Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/EldpCpcxHAwHPF_00Wsg4keyjcA.roa
File: EldpCpcxHAwHPF_00Wsg4keyjcA.roa (raw, json)
Hash identifier: fb/qGNsMYzWt1AKThYtAjfpwFeyShrItKNn7cRzt4zw=
Subject key identifier: 12:57:69:0A:97:31:1C:0C:07:3C:5F:F4:D1:6B:20:E2:47:B2:8D:C0
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 018245297D5EB54050D4C37408AAF31634D9
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/EldpCpcxHAwHPF_00Wsg4keyjcA.roa
Signing time: Thu 28 Jul 2022 14:15:23 +0000
ROA not before: Thu 28 Jul 2022 14:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57240
IP address blocks: 88.135.41.0/24 maxlen: 24
88.135.40.0/24 maxlen: 24
88.135.43.0/24 maxlen: 24
88.135.42.0/24 maxlen: 24
88.135.44.0/24 maxlen: 24
88.135.47.0/24 maxlen: 24
88.135.46.0/24 maxlen: 24
88.135.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:45:29:7d:5e:b5:40:50:d4:c3:74:08:aa:f3:16:34:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jul 28 14:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1257690a97311c0c073c5ff4d16b20e247b28dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:20:0d:dd:33:dc:42:d7:37:ff:de:d3:f3:
a6:35:fd:f3:58:ef:83:de:c8:6d:e3:d6:5e:11:e9:
6d:5f:23:ee:24:c4:03:28:17:c9:d1:63:25:d7:09:
fb:84:b3:29:b9:1c:0d:59:fc:54:d9:29:d5:8b:e1:
8a:73:5b:10:20:65:44:d3:8b:d2:ed:52:d5:3a:2e:
b9:cf:4b:d1:e0:56:a9:45:f4:38:c4:c2:6c:8d:81:
c3:fb:1f:42:01:35:1b:01:34:4a:c2:02:68:7d:4a:
a1:cc:f9:be:e4:c1:ae:3d:35:09:cf:f3:d0:f2:a6:
5b:2a:94:bb:7c:83:1b:68:04:5e:a0:5b:1a:8d:7c:
aa:72:ab:70:ad:2f:6a:74:76:ad:32:29:7b:23:11:
5d:07:6f:1d:9c:14:dd:bd:6a:72:f2:3c:af:5c:46:
7d:ad:8d:4d:d9:5a:60:68:1c:f6:d0:a7:a3:6c:15:
2a:c5:63:1f:8f:b1:95:0a:e1:3f:70:84:7d:4a:02:
c2:eb:ce:fc:2b:fb:f0:a4:f7:c9:8f:8d:57:a5:75:
f2:6f:66:68:30:d0:31:84:c3:11:f4:58:8e:e8:b3:
a2:e4:ab:66:5e:cc:e8:ba:4e:6f:24:3b:64:c0:28:
14:cd:51:e5:d9:33:fd:88:01:83:e6:b5:94:5a:ed:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:57:69:0A:97:31:1C:0C:07:3C:5F:F4:D1:6B:20:E2:47:B2:8D:C0
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/EldpCpcxHAwHPF_00Wsg4keyjcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.40.0/21
Signature Algorithm: sha256WithRSAEncryption
35:4b:e9:1a:cc:e5:f0:d4:ef:4d:3b:09:e1:40:6a:14:d0:5d:
b5:82:bc:43:0c:1f:c4:93:38:33:9f:36:4c:cd:d9:cd:84:99:
35:a8:09:27:48:a0:79:55:7b:7b:65:ae:3d:1c:fe:48:6e:c1:
7f:c7:a8:2e:41:cf:17:93:df:56:35:69:68:73:3e:b8:f7:42:
a8:c9:4b:99:e9:0b:b8:ab:6e:bd:b0:c2:4a:e7:23:ba:13:bd:
f9:c6:e7:7e:9b:d8:2c:b7:8c:66:e1:c3:d1:d0:4a:d5:ce:45:
2e:ca:dd:28:53:bb:1d:7c:dd:19:09:53:a6:1a:f0:fc:44:d2:
2e:1f:a9:77:80:c8:41:3d:94:08:89:a1:46:55:ac:0e:95:04:
7f:ce:3c:d1:2c:2d:77:79:d7:26:83:b5:d7:af:51:fb:3c:4e:
fc:31:da:1f:cc:de:05:0f:d2:81:34:d0:af:8d:06:0e:16:d0:
f8:da:b6:5d:b0:f5:86:f1:ae:e5:04:1d:d6:9a:18:b7:9f:e0:
b6:f6:85:4c:71:07:22:5b:e8:23:8e:e0:33:55:29:7d:bc:86:
83:85:38:44:06:0b:9e:e0:1c:83:14:66:19:0a:0e:7a:45:79:
52:47:88:85:3c:4a:f2:b4:cb:70:51:41:54:bb:bd:72:5c:be:
a9:10:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org