Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ku5n8gE1i_jLo_ecdS-SzFSeZq4.roa
File: ku5n8gE1i_jLo_ecdS-SzFSeZq4.roa (raw, json)
Hash identifier: bhZgwHBoxph8QbOuamo3V+EG9AVMCO2cr0yVV6+Gyrk=
Subject key identifier: 92:EE:67:F2:01:35:8B:F8:CB:A3:F7:9C:75:2F:92:CC:54:9E:66:AE
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 36A7C9A3
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ku5n8gE1i_jLo_ecdS-SzFSeZq4.roa
Signing time: Tue 31 May 2022 12:47:13 +0000
ROA not before: Tue 31 May 2022 12:47:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39354
IP address blocks: 88.223.137.0/24 maxlen: 24
88.222.192.0/20 maxlen: 20
88.222.208.0/20 maxlen: 20
88.223.64.0/21 maxlen: 21
88.222.0.0/17 maxlen: 17
88.222.224.0/20 maxlen: 20
88.223.72.0/21 maxlen: 21
88.223.80.0/20 maxlen: 20
88.222.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916965795 (0x36a7c9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: May 31 12:47:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92ee67f201358bf8cba3f79c752f92cc549e66ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:cf:28:cd:2c:38:13:ac:b8:2e:62:f1:80:
4a:b7:2e:3b:00:26:e4:92:e3:74:ff:06:dc:66:e6:
1a:aa:d5:15:f6:c5:fc:a1:5b:55:78:69:36:d2:de:
fe:c5:86:a4:de:d9:32:e1:67:51:2c:a8:a7:a0:bd:
29:43:98:e3:b2:9a:ec:c5:79:61:72:f3:12:e0:c0:
31:3d:ae:99:95:89:b1:41:e5:c9:c7:79:95:c1:ef:
c0:f5:40:6b:f7:e4:9c:78:ed:04:d0:2d:50:c1:a0:
7c:f5:6d:98:e9:95:4b:84:ca:e0:86:1d:4a:8a:a1:
5f:3d:e9:e9:f2:f1:3a:85:09:1f:e7:3a:b3:bb:5b:
ae:3b:2f:6b:29:eb:57:8e:c9:b3:10:5e:8b:38:cf:
66:d2:04:38:87:6c:31:db:fd:92:8f:e3:7a:34:23:
bf:e9:b3:41:48:4b:94:92:b5:a3:38:42:e1:28:fe:
b0:9f:b7:3c:94:56:58:26:02:67:64:83:a2:e5:0c:
f6:a4:ba:2c:ba:d8:22:95:35:8b:7f:95:64:5c:6d:
30:bc:2a:9d:42:c0:04:63:5c:2d:be:c4:9f:c2:cd:
b8:8f:6e:80:68:8b:11:6e:44:e2:4b:7d:fb:80:26:
33:c5:1d:80:b0:6b:d3:93:75:58:52:25:60:e6:18:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:67:F2:01:35:8B:F8:CB:A3:F7:9C:75:2F:92:CC:54:9E:66:AE
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ku5n8gE1i_jLo_ecdS-SzFSeZq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.222.0.0-88.222.239.255
88.223.64.0/19
88.223.137.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b8:40:9d:94:0e:d3:a7:9f:6b:44:97:42:88:bf:28:cd:fe:
8f:d7:c6:3a:1c:8d:31:bc:20:54:cc:42:00:5e:f3:0e:82:23:
dc:3c:0f:1f:91:2c:6a:cc:c1:61:f8:e5:93:4f:66:ac:55:5c:
07:97:be:f8:b0:b2:cf:e8:34:a4:2d:7f:a5:cb:62:92:fe:a9:
09:dd:db:f9:14:46:24:e0:d7:7a:6e:1d:b9:82:dd:f3:69:ed:
5b:77:5d:62:d2:61:d6:70:e8:6a:e6:05:4e:7c:14:e6:9e:8b:
24:77:28:54:d0:eb:a1:10:82:d8:76:74:a5:ee:77:7f:18:b2:
55:51:9c:3a:ef:76:2a:2c:3b:a3:8b:89:96:8e:b0:b7:e7:e9:
ee:20:8c:22:27:5c:13:14:a9:17:3f:7b:14:70:a6:fb:bc:5e:
56:19:fe:6a:2c:3e:0f:bb:eb:ef:3f:a2:3e:85:07:0a:45:3a:
8c:52:1d:46:62:01:92:da:fe:24:4a:13:9e:72:e8:03:4d:25:
e5:7f:3d:52:e2:55:cd:3a:ba:2a:57:a0:91:95:dc:25:d6:aa:
36:e1:df:87:0a:b3:e0:b7:18:55:d2:e3:e1:d8:f0:bc:9c:a3:
41:df:c7:e1:39:05:9d:93:fb:6f:d7:55:8d:00:a2:b4:d1:35:
f4:37:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org