Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/88f0gmQ4ztpgJ-znnc_RpgX1uYw.roa
File: 88f0gmQ4ztpgJ-znnc_RpgX1uYw.roa (raw, json)
Hash identifier: vB960i65jHp7f1D95Kl4SWn00tHK8JS184h8czyLjOw=
Subject key identifier: F3:C7:F4:82:64:38:CE:DA:60:27:EC:E7:9D:CF:D1:A6:05:F5:B9:8C
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 1AA6F83F
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/88f0gmQ4ztpgJ-znnc_RpgX1uYw.roa
Signing time: Sat 01 Jan 2022 12:02:39 +0000
ROA not before: Sat 01 Jan 2022 12:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20860
IP address blocks: 162.220.244.0/24 maxlen: 24
162.220.245.0/24 maxlen: 24
107.181.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447150143 (0x1aa6f83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 12:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3c7f4826438ceda6027ece79dcfd1a605f5b98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:15:f6:c6:91:74:3f:13:a4:a2:fe:83:38:
b7:bd:1d:55:f5:8b:cc:87:e7:b4:11:69:22:db:6e:
cd:0f:c9:83:82:be:83:84:99:b8:c3:12:db:a0:25:
8a:80:00:02:4d:c7:8e:5e:8d:1e:e7:7a:09:0a:cf:
b8:73:4c:26:83:b9:cf:f3:ea:e3:90:fb:2b:81:98:
34:b7:0b:e0:e7:20:b2:31:89:ba:10:34:0f:29:72:
f2:c3:fe:76:79:00:46:52:31:08:21:48:05:59:f5:
c4:cb:78:d4:04:f1:6c:f0:5b:2a:5d:80:5b:31:60:
43:ae:63:c1:9e:38:bd:95:d6:08:72:ce:e9:79:8a:
69:8b:c0:27:4a:1b:ae:d6:a0:a2:31:c6:07:48:00:
00:07:41:00:c2:1d:88:a9:36:57:52:ed:45:81:11:
be:d7:9f:34:d2:36:a4:eb:82:a0:80:86:15:1c:07:
69:37:4b:bb:7e:62:af:55:c8:ee:b9:43:38:28:61:
58:bf:61:52:6a:91:bc:83:4a:0e:79:83:3c:e7:65:
e6:35:13:48:0a:89:28:0d:44:a5:b9:b1:cc:09:18:
d4:12:be:fe:a7:98:7f:ec:50:ed:25:ec:48:51:1a:
2e:e9:ef:22:9d:f8:67:bf:9c:02:f3:b4:de:2d:ed:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C7:F4:82:64:38:CE:DA:60:27:EC:E7:9D:CF:D1:A6:05:F5:B9:8C
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/88f0gmQ4ztpgJ-znnc_RpgX1uYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.136.0/24
162.220.244.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:de:ba:22:43:80:0f:63:e0:a9:fd:5a:2e:33:d4:f0:b1:0f:
38:76:f4:e7:a3:ff:6b:40:34:5a:ea:77:2a:e3:f8:43:fb:31:
12:8a:4d:56:44:50:92:1f:35:a8:56:5f:23:a7:4f:62:5a:ce:
eb:54:90:8b:3f:e7:ed:48:d6:2f:d5:19:d7:c8:c4:ec:5b:2c:
06:4f:bf:c9:fd:2a:5a:eb:99:b4:61:da:96:cd:0b:88:e5:15:
9d:d9:a0:76:0f:29:c7:12:8d:80:f7:fa:b1:dc:ed:f8:2d:c3:
7b:fc:2e:1e:cd:51:c1:47:f2:da:6d:6d:d7:5e:75:98:cf:5b:
5b:2f:b0:97:10:c7:c8:97:41:dc:b8:4d:51:c0:fb:cb:9c:d8:
37:83:32:f6:19:a2:7c:08:b3:db:42:92:92:7e:70:43:c3:68:
47:03:2d:b4:d3:a2:3c:60:99:ce:2e:74:fe:9d:84:d4:37:03:
9d:8e:5f:c3:62:f3:9d:e7:2d:b3:e0:37:1d:b3:bf:51:3d:2b:
26:58:1e:5e:af:77:cc:b0:e5:b2:d4:2c:83:77:bb:67:39:f4:
17:9e:e3:3d:11:d4:25:c0:12:cd:64:3e:5b:ba:cd:83:3a:66:
39:85:dc:5c:2a:bf:e4:72:08:73:78:6f:41:17:fa:b6:30:16:
97:11:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org