Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7boa-8Jpcbbchm6eZj9bQhJU0x0.roa
File: 7boa-8Jpcbbchm6eZj9bQhJU0x0.roa (raw, json)
Hash identifier: p2ErLCj4w8vjaM/9KBEfApR1kEI7a3gPfeRNyleYdrc=
Subject key identifier: ED:BA:1A:FB:C2:69:71:B6:DC:86:6E:9E:66:3F:5B:42:12:54:D3:1D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01847CBB0D869DD1386A1D2FFB32A05F09E9
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7boa-8Jpcbbchm6eZj9bQhJU0x0.roa
Signing time: Tue 15 Nov 2022 19:19:04 +0000
ROA not before: Tue 15 Nov 2022 19:19:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 188.255.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:bb:0d:86:9d:d1:38:6a:1d:2f:fb:32:a0:5f:09:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 15 19:19:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edba1afbc26971b6dc866e9e663f5b421254d31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c7:05:cc:72:28:ec:cd:83:2f:50:fb:99:ad:
b1:d1:56:9d:22:81:f8:10:90:a0:52:91:5e:66:9b:
7b:b4:e1:66:71:9b:9a:98:f7:fb:30:91:83:56:af:
27:3d:44:16:f1:4b:d1:45:4e:c6:c4:e5:a0:d1:d1:
59:de:df:47:99:f9:1e:e0:cb:84:e5:04:d9:82:d8:
98:eb:56:09:48:e6:ca:92:36:00:5f:40:c8:9e:72:
49:c4:73:67:d3:03:02:0f:b1:ab:1d:7d:58:c5:ea:
40:3a:fe:4e:6a:bb:9d:3b:cf:ad:01:9c:92:a4:6c:
b7:4f:f1:2d:20:90:57:dc:7e:5c:97:7b:11:be:3d:
3b:8c:97:86:d9:74:99:2d:db:e5:2a:29:59:9e:9d:
06:c5:51:8f:13:de:b7:fc:ce:4a:03:f3:f1:c1:28:
e8:05:77:0b:5a:70:16:6b:63:3e:a2:a3:31:ac:bc:
c9:9d:1d:06:fb:b2:e4:e7:bc:d7:dd:1c:6b:47:f5:
e6:ea:df:c4:ef:d4:da:0e:95:8d:13:9e:26:ed:07:
98:a2:b4:22:93:29:c0:90:38:63:a5:84:a7:49:bd:
30:89:e4:86:a1:22:0d:2b:d3:a0:40:bc:65:a4:1f:
4b:e7:d0:0c:4f:3e:95:8d:19:54:81:8b:70:74:43:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BA:1A:FB:C2:69:71:B6:DC:86:6E:9E:66:3F:5B:42:12:54:D3:1D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7boa-8Jpcbbchm6eZj9bQhJU0x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.200.0/24
Signature Algorithm: sha256WithRSAEncryption
06:58:37:cd:e0:12:01:59:8e:6b:d6:4c:b2:00:14:8a:90:37:
77:5a:ea:b8:49:b3:27:b2:98:44:32:75:23:b4:e1:16:2b:27:
80:5b:8b:b6:3f:53:38:b5:96:cc:3a:a5:93:21:34:68:72:58:
37:ab:c0:20:f7:3c:d3:fa:03:47:c6:46:08:f6:63:8c:00:00:
2e:09:ff:dd:49:12:f7:4b:00:cb:91:2e:52:f7:40:4b:eb:7b:
52:22:2d:15:78:c1:db:29:8a:7d:02:9b:06:74:d1:ca:37:96:
b3:12:c4:92:61:66:33:83:4d:4f:9f:42:2f:f6:cb:c1:4d:81:
be:a1:23:df:9c:99:ab:3d:43:96:03:85:a5:ae:a4:f3:07:ad:
1d:60:8f:00:08:bd:c6:01:c3:1d:50:36:44:5c:a8:54:21:ca:
3b:f7:b3:7b:87:3a:bf:b0:d4:66:72:c7:dd:3f:7d:aa:66:c2:
9a:c2:a5:ad:90:e0:81:04:95:f2:27:17:92:95:d1:04:b9:cc:
39:dd:bf:90:a8:02:9e:07:39:87:81:87:62:c1:dd:34:94:fe:
af:92:ac:64:f4:59:e6:de:c1:ea:4b:a5:69:c2:81:c3:dd:cc:
16:aa:ed:6c:15:16:d4:b3:55:99:51:61:94:b2:dc:68:64:b7:
fb:9a:f7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org