Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/1_1JSPlMnIxbQyEkoJAEpFfoDPA.roa
File: 1_1JSPlMnIxbQyEkoJAEpFfoDPA.roa (raw, json)
Hash identifier: kjT0Ahlp7APFRpREK1HiLu6oIRDRwnmgpjo7OCrnZfk=
Subject key identifier: D7:FD:49:48:F9:4C:9C:8C:5B:43:21:24:A0:90:04:A4:57:E8:0C:F0
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 0182342BD2D9B13230B3E062286B256844EC
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/1_1JSPlMnIxbQyEkoJAEpFfoDPA.roa
Signing time: Mon 25 Jul 2022 07:04:23 +0000
ROA not before: Mon 25 Jul 2022 07:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 88.202.210.0/24 maxlen: 24
88.202.208.0/24 maxlen: 24
88.202.208.0/23 maxlen: 23
88.212.159.0/24 maxlen: 24
88.212.158.0/24 maxlen: 24
88.212.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:2b:d2:d9:b1:32:30:b3:e0:62:28:6b:25:68:44:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Jul 25 07:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7fd4948f94c9c8c5b432124a09004a457e80cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:75:b3:c5:ca:65:9a:3c:6f:3e:52:a5:fd:
99:68:85:8d:14:32:e4:f7:4d:1f:b1:67:29:32:ec:
82:aa:53:07:ad:e0:4d:43:84:a3:fa:41:00:b2:56:
d7:65:fd:94:db:e8:eb:ee:2a:d6:99:ee:2c:89:b3:
ab:cd:fb:7f:6a:99:d9:02:42:86:a4:e5:49:1e:03:
40:1c:60:ed:10:4e:9c:cc:3f:16:1e:3d:4c:d0:bb:
df:6a:27:84:22:87:2e:b9:32:ac:2d:f2:88:c3:81:
a1:d4:0c:51:76:1d:f2:d2:2a:33:4c:08:8a:42:db:
9c:87:b7:05:2d:85:5a:ef:0d:6a:ff:3a:02:45:1a:
01:12:ec:0a:27:e0:5d:c5:20:d1:2c:5f:ec:87:04:
2c:d3:80:23:78:b2:49:21:e3:46:42:28:a6:38:21:
68:a7:44:d5:2d:56:24:9c:7f:79:fa:48:86:b1:80:
05:da:39:ce:70:13:b3:d0:e4:ff:7d:90:0b:a8:9e:
dc:47:59:25:a1:90:10:a3:b2:7e:d8:0f:5a:56:2f:
ca:7b:57:20:a6:4a:2a:f8:e9:c3:65:4e:e8:cd:61:
d3:df:97:f3:1a:dc:ff:a9:4e:ff:77:44:87:09:aa:
1d:1d:28:b7:96:99:7a:c6:90:a1:2b:2d:f2:47:81:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FD:49:48:F9:4C:9C:8C:5B:43:21:24:A0:90:04:A4:57:E8:0C:F0
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/1_1JSPlMnIxbQyEkoJAEpFfoDPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.202.208.0-88.202.210.255
88.212.156.0/24
88.212.158.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:35:92:c1:c8:6c:de:c5:2d:a8:8d:4e:4d:ff:84:b3:e7:27:
be:b2:54:23:01:01:f3:9b:11:dc:2d:5d:2a:f5:3b:5f:22:8f:
c3:d1:48:ad:2a:85:2a:2f:b0:9c:51:1a:f8:69:d9:98:2b:5f:
34:5a:3f:a1:5c:1e:02:11:a0:59:98:eb:44:85:6e:0d:fc:ac:
1e:57:ea:14:80:04:7c:b5:b3:52:ec:d0:1a:a0:5c:2d:85:97:
c2:7a:cf:00:7d:71:be:06:ac:6a:6c:9c:ca:d6:79:9a:81:8a:
d6:36:b0:af:0b:2b:87:3f:3c:36:11:e1:b6:36:cb:9c:7e:95:
b7:3e:49:13:86:b1:54:6d:66:85:9c:df:12:f5:65:ae:77:51:
db:5d:0d:b7:79:6e:a3:c0:2d:8c:7d:ac:9f:d8:11:1f:bf:66:
fa:a2:0a:e5:6c:cd:5a:6c:bd:70:d1:13:d2:f9:5a:d7:fe:72:
ab:cb:e4:0b:00:e2:bf:5a:28:a9:8b:b3:30:4e:8e:33:8c:29:
49:0c:39:1d:40:b4:42:67:ba:ca:5e:35:a6:80:aa:9a:7c:a7:
fe:4e:c3:12:99:6d:fd:d6:54:61:6a:28:c0:13:da:84:81:54:
30:3c:23:32:55:95:35:df:bb:80:21:85:b3:e8:a3:7d:ce:b9:
62:af:3a:3d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYI0K9LZsTIws+BiKGslaETsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj
MzQxNDYwHhcNMjIwNzI1MDcwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2ZkNDk0OGY5NGM5YzhjNWI0MzIxMjRhMDkwMDRhNDU3ZTgwY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqV1s8XKZZo8bz5Spf2ZaIWNFDLk
900fsWcpMuyCqlMHreBNQ4Sj+kEAslbXZf2U2+jr7irWme4sibOrzft/apnZAkKG
pOVJHgNAHGDtEE6czD8WHj1M0LvfaieEIocuuTKsLfKIw4Gh1AxRdh3y0iozTAiK
Qtuch7cFLYVa7w1q/zoCRRoBEuwKJ+BdxSDRLF/shwQs04AjeLJJIeNGQiimOCFo
p0TVLVYknH95+kiGsYAF2jnOcBOz0OT/fZALqJ7cR1kloZAQo7J+2A9aVi/Ke1cg
pkoq+OnDZU7ozWHT35fzGtz/qU7/d0SHCaodHSi3lpl6xpChKy3yR4HJSwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNf9SUj5TJyMW0MhJKCQBKRX6AzwMB8GA1UdIwQY
MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt
NmNhMzQwZmE3NDkzLzEvMV8xSlNQbE1uSXhiUXlFa29KQUVwRmZvRFBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz
LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBARYytAD
BABYytIDBABY1JwDBAFY1J4wDQYJKoZIhvcNAQELBQADggEBAAs1ksHIbN7FLaiN
Tk3/hLPnJ76yVCMBAfObEdwtXSr1O18ij8PRSK0qhSovsJxRGvhp2ZgrXzRaP6Fc
HgIRoFmY60SFbg38rB5X6hSABHy1s1Ls0BqgXC2Fl8J6zwB9cb4GrGpsnMrWeZqB
itY2sK8LK4c/PDYR4bY2y5x+lbc+SROGsVRtZoWc3xL1Za53UdtdDbd5bqPALYx9
rJ/YER+/ZvqiCuVszVpsvXDRE9L5Wtf+cqvL5AsA4r9aKKmLszBOjjOMKUkMOR1A
tEJnuspeNaaAqpp8p/5OwxKZbf3WVGFqKMAT2oSBVDA8IzJVlTXfu4AhhbPoo33O
uWKvOj0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:41 2024 by rpki-client on console-ams.rpki-client.org