Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/PJYei6au66AyGrRWwoJD_dIrXKE.roa
File: PJYei6au66AyGrRWwoJD_dIrXKE.roa (raw, json)
Hash identifier: ZM4YtnJ65GHjU8KF4WF5YtBJPxThlqwy/82/u+B97Y8=
Subject key identifier: 3C:96:1E:8B:A6:AE:EB:A0:32:1A:B4:56:C2:82:43:FD:D2:2B:5C:A1
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 018225F92EE7268D2E8911F0234B044397B9
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/PJYei6au66AyGrRWwoJD_dIrXKE.roa
Signing time: Fri 22 Jul 2022 12:54:23 +0000
ROA not before: Fri 22 Jul 2022 12:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 88.202.210.0/24 maxlen: 24
88.202.208.0/24 maxlen: 24
88.202.209.0/24 maxlen: 24
88.212.158.0/24 maxlen: 24
88.212.159.0/24 maxlen: 24
88.212.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:f9:2e:e7:26:8d:2e:89:11:f0:23:4b:04:43:97:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Jul 22 12:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c961e8ba6aeeba0321ab456c28243fdd22b5ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:de:d6:db:ee:0e:2a:dd:50:1a:fe:f6:6d:53:
13:89:14:fd:af:75:2d:19:a4:9c:da:8a:4c:34:7d:
2f:e2:70:04:29:b5:60:b6:b6:f7:f6:52:36:a6:95:
5e:3c:fd:b1:79:93:e7:9a:06:77:51:42:ff:d5:aa:
86:76:f1:9c:42:1c:73:32:67:f6:5c:13:58:6f:24:
31:d6:e0:59:f8:2f:84:29:7a:53:6f:01:f3:32:37:
f7:ee:22:f0:af:3c:06:18:f1:dd:6f:38:ca:fb:a1:
f1:21:b1:07:44:06:b2:13:b8:21:39:b2:f4:12:83:
e5:94:3b:55:9a:8f:53:b6:35:0f:4a:29:53:5d:c4:
38:99:42:7d:5e:e0:7d:f9:a8:3f:9e:c4:e7:f4:73:
7a:f2:3a:8c:e8:3c:63:c3:ff:b3:e8:06:7f:6b:5c:
5f:19:37:ea:6b:05:8c:49:f8:6d:67:32:ab:c8:1a:
bb:86:8f:99:97:a2:e4:07:ec:95:9c:fd:22:96:8b:
bc:d0:8d:61:a1:45:da:b7:06:f9:e2:8a:08:b0:d1:
f9:19:69:8c:f7:ea:c9:4a:9f:48:15:e6:a4:20:fc:
a6:fe:9f:e4:0e:c4:d0:53:31:1a:c4:3f:11:b3:9b:
2b:8f:47:fa:47:97:cc:d4:d6:c7:54:8d:73:7d:8b:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:96:1E:8B:A6:AE:EB:A0:32:1A:B4:56:C2:82:43:FD:D2:2B:5C:A1
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/PJYei6au66AyGrRWwoJD_dIrXKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.202.208.0-88.202.210.255
88.212.156.0/24
88.212.158.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:84:d0:99:e8:27:8a:38:d9:26:e2:b9:54:8d:25:27:dc:9d:
ef:90:5d:bf:ff:68:87:4b:6b:01:f1:c3:2a:2a:e4:8f:46:c1:
bc:39:79:c9:c6:26:6c:17:23:78:59:9e:c1:e4:4e:35:76:9a:
ab:0d:4e:c3:29:44:67:a8:39:3d:f0:d3:4a:45:82:10:ad:b8:
61:2c:16:20:ed:d6:d3:b5:59:1b:e3:fa:85:a1:22:30:c7:34:
9c:f1:75:26:4a:dc:f4:f3:0b:d1:29:0c:d6:6a:2e:4e:08:6e:
60:84:db:00:29:ab:82:43:69:03:75:a5:bd:df:56:35:1d:d9:
a6:3d:77:36:a8:f2:60:1c:b8:92:0a:a6:b9:8c:dd:f5:78:68:
9d:97:3d:0e:b1:30:f2:0b:92:30:62:57:12:99:49:03:4e:2b:
47:65:77:0c:1a:54:2d:cd:38:b0:54:45:9f:0f:55:d0:63:10:
be:2b:47:21:61:f2:ab:e2:0e:5b:7f:70:2e:ad:7d:f0:e2:3a:
9a:83:84:6a:1b:61:42:88:31:9e:06:4c:75:07:98:ee:61:7c:
24:61:64:79:6c:ce:66:75:cf:1e:8f:32:05:8e:c8:9e:2b:d7:
2f:53:f9:4d:b6:4a:fd:ce:0f:f2:d4:df:95:f7:2a:2f:5b:ac:
9e:58:b5:31
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYIl+S7nJo0uiRHwI0sEQ5e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj
MzQxNDYwHhcNMjIwNzIyMTI1NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzk2MWU4YmE2YWVlYmEwMzIxYWI0NTZjMjgyNDNmZGQyMmI1Y2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd7W2+4OKt1QGv72bVMTiRT9r3Ut
GaSc2opMNH0v4nAEKbVgtrb39lI2ppVePP2xeZPnmgZ3UUL/1aqGdvGcQhxzMmf2
XBNYbyQx1uBZ+C+EKXpTbwHzMjf37iLwrzwGGPHdbzjK+6HxIbEHRAayE7ghObL0
EoPllDtVmo9TtjUPSilTXcQ4mUJ9XuB9+ag/nsTn9HN68jqM6Dxjw/+z6AZ/a1xf
GTfqawWMSfhtZzKryBq7ho+Zl6LkB+yVnP0ilou80I1hoUXatwb54ooIsNH5GWmM
9+rJSp9IFeakIPym/p/kDsTQUzEaxD8Rs5srj0f6R5fM1NbHVI1zfYtoxwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDyWHoumruugMhq0VsKCQ/3SK1yhMB8GA1UdIwQY
MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt
NmNhMzQwZmE3NDkzLzEvUEpZZWk2YXU2NkF5R3JSV3dvSkRfZElyWEtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz
LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBARYytAD
BABYytIDBABY1JwDBAFY1J4wDQYJKoZIhvcNAQELBQADggEBAKqE0JnoJ4o42Sbi
uVSNJSfcne+QXb//aIdLawHxwyoq5I9Gwbw5ecnGJmwXI3hZnsHkTjV2mqsNTsMp
RGeoOT3w00pFghCtuGEsFiDt1tO1WRvj+oWhIjDHNJzxdSZK3PTzC9EpDNZqLk4I
bmCE2wApq4JDaQN1pb3fVjUd2aY9dzao8mAcuJIKprmM3fV4aJ2XPQ6xMPILkjBi
VxKZSQNOK0dldwwaVC3NOLBURZ8PVdBjEL4rRyFh8qviDlt/cC6tffDiOpqDhGob
YUKIMZ4GTHUHmO5hfCRhZHlszmZ1zx6PMgWOyJ4r1y9T+U22Sv3OD/LU35X3Ki9b
rJ5YtTE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:00 2023 by rpki-client on console-fra.rpki-client.org