Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cgloMA8xt31BQEPLZ2KsOIcxUoc.roa
File: cgloMA8xt31BQEPLZ2KsOIcxUoc.roa (raw, json)
Hash identifier: YVKK++rB81MpLKknmO6q6jSxAlFMxrD6nd2EPC7LJ7U=
Subject key identifier: 72:09:68:30:0F:31:B7:7D:41:40:43:CB:67:62:AC:38:87:31:52:87
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 175A4B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cgloMA8xt31BQEPLZ2KsOIcxUoc.roa
Signing time: Tue 01 Mar 2022 07:18:20 +0000
ROA not before: Tue 01 Mar 2022 07:18:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 88.216.184.0/23 maxlen: 24
88.216.90.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1530443 (0x175a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 1 07:18:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=720968300f31b77d414043cb6762ac3887315287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:58:6d:0e:53:79:66:ae:f4:eb:66:17:83:
b2:88:5c:83:ba:7d:21:01:81:5c:d4:2b:1e:54:74:
ab:77:a2:30:c9:42:76:84:2f:c1:a4:db:d1:1d:4c:
46:cd:8f:3a:12:dd:28:b9:75:4f:90:eb:fb:c3:c3:
e9:88:0c:73:82:ca:27:e1:6c:90:1e:2f:c4:94:21:
c9:f8:76:64:60:73:6e:1c:26:7e:ee:5f:10:7f:0b:
ea:10:96:ef:a3:ae:9f:b7:7e:28:a0:77:73:30:57:
5f:99:64:66:d8:c9:82:3d:59:dc:02:3d:86:bd:e4:
d0:6e:5e:7a:d2:fc:cd:7b:2e:0f:4f:17:6d:4b:c8:
81:49:51:cc:bb:3b:2d:5e:4f:55:06:81:3a:25:60:
d2:98:b5:18:e9:09:24:b9:67:4b:1d:4b:d2:3d:1d:
98:da:8a:fb:39:71:88:58:97:45:55:49:03:78:f0:
61:ff:db:05:4d:c2:42:04:ad:e6:b5:c5:81:f8:1c:
02:6d:97:2d:3b:38:76:87:d8:fe:c5:cd:b4:86:02:
ec:ed:af:f2:b1:eb:c9:3f:bf:ad:0a:c3:66:d8:27:
60:e4:6b:86:07:8a:4c:bf:1e:a3:f4:fc:9c:2e:37:
9a:90:75:d5:84:74:b3:11:1f:8d:04:7b:57:5b:aa:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:09:68:30:0F:31:B7:7D:41:40:43:CB:67:62:AC:38:87:31:52:87
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cgloMA8xt31BQEPLZ2KsOIcxUoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.90.0/23
88.216.184.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:95:bb:66:50:34:4a:1e:0e:f9:45:8d:75:13:0d:22:f9:5f:
ae:87:c1:1e:ec:7e:ed:5a:23:34:94:f1:47:82:2a:8e:03:ce:
08:7e:3e:ee:1b:e5:fd:4a:15:87:e5:96:5a:08:e9:2e:a5:b9:
e2:a1:6f:08:ec:fb:76:8a:42:49:16:79:cd:60:d5:c5:f3:fe:
a0:d0:d0:c8:ad:f2:3f:90:c6:4a:4c:de:24:2e:30:ca:b9:e0:
06:05:06:f8:aa:9a:bd:84:81:3d:44:13:16:de:4f:51:e1:d4:
9c:97:5a:d5:b1:0a:a9:7c:b8:63:d6:59:66:f7:87:0e:ed:bc:
7b:e8:78:d0:ea:77:bb:b1:5f:0f:db:df:ac:75:e9:e7:72:ec:
72:0c:3f:08:1e:2b:59:e5:12:b2:91:b4:01:dd:db:9a:c6:9e:
9e:a1:f6:66:03:a2:d1:68:57:c7:bf:7e:34:ea:f8:92:11:46:
0d:2f:29:15:c7:82:bf:f8:de:7c:c5:00:6b:2c:ba:54:ff:cd:
40:85:a2:61:47:10:c3:e4:93:05:10:c8:58:96:c0:53:f0:a3:
71:b7:0d:4f:a8:ec:8b:80:e0:a3:45:03:cc:83:b6:37:67:70:
30:93:c0:22:f4:6c:68:9b:01:e5:fe:b5:67:cf:a6:9a:1b:dd:
aa:9f:3b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org