Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/v98mPlr1l7uW1D6o9sQSjbCviWQ.roa
File: v98mPlr1l7uW1D6o9sQSjbCviWQ.roa (raw, json)
Hash identifier: OWWs81tVQStMjr9P1GPyAIgIKgkUlh3pYUhXJNMOElY=
Subject key identifier: BF:DF:26:3E:5A:F5:97:BB:96:D4:3E:A8:F6:C4:12:8D:B0:AF:89:64
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 01408F13
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/v98mPlr1l7uW1D6o9sQSjbCviWQ.roa
Signing time: Sat 01 Jan 2022 12:56:05 +0000
ROA not before: Sat 01 Jan 2022 12:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8839
IP address blocks: 88.151.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21008147 (0x1408f13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jan 1 12:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfdf263e5af597bb96d43ea8f6c4128db0af8964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:5a:b6:13:fe:b8:d8:67:be:03:57:9b:ee:
08:13:c6:91:25:ba:11:20:e9:8d:d7:e5:fe:7b:a5:
d3:41:0c:c8:78:b1:6d:a4:76:9d:97:3e:c4:48:fe:
85:28:70:91:d2:73:03:9d:ec:a5:33:5c:e0:ce:eb:
7a:2f:1c:02:51:30:cc:5f:1b:a7:ae:1b:99:e0:76:
b1:21:67:8a:d5:86:4b:fd:64:8d:36:90:79:cf:8e:
e3:c3:1f:cb:81:ef:88:be:e0:a6:eb:15:49:76:bb:
34:4e:1d:1d:ee:7a:e5:08:19:1b:ea:72:6c:9f:10:
45:70:7d:27:2e:b5:06:71:9a:e3:9c:ae:d0:73:60:
f5:93:b7:31:b3:d6:26:0f:f2:5b:60:4c:85:17:ac:
a6:bc:c6:ee:ec:14:21:c1:2c:89:6e:8f:9b:5d:70:
e0:5c:78:9b:8a:1f:ba:4a:34:49:a4:40:99:f7:f7:
36:0c:ea:00:5b:73:a4:ad:6d:7c:f2:30:1a:de:e1:
a6:93:bb:5e:db:3c:70:92:74:7b:fc:c3:cf:e9:3f:
da:4b:1e:87:2b:24:28:64:69:0c:79:9a:10:ed:55:
bf:86:1c:a9:0a:45:6e:8a:2c:be:e7:1e:b0:37:e1:
da:d0:14:8d:81:1a:31:99:5a:c7:d1:0a:72:57:11:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:26:3E:5A:F5:97:BB:96:D4:3E:A8:F6:C4:12:8D:B0:AF:89:64
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/v98mPlr1l7uW1D6o9sQSjbCviWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:db:74:93:13:05:f0:e5:d4:8f:57:18:aa:a2:04:eb:e4:a8:
02:42:cd:ca:6f:77:d9:a7:0a:25:93:70:5f:36:c4:a9:a1:2f:
8a:f9:bf:a2:73:c8:61:89:e8:e2:f5:f8:1b:fa:78:ca:f1:f9:
e2:63:b2:a8:77:bf:b5:25:9a:65:ee:c9:23:b4:f3:7e:7b:2e:
bf:16:62:a0:81:d7:31:33:7c:c6:18:5f:cc:28:b3:90:e5:a8:
18:fe:34:4c:3d:c3:f6:97:2b:16:93:c7:a5:7d:e2:6b:c4:ff:
6d:ca:b7:27:82:2b:07:d2:51:fc:a4:02:f4:af:b1:39:a0:1d:
f1:43:d4:64:2c:91:fa:9f:d1:dd:60:fb:d4:9c:0b:29:07:38:
d5:26:8e:ab:a6:6d:f4:fc:f9:97:24:1a:15:a9:6f:39:94:c4:
cc:36:6e:ba:d8:77:76:42:66:d2:b6:8d:5e:5c:24:48:8b:aa:
35:5b:12:f5:1c:ba:46:84:68:20:4c:24:8c:21:b3:64:76:99:
7b:39:3c:26:c1:bd:a4:03:09:e4:9b:d4:93:04:ab:57:90:87:
d6:8a:6f:76:dc:0c:15:7d:7a:28:e2:b0:60:09:4b:5d:2c:ca:
33:00:2f:42:00:12:15:f7:ad:ea:69:9f:c3:3a:69:93:ed:7d:
31:e4:ee:e3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAUCPEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZjFhYzlmMDk0ZDgzMThmMzA4OGRjYTY4MzAxODY1ZjQ2MDVlOWRhMB4XDTIyMDEw
MTEyNTYwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmZkZjI2M2U1YWY1
OTdiYjk2ZDQzZWE4ZjZjNDEyOGRiMGFmODk2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJjpWrYT/rjYZ74DV5vuCBPGkSW6ESDpjdfl/nul00EMyHix
baR2nZc+xEj+hShwkdJzA53spTNc4M7rei8cAlEwzF8bp64bmeB2sSFnitWGS/1k
jTaQec+O48Mfy4HviL7gpusVSXa7NE4dHe565QgZG+pybJ8QRXB9Jy61BnGa45yu
0HNg9ZO3MbPWJg/yW2BMhResprzG7uwUIcEsiW6Pm11w4Fx4m4ofuko0SaRAmff3
NgzqAFtzpK1tfPIwGt7hppO7Xts8cJJ0e/zDz+k/2ksehyskKGRpDHmaEO1Vv4Yc
qQpFboosvucesDfh2tAUjYEaMZlax9EKclcRjO0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS/3yY+WvWXu5bUPqj2xBKNsK+JZDAfBgNVHSMEGDAWgBQvGsnwlNgxjzCI
3KaDAYZfRgXp2jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0x4cko4SlRZTVk4d2lOeW1nd0dHWDBZRjZkby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvMDQxOTY4LTE1ZWItNDM4OC05ODVhLWMyM2M4MjlkYjkzNy8x
L3Y5OG1QbHIxbDd1VzFENm85c1FTamJDdmlXUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
MDQxOTY4LTE1ZWItNDM4OC05ODVhLWMyM2M4MjlkYjkzNy8xL0x4cko4SlRZTVk4
d2lOeW1nd0dHWDBZRjZkby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFiXDjANBgkqhkiG9w0BAQsFAAOC
AQEAbNt0kxMF8OXUj1cYqqIE6+SoAkLNym932acKJZNwXzbEqaEvivm/onPIYYno
4vX4G/p4yvH54mOyqHe/tSWaZe7JI7TzfnsuvxZioIHXMTN8xhhfzCizkOWoGP40
TD3D9pcrFpPHpX3ia8T/bcq3J4IrB9JR/KQC9K+xOaAd8UPUZCyR+p/R3WD71JwL
KQc41SaOq6Zt9Pz5lyQaFalvOZTEzDZuuth3dkJm0raNXlwkSIuqNVsS9Ry6RoRo
IEwkjCGzZHaZezk8JsG9pAMJ5JvUkwSrV5CH1opvdtwMFX16KOKwYAlLXSzKMwAv
QgASFfet6mmfwzppk+19MeTu4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:26 2024 by rpki-client on console-ams.rpki-client.org