Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Kid2LQzY2P8ibreW-wHSuOZuPqs.roa
File: Kid2LQzY2P8ibreW-wHSuOZuPqs.roa (raw, json)
Hash identifier: nrsOuQvS7BMD3ZslRj1h29LOXeDrRmfah2csP2Jp794=
Subject key identifier: 2A:27:76:2D:0C:D8:D8:FF:22:6E:B7:96:FB:01:D2:B8:E6:6E:3E:AB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018498E8B00574F1A4F57AA5E30944F29B64
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Kid2LQzY2P8ibreW-wHSuOZuPqs.roa
Signing time: Mon 21 Nov 2022 06:38:16 +0000
ROA not before: Mon 21 Nov 2022 06:38:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12912
IP address blocks: 88.216.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:98:e8:b0:05:74:f1:a4:f5:7a:a5:e3:09:44:f2:9b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 21 06:38:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a27762d0cd8d8ff226eb796fb01d2b8e66e3eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:53:54:ce:5b:34:6d:31:07:0d:79:bc:a9:
09:dc:ef:2d:df:0a:16:6b:0c:b0:6a:47:cc:58:7f:
51:c6:fd:90:0e:a4:ca:a1:f4:6c:d1:32:5f:c6:46:
85:d4:da:87:ce:0d:39:dc:57:2e:6c:ff:6b:26:41:
05:83:1b:25:dc:51:33:b1:4c:e0:ac:e1:37:12:89:
ac:a2:86:0c:f9:02:69:32:41:f4:26:95:cc:73:9e:
6f:5c:27:41:e0:a7:27:6b:ef:54:51:19:69:07:9f:
40:14:e4:9f:38:03:94:0f:5e:e0:d8:b0:9b:ec:56:
a2:4f:d4:2b:2b:74:88:03:b8:65:cf:4e:9b:fa:04:
0f:e3:2a:2b:d9:83:e7:6d:8c:0a:18:73:c5:b6:a7:
17:ec:5c:be:ea:c5:d9:61:5a:17:38:d1:87:ac:f1:
cb:c0:ee:09:40:8d:55:32:f7:04:e3:35:bd:d8:ae:
02:56:08:b9:d3:f5:43:12:aa:5d:37:9c:64:50:61:
28:42:89:7d:1f:4f:69:6a:0a:4c:06:a2:09:2c:dd:
4d:c6:ad:df:83:3f:b2:48:00:c9:7c:c2:d0:73:ff:
c2:98:2a:90:c3:75:e4:9e:97:5e:65:36:e2:73:a7:
97:d0:35:9d:02:bb:b2:06:f6:dd:4d:6e:6f:6d:5d:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:27:76:2D:0C:D8:D8:FF:22:6E:B7:96:FB:01:D2:B8:E6:6E:3E:AB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Kid2LQzY2P8ibreW-wHSuOZuPqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b0:80:98:f0:53:cf:06:0d:89:cf:b8:3e:c9:80:e1:00:ab:
f1:4c:53:94:84:22:36:8c:b8:d4:f9:76:47:53:c7:d1:e0:cd:
49:34:49:b6:8b:2a:b6:49:48:0a:e2:6d:cc:dc:62:be:ee:77:
78:a6:25:76:8a:37:cd:c9:22:63:19:82:a1:f6:c9:37:9a:52:
a5:be:e0:03:90:ed:bf:ff:5b:c6:84:1d:2e:64:52:16:a7:92:
6c:75:b6:75:2d:5e:d9:97:f4:83:dd:a2:69:bf:53:2c:76:b3:
da:0f:32:90:8a:16:ea:54:41:48:5a:85:0e:ab:01:21:d4:1b:
41:a3:c7:6b:1f:48:30:8b:2c:26:40:29:b5:77:eb:f9:d6:1b:
a7:8b:ce:e8:16:1d:54:74:88:3a:7a:c9:5b:ef:6c:c0:63:34:
ba:ed:d4:6e:93:cb:c0:1c:85:e8:18:16:33:1a:8a:03:0e:4e:
3f:17:14:a8:f8:d5:35:7f:3b:5f:f8:7c:f9:ed:eb:8b:08:a8:
a4:fc:43:47:a0:3e:9b:c8:9d:d3:f8:8a:97:c3:84:1b:48:fa:
fd:5b:8c:df:16:7d:32:e5:56:77:9c:0e:89:1f:9d:6f:fd:fd:
88:2d:f5:b9:ba:21:cb:e0:a3:e2:30:cc:3b:0c:2b:c6:b9:a6:
3e:ff:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org