Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Z6AFKaEOxdqOXAHdFVWTX43K6IM.roa
File: Z6AFKaEOxdqOXAHdFVWTX43K6IM.roa (raw, json)
Hash identifier: cMalrj+7eW5TtFadseUfmyP4gP0stR89T9dzqpaCTcw=
Subject key identifier: 67:A0:05:29:A1:0E:C5:DA:8E:5C:01:DD:15:55:93:5F:8D:CA:E8:83
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01828000F1A6117C8950FCD7890721904D4E
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Z6AFKaEOxdqOXAHdFVWTX43K6IM.roa
Signing time: Tue 09 Aug 2022 00:28:41 +0000
ROA not before: Tue 09 Aug 2022 00:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 88.218.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:80:00:f1:a6:11:7c:89:50:fc:d7:89:07:21:90:4d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Aug 9 00:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67a00529a10ec5da8e5c01dd1555935f8dcae883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:8f:41:94:90:64:b0:f0:7d:73:b9:f3:cc:
50:61:39:b1:25:de:ad:44:ae:c5:ff:f6:77:cb:f3:
f7:69:bf:e9:6f:a6:a8:38:b2:6b:b8:d0:6d:1f:30:
5e:32:31:5d:77:f7:41:b1:3a:0d:cf:e3:6c:3d:19:
3e:0e:88:04:d7:aa:9e:e7:f3:9f:64:2e:76:3f:57:
ce:8c:ff:db:b2:9f:02:0f:aa:99:9c:83:ed:af:9d:
41:c9:06:93:46:db:c3:1d:df:f9:b0:6b:cc:63:b8:
fc:53:2c:01:6f:06:2b:36:96:90:19:b4:65:54:52:
72:0f:83:bf:8a:21:15:0d:c9:ce:d0:41:01:ce:81:
6f:8a:98:0c:73:3f:d0:52:46:09:c9:7f:5c:e0:65:
f5:87:e7:ea:30:29:9d:4e:ce:31:91:e9:0a:0f:c8:
14:c1:df:4a:60:c5:b7:4e:71:36:92:f5:3a:7f:20:
d8:77:44:db:94:12:44:2b:49:57:c0:9f:6e:b7:b5:
e5:be:58:99:33:b6:be:3a:3f:7d:46:a2:8c:37:6f:
3b:b2:d6:6b:b8:df:b5:98:62:06:50:a4:c6:8e:e4:
ad:1b:a9:16:1c:26:a0:00:33:71:6c:ce:83:5b:5b:
2a:c5:c0:42:4b:65:eb:a9:54:00:3c:1d:5e:bd:32:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A0:05:29:A1:0E:C5:DA:8E:5C:01:DD:15:55:93:5F:8D:CA:E8:83
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Z6AFKaEOxdqOXAHdFVWTX43K6IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:11:4f:c4:f1:95:87:e3:3e:44:8d:df:81:c5:fd:64:86:67:
fb:be:c9:63:49:0c:d8:42:48:af:da:d8:0a:85:05:2a:9b:1d:
4d:22:32:46:a6:e7:71:de:e0:e9:2d:66:1f:92:c0:59:73:1d:
57:5b:fc:c9:3c:04:d1:74:2b:be:b1:dd:2d:d8:2a:a8:93:c9:
d8:d3:45:ef:62:b6:ae:cc:c6:2f:bd:7b:b5:c4:8c:24:26:c6:
2e:80:e8:21:ec:d9:a9:a6:97:85:6f:be:d9:d4:13:06:5e:2a:
94:7a:08:91:82:ce:8b:c3:5b:7b:a4:ef:55:da:2a:11:fb:12:
7a:c1:2d:0e:dc:b5:a6:ed:33:16:5d:ce:95:9b:a6:58:4b:30:
a4:a4:af:e3:50:2a:cd:ea:10:51:9b:a9:be:df:36:85:94:27:
f6:25:d6:21:ea:0a:40:1c:cc:6e:92:48:e2:92:9e:44:24:57:
14:2a:35:a4:97:5f:1f:23:e4:ae:47:d5:b0:4d:eb:81:6a:88:
54:8e:f6:e2:09:fd:b1:5e:67:96:16:69:70:09:06:ca:4e:2b:
07:5a:3b:dd:f9:e8:c6:0e:12:0e:29:f8:71:bf:0e:b9:af:12:
b8:db:99:55:75:d5:a5:b5:b9:7e:4a:46:47:0e:41:9e:bb:57:
b4:d5:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:02:07 2025 by rpki-client