Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/UaWMGIzIC-sbVK2qio5mWgw2q8E.roa
File: UaWMGIzIC-sbVK2qio5mWgw2q8E.roa (raw, json)
Hash identifier: aEbl88VrjxUkt49HiF2uzn/i3dT6BLQradtmztiYeYE=
Subject key identifier: 51:A5:8C:18:8C:C8:0B:EB:1B:54:AD:AA:8A:8E:66:5A:0C:36:AB:C1
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 35567BC3
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/UaWMGIzIC-sbVK2qio5mWgw2q8E.roa
Signing time: Sat 01 Jan 2022 08:55:12 +0000
ROA not before: Sat 01 Jan 2022 08:55:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39354
IP address blocks: 88.223.0.0/18 maxlen: 18
88.223.137.0/24 maxlen: 24
88.222.192.0/20 maxlen: 20
88.222.208.0/20 maxlen: 20
88.223.64.0/21 maxlen: 21
88.222.0.0/17 maxlen: 17
88.222.224.0/20 maxlen: 20
88.223.72.0/21 maxlen: 21
88.223.80.0/20 maxlen: 20
88.222.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894860227 (0x35567bc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 1 08:55:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51a58c188cc80beb1b54adaa8a8e665a0c36abc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:85:40:2e:a9:9b:cc:99:b0:d5:03:84:9f:
bc:d5:12:6e:36:07:a8:49:9e:79:d7:ff:1f:39:b2:
96:7c:9a:80:1e:72:c1:da:35:0a:02:ff:7d:ff:3b:
94:17:ec:82:20:12:32:93:99:fb:3d:de:62:77:da:
c8:74:74:f1:75:1e:88:7a:e7:81:f5:49:e4:99:8d:
ff:18:bb:0d:45:a2:ec:d5:d7:87:99:43:0b:b4:9e:
a4:ab:31:fc:ab:c4:73:c5:f8:8b:1c:ff:0c:fe:09:
21:9a:e2:14:d5:cb:eb:30:5a:b8:7d:bc:2c:ad:66:
c9:b7:43:5b:48:9f:c4:14:83:e3:f6:7a:22:88:4e:
2d:26:41:3f:58:3c:9a:5b:5a:98:7f:9e:90:1a:e5:
e6:86:55:80:23:47:6b:e7:48:c1:d4:12:35:21:34:
03:65:42:d8:c7:e1:6c:70:1c:0d:f3:35:fc:5a:6c:
ad:c9:bc:5a:90:4d:06:21:d8:fa:95:7a:25:12:fa:
0e:d1:e4:09:d7:05:6b:16:17:7f:25:dc:17:6e:1f:
7f:06:62:ad:e4:f9:0e:12:37:63:94:9d:8c:03:30:
71:a3:04:54:44:e1:48:49:dc:9b:f1:a5:dc:5c:4a:
a8:8b:03:db:2a:a7:31:80:90:4f:d6:56:1b:4a:9a:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:8C:18:8C:C8:0B:EB:1B:54:AD:AA:8A:8E:66:5A:0C:36:AB:C1
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/UaWMGIzIC-sbVK2qio5mWgw2q8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.222.0.0-88.222.239.255
88.223.0.0-88.223.95.255
88.223.137.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e7:91:e3:e0:01:e0:53:2e:e5:b1:74:eb:ca:32:88:11:31:
16:cb:ae:6a:21:f5:1b:e3:fe:ec:fe:14:a7:4b:9f:2f:a2:7a:
bf:5a:b1:11:f0:60:a9:57:53:94:76:a1:33:ec:76:a5:58:5e:
fa:75:4e:c2:df:67:8a:23:89:f5:1e:97:c3:47:4b:09:76:a9:
2a:a3:93:b1:18:c6:c6:ef:fc:73:29:2d:0b:07:ff:64:2e:6a:
12:2d:3d:ba:dd:f0:37:55:e1:18:27:40:a9:22:06:17:4e:3a:
42:20:e8:37:d9:b2:46:2e:96:eb:7d:8b:7a:db:74:f7:4b:54:
d3:a1:2a:a9:ce:fc:36:81:74:f5:49:d0:c2:56:bf:03:6b:8f:
93:f2:06:86:d9:4b:44:bb:f4:fe:a1:09:a9:a4:3a:a5:ac:fa:
a8:51:e3:8f:76:1f:7c:3b:93:41:af:a5:3e:4c:d5:f0:49:83:
da:09:00:7a:e4:fb:a9:18:0a:8f:c9:0b:f3:f6:46:ab:59:70:
67:f0:a1:46:f4:20:20:94:73:44:7b:37:be:b3:b8:41:a0:79:
af:ca:0e:01:6d:07:8e:40:27:7c:df:78:65:97:6f:bc:7d:82:
59:cc:30:f8:81:be:8e:66:49:78:d6:92:76:0f:09:2c:ff:83:
5c:e9:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org