Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/pBnwcedMD4Qpm3tsM8ID8hvfUOI.roa
File: pBnwcedMD4Qpm3tsM8ID8hvfUOI.roa (raw, json)
Hash identifier: ND2DdpUQ/aYJJYCdNCNbeOVCVmsl4pI9rdo4A7+Lu+o=
Subject key identifier: A4:19:F0:71:E7:4C:0F:84:29:9B:7B:6C:33:C2:03:F2:1B:DF:50:E2
Certificate issuer: /CN=dca0441e5917f9c909f36d55ac2423e124814e2f
Certificate serial: 018283295B2324E38D108B2205274E75DAE1
Authority key identifier: DC:A0:44:1E:59:17:F9:C9:09:F3:6D:55:AC:24:23:E1:24:81:4E:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KBEHlkX-ckJ821VrCQj4SSBTi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/pBnwcedMD4Qpm3tsM8ID8hvfUOI.roa
Signing time: Tue 09 Aug 2022 15:11:41 +0000
ROA not before: Tue 09 Aug 2022 15:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210993
IP address blocks: 88.151.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:83:29:5b:23:24:e3:8d:10:8b:22:05:27:4e:75:da:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0441e5917f9c909f36d55ac2423e124814e2f
Validity
Not Before: Aug 9 15:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a419f071e74c0f84299b7b6c33c203f21bdf50e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:de:4d:0a:c5:67:49:14:88:79:04:02:cb:
f2:97:6e:b7:19:18:83:04:dc:24:98:e2:f3:6b:7a:
9f:37:fe:3a:be:dc:85:a1:c6:12:39:9a:2d:c1:7c:
22:f2:21:21:12:e1:95:2b:d5:a2:d9:48:5b:75:ce:
15:9f:17:b1:1c:95:0c:a5:42:b2:2d:6f:58:6d:8c:
ca:09:a1:56:00:09:3b:e6:6b:3f:07:ff:0a:ad:7e:
bf:76:99:09:7f:5a:3a:2d:9e:dd:d6:5a:ee:1d:25:
b1:06:61:27:31:bd:cd:39:50:74:7e:c0:87:60:7e:
1f:0b:df:8d:92:cd:4d:49:6b:38:45:4c:c6:26:9c:
71:fc:8d:a7:98:44:7d:1d:ba:85:6f:f4:39:5b:d4:
4d:f8:dd:38:40:c5:38:2f:bf:c5:64:92:4c:0c:f6:
a4:5b:d3:81:b8:c5:58:a9:69:d7:50:cc:92:07:9e:
1b:97:b0:2b:67:4f:07:58:cd:fd:95:b4:fa:99:5c:
2c:33:b0:d3:bb:9d:7e:5a:d7:9f:cc:dc:a1:5f:32:
b9:96:89:da:97:e8:fd:84:76:63:c1:4d:09:3f:da:
91:c5:25:77:45:c2:18:5e:2a:28:f4:13:8f:7b:b1:
0f:a3:4e:ff:32:90:80:9b:c9:a0:f5:cb:1e:4d:d7:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:19:F0:71:E7:4C:0F:84:29:9B:7B:6C:33:C2:03:F2:1B:DF:50:E2
X509v3 Authority Key Identifier:
keyid:DC:A0:44:1E:59:17:F9:C9:09:F3:6D:55:AC:24:23:E1:24:81:4E:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KBEHlkX-ckJ821VrCQj4SSBTi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/pBnwcedMD4Qpm3tsM8ID8hvfUOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/3KBEHlkX-ckJ821VrCQj4SSBTi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.114.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fe:5f:7a:eb:6e:81:d0:93:59:fb:14:26:53:f6:8f:9e:1c:
b5:f8:13:8b:a9:8c:57:ba:da:c7:93:02:0c:76:6e:31:f1:4f:
40:59:b8:47:29:7a:1f:f4:e9:ce:01:b5:a5:83:00:86:bc:ab:
b2:07:3d:17:87:3e:dd:28:52:00:4c:f0:01:51:a1:fe:70:7d:
ee:5e:a1:29:f9:54:24:a5:19:56:d2:2a:80:8d:06:cd:2d:1a:
fb:4b:84:eb:6a:da:87:9e:d7:14:35:a6:f6:d6:24:ba:c7:98:
20:e1:07:97:e7:e4:0b:84:e1:db:11:4d:cb:69:78:9b:8a:7e:
5a:ab:ed:2e:4b:5c:27:92:04:12:24:c2:16:d0:ff:b3:f7:d3:
4b:84:32:40:c4:c3:a7:c1:2c:bc:35:56:c0:cb:d9:fc:41:8d:
c2:65:15:51:42:1d:30:f5:b0:02:46:26:96:47:c1:9c:a3:c5:
25:8e:12:24:6b:00:5e:c5:26:76:b4:1e:a4:11:d7:c5:63:4c:
ad:93:df:4e:61:e7:56:4a:bb:c7:6a:91:18:5c:04:18:9d:42:
7f:bf:88:08:29:70:33:e7:6d:5f:f2:16:c6:b4:8a:08:9f:4a:
11:d9:d6:9c:09:ab:ef:5d:97:ae:f5:4d:9e:7a:a4:9c:c7:94:
b4:75:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-ams.rpki-client.org