Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JOgZK9CyBtbVopDBzNj9Yi8UkDo.roa
File: JOgZK9CyBtbVopDBzNj9Yi8UkDo.roa (raw, json)
Hash identifier: 2/B2EmOJfRlda7aPadib6OFSm6W2wnjCBj0B23Q86+w=
Subject key identifier: 24:E8:19:2B:D0:B2:06:D6:D5:A2:90:C1:CC:D8:FD:62:2F:14:90:3A
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38B60109
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JOgZK9CyBtbVopDBzNj9Yi8UkDo.roa
Signing time: Tue 17 May 2022 05:30:25 +0000
ROA not before: Tue 17 May 2022 05:30:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197897
IP address blocks: 88.203.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951451913 (0x38b60109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:30:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24e8192bd0b206d6d5a290c1ccd8fd622f14903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:f3:ef:7a:19:e2:85:b7:63:e8:ee:4d:cf:
2c:b2:bc:91:9d:ba:cf:6f:ec:4d:a5:10:03:d5:8f:
2d:a2:cc:e1:b2:3d:44:ce:51:2c:8a:81:e1:81:34:
f9:d7:0b:ee:6e:58:21:41:9f:4d:37:80:e2:df:fa:
b6:29:17:07:a3:35:05:c1:89:22:ee:d7:34:0f:e7:
d4:6e:b8:3f:b5:c5:96:bc:91:e3:05:7d:0e:cf:5f:
6e:2f:2f:63:0e:7e:40:05:8f:d2:7f:87:cf:c9:e0:
b7:f2:77:fe:77:9f:26:f3:91:71:72:f5:44:38:6e:
d3:ba:07:e8:b3:d7:8d:9c:07:8d:97:2f:b6:3b:a5:
15:63:22:76:9e:8c:3e:0d:9e:99:b2:39:4a:78:e3:
a8:40:d0:18:2c:49:69:b0:2e:1c:02:3f:3a:8e:3d:
53:a3:f9:3e:08:b9:35:e8:27:41:56:04:f2:11:0e:
1e:44:31:33:57:76:96:0b:da:84:6b:5e:42:af:34:
46:94:5e:88:69:20:08:1a:df:1b:1f:da:3e:df:67:
fe:d6:40:25:33:df:ee:09:cc:ed:40:b0:12:09:aa:
83:5d:b0:1b:15:70:71:25:8b:b0:b7:52:88:b8:a5:
2d:f2:23:1a:bc:65:24:70:67:25:59:2d:cc:69:15:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E8:19:2B:D0:B2:06:D6:D5:A2:90:C1:CC:D8:FD:62:2F:14:90:3A
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JOgZK9CyBtbVopDBzNj9Yi8UkDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.248.0/22
Signature Algorithm: sha256WithRSAEncryption
03:15:6f:f5:f7:e3:95:5a:2e:4d:d0:40:07:a5:9c:f2:71:f0:
47:fd:60:9e:f4:fb:d8:b1:3f:e0:15:34:ef:96:5e:ad:80:58:
10:2d:e9:49:93:c0:d3:d8:64:51:eb:b8:fe:e2:6a:0c:d4:20:
1b:85:90:7a:d9:fa:fa:bf:e5:23:68:c8:7a:f9:35:98:58:78:
8d:85:52:6e:4a:e2:2c:27:01:48:99:28:bb:25:04:58:b8:7a:
8f:c1:24:e8:68:83:95:97:b1:2e:f7:ba:b0:17:78:06:cf:02:
4f:c7:b3:d0:b6:86:d6:ac:91:a2:a1:d0:31:cc:40:b6:9b:c4:
58:10:41:60:65:d3:82:74:b3:11:5a:04:2f:43:42:56:89:9c:
96:d6:60:80:73:88:b0:6c:61:e9:60:ae:12:44:ce:b9:24:4a:
5a:72:67:66:5c:66:ee:bd:f5:34:1f:aa:3c:c7:e8:0c:33:83:
ee:23:f6:8f:08:01:22:3f:ba:64:bc:e7:7f:34:e5:75:ea:86:
50:58:b9:a7:ec:17:b4:f8:0e:a7:cb:27:34:a2:33:2a:04:1e:
13:8d:3f:41:30:6e:aa:e4:bf:82:05:00:97:a6:e0:2f:17:e2:
b7:97:54:d1:ae:6e:85:36:a9:8f:e7:c9:a6:15:51:f4:1d:d0:
cc:25:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:06 2024 by rpki-client on console-fra.rpki-client.org