.0/24 maxlen: 24
88.213.210.0/24 maxlen: 24
88.213.213.0/24 maxlen: 24
88.213.214.0/23 maxlen: 23
178.217.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:3d:10:db:71:29:84:99:8f:bf:4b:fa:54:da:ef:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
Validity
Not Before: Aug 23 10:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80fa86b473542037a76f790cffd3097584b6a983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:75:76:8e:79:9f:6f:9b:ec:11:c4:63:d9:
25:a0:09:59:42:b1:f9:0b:c4:2f:62:49:2d:c9:09:
b1:a4:82:55:1a:34:e7:64:6a:2b:ba:13:25:8f:17:
24:d6:ea:83:08:67:9a:11:a2:65:19:59:67:1a:f9:
83:14:5b:0c:ab:f8:94:6d:5b:67:6e:76:cf:a6:48:
6d:88:51:bf:ed:f2:82:cc:8d:3e:36:10:d8:90:9d:
6b:f9:4d:e5:9f:bb:eb:96:aa:8c:25:1e:e1:21:d7:
69:60:c0:e5:db:8d:38:c3:20:eb:ca:4a:fa:1f:5c:
5d:ab:5e:97:ff:10:09:b3:50:e1:63:2e:e7:8a:40:
fc:f4:58:37:80:3d:60:b8:4a:64:aa:c1:fa:15:57:
16:b5:0d:6f:0b:ee:6a:e6:16:b8:9d:ae:c3:37:41:
1d:0b:6c:52:8b:3e:d2:87:bc:c1:f4:31:b1:f8:8e:
0b:4a:61:7d:a7:f1:8b:4e:bb:dc:e0:2b:f3:88:5b:
f1:b2:9f:21:d2:01:6d:c6:a9:79:57:4c:29:e6:bc:
cb:87:3a:d1:49:c5:3b:29:3f:d4:f8:bb:69:75:c6:
d3:2c:c3:0c:8b:7a:4a:8c:95:1b:53:b9:38:d7:ab:
8c:ee:b0:00:42:ab:8f:41:83:0c:89:f6:ce:ad:7c:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FA:86:B4:73:54:20:37:A7:6F:79:0C:FF:D3:09:75:84:B6:A9:83
X509v3 Authority Key Identifier:
keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/gPqGtHNUIDenb3kM_9MJdYS2qYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.213.210.0/23
88.213.213.0-88.213.215.255
178.217.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:c7:d0:90:bd:f8:30:c9:db:db:35:8d:52:4a:5f:dc:97:14:
ce:05:54:af:fb:f6:a5:cf:93:84:d4:15:1c:35:6a:3d:2e:16:
a1:6e:2c:6b:a0:b6:9a:ce:30:25:7c:03:6e:be:73:75:38:52:
b7:b3:94:49:21:4d:29:df:81:9b:7b:6b:fc:0e:9b:66:01:9f:
ec:a0:ff:7e:87:99:74:ad:16:90:09:de:a0:ab:32:82:26:a9:
72:86:24:6f:1b:9e:bb:91:c8:60:7c:a1:2d:f4:42:6a:62:9e:
24:a6:e2:85:f2:00:f3:f5:59:f6:1e:09:8b:76:7c:fe:03:68:
b4:96:a6:ba:48:96:b6:55:ed:c7:ac:b6:4e:ee:2b:f6:18:0d:
92:b2:9d:8e:5e:1c:ad:07:79:61:d9:59:0e:2d:eb:3c:28:ad:
d2:b5:05:6c:eb:bf:64:71:35:5e:08:1a:19:dc:4d:31:e5:c3:
99:8d:86:7d:dd:aa:a0:d1:09:5e:86:b9:f7:83:3c:76:0c:65:
fe:ab:eb:56:2d:4a:58:49:09:7f:c4:0e:cb:f5:d4:35:be:43:
48:5f:f4:23:96:5b:35:8d:71:03:68:c0:bb:0e:04:de:b3:df:
d5:13:7c:37:cf:63:f0:57:91:75:17:cf:d2:ba:1d:ca:8a:96:
27:51:3f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:51 2024 by rpki-client on console-ams.rpki-client.org