Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/N6ywibj5wOP2ScCR6tXDoV13JCU.roa
File: N6ywibj5wOP2ScCR6tXDoV13JCU.roa (raw, json)
Hash identifier: bBPteWk0p4mlw+kyHLcELDt2yoqmIPhNtp+trZ75r2o=
Subject key identifier: 37:AC:B0:89:B8:F9:C0:E3:F6:49:C0:91:EA:D5:C3:A1:5D:77:24:25
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0182AAEDEAA28FBAA806D02E348EAB9E307E
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/N6ywibj5wOP2ScCR6tXDoV13JCU.roa
Signing time: Wed 17 Aug 2022 08:31:35 +0000
ROA not before: Wed 17 Aug 2022 08:31:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202813
IP address blocks: 45.88.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:ed:ea:a2:8f:ba:a8:06:d0:2e:34:8e:ab:9e:30:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Aug 17 08:31:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37acb089b8f9c0e3f649c091ead5c3a15d772425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:b3:e3:6f:76:1c:02:d7:a2:cd:0e:ef:97:
d0:1a:ed:f1:f8:f5:bf:0b:7f:b6:14:07:05:ef:ce:
1f:a4:1f:4d:43:71:df:ad:be:68:7e:6a:36:dd:ed:
ff:5a:26:1c:a0:cc:da:ef:5e:d4:56:c9:2f:9c:2f:
64:4d:e2:02:0b:cb:3e:00:f6:aa:0c:60:89:a6:33:
85:a0:20:d3:82:2a:83:2b:3f:e9:9f:84:87:78:db:
03:ee:03:14:12:58:9f:ab:6f:fc:4f:09:51:41:59:
df:7a:2b:aa:06:8e:f4:1f:d2:ea:92:2b:fd:7c:da:
a4:50:24:22:ed:f8:42:4b:90:99:d4:65:db:4a:e1:
cc:28:e3:38:dc:4a:ba:4b:60:2a:a6:d6:b2:b1:ba:
48:e5:31:e9:66:d5:e9:cc:34:f4:0b:fa:29:9d:38:
54:0e:ed:b7:1b:4f:fd:76:42:e0:c0:89:05:47:71:
7a:8b:3c:84:e4:69:23:c1:b6:f6:87:ba:bd:7f:d6:
1e:57:f8:e8:85:cd:bd:21:4d:29:d6:d1:49:e9:df:
b9:72:6c:a5:b8:ca:be:b7:c5:4a:c3:c0:0f:61:3d:
08:ca:58:dc:5e:89:f6:7a:84:12:29:84:c5:4c:a0:
11:35:11:02:fc:9a:35:e8:35:6d:9b:81:87:6f:f3:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AC:B0:89:B8:F9:C0:E3:F6:49:C0:91:EA:D5:C3:A1:5D:77:24:25
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/N6ywibj5wOP2ScCR6tXDoV13JCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:30:6c:14:ff:a8:3d:94:04:a1:b2:8a:31:85:6c:e7:d4:15:
1f:16:4b:16:0d:6d:8e:a2:d1:11:6f:50:4d:8b:65:8a:c4:64:
f9:b4:4e:63:23:19:c2:33:60:65:8d:e6:36:fe:91:e4:a8:84:
f1:e0:0c:ab:16:3b:e6:da:c5:fc:dd:26:8e:45:89:9d:cb:1b:
3b:22:38:cd:cc:c7:3c:07:6b:13:f2:17:62:d9:40:c3:c2:60:
d3:7a:06:21:cd:dc:7c:32:34:8b:04:8a:fc:12:52:f4:b4:89:
80:50:58:ee:ae:e6:bf:bd:26:51:24:5c:b7:9e:a9:5f:88:89:
ee:69:3b:0c:21:a1:47:ed:cf:6e:28:9b:50:dc:d8:33:cb:d1:
71:a7:09:36:c5:d6:80:8c:a5:b8:67:48:8a:aa:51:70:93:54:
21:f3:fa:e8:0f:7e:44:61:30:eb:a5:4f:53:98:77:8d:3d:01:
d2:33:5b:15:27:50:ca:ea:75:49:e1:b0:4b:b6:49:31:ec:de:
6b:34:ff:6e:4b:18:29:c6:3f:6a:9a:bb:c2:1b:6c:eb:b7:dc:
b1:d5:35:86:b2:70:e2:53:8d:36:fd:88:c6:6a:a3:8d:7f:d1:
e4:d5:ce:59:5e:ac:2d:1d:b1:3e:9a:3c:8d:01:8f:6f:4a:31:
7c:16:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org