Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/hrQX2tEd_BK0KE0rpTQlLOUyBfI.roa
File: hrQX2tEd_BK0KE0rpTQlLOUyBfI.roa (raw, json)
Hash identifier: jC77OMcsAbuzJWAcBlzNp5yYXBk7K8a6qlAY0p2m//Q=
Subject key identifier: 86:B4:17:DA:D1:1D:FC:12:B4:28:4D:2B:A5:34:25:2C:E5:32:05:F2
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0184DD0340809C25A3BDD49DE5AA140BD8FA
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/hrQX2tEd_BK0KE0rpTQlLOUyBfI.roa
Signing time: Sun 04 Dec 2022 12:01:28 +0000
ROA not before: Sun 04 Dec 2022 12:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 88.214.2.0/23 maxlen: 23
88.214.0.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:03:40:80:9c:25:a3:bd:d4:9d:e5:aa:14:0b:d8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Dec 4 12:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86b417dad11dfc12b4284d2ba534252ce53205f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:0d:17:43:5f:c7:59:0c:ee:80:f4:b7:6f:
a7:47:9d:0d:48:27:bb:c3:59:68:55:d3:14:72:04:
39:cc:ca:6b:10:79:67:8c:d8:56:f7:50:cc:62:4e:
99:44:32:c7:62:44:60:29:7e:91:4e:d4:3f:29:b6:
18:90:1e:bf:e6:8e:22:d1:9d:f8:b4:be:45:54:be:
cc:6f:61:ae:41:b0:17:55:b0:5e:e9:84:ca:30:a5:
8a:65:c6:79:f1:17:0b:06:b8:c4:e3:f4:37:35:e1:
9e:43:dd:17:cb:f0:53:f4:46:db:50:48:67:09:a2:
57:06:de:e1:58:a1:77:67:30:50:49:3f:8f:eb:d0:
90:65:73:29:6c:1b:20:13:47:51:32:66:72:05:c5:
38:91:59:da:c2:c5:4b:04:a4:93:15:38:7a:f1:2c:
bb:41:65:6c:8f:62:08:58:55:6f:7a:1d:79:bf:50:
47:56:e7:f3:44:4a:c5:63:78:52:a2:75:2a:42:2d:
f5:b3:62:25:40:da:58:6e:66:1f:69:77:82:cd:c1:
9b:79:22:4d:f5:ad:84:b4:05:88:43:f0:ab:5d:42:
44:22:3e:65:ab:78:9e:11:36:1f:e6:e8:7e:05:5a:
92:e4:50:92:4d:72:50:86:7e:6a:20:77:91:9d:ff:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B4:17:DA:D1:1D:FC:12:B4:28:4D:2B:A5:34:25:2C:E5:32:05:F2
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/hrQX2tEd_BK0KE0rpTQlLOUyBfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.0.0/22
Signature Algorithm: sha256WithRSAEncryption
99:5a:b4:86:01:a2:5a:45:f9:82:25:f7:e6:3d:d0:c6:3e:be:
6a:dd:a3:fa:67:90:74:ce:42:60:c8:d6:e3:d6:cc:e7:cd:20:
83:16:f7:aa:e8:19:67:1d:7a:a4:97:e1:d1:c6:5c:15:2c:93:
5e:03:c4:8c:c5:2e:18:1f:30:3a:0e:d3:7f:5f:a6:9a:e3:fa:
39:79:84:46:8f:53:23:10:77:ac:7b:f5:34:0a:32:c1:e9:16:
62:f8:1e:74:60:6c:b9:72:d5:34:a7:e7:3e:1d:a8:c8:a6:a9:
31:08:ab:3f:af:dd:01:3c:b2:24:ee:01:7c:b0:b8:d9:b8:4c:
65:f7:f0:94:a4:b7:5c:1b:08:03:a8:88:e2:01:82:77:05:e4:
b1:8f:ea:c9:ef:4a:f3:d0:f9:98:fd:c4:45:b5:25:fc:b3:36:
9a:8f:26:c2:31:01:5c:24:cc:ce:f4:f3:88:7e:29:f2:92:cc:
47:83:34:ce:f5:c5:90:f0:c5:0a:94:c5:15:79:65:3c:d3:7a:
9f:80:7d:82:f1:96:1a:9c:89:b2:d5:dc:3d:58:64:55:11:8a:
44:11:77:47:d4:37:14:b0:ed:93:f8:aa:fb:54:6f:e8:5c:2d:
3a:2a:c3:31:c7:a0:01:00:96:cc:0d:dd:6c:d4:66:c6:8a:85:
aa:b5:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:49 2023 by rpki-client on console-fra.rpki-client.org