Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1hzDBval07Y5ULKhHlmt_PO5tsA.roa
File: 1hzDBval07Y5ULKhHlmt_PO5tsA.roa (raw, json)
Hash identifier: gE8ecboy/PCmB6nnaz9z2SdiA5Qt8mGKxNMBjvludV8=
Subject key identifier: D6:1C:C3:06:F6:A5:D3:B6:39:50:B2:A1:1E:59:AD:FC:F3:B9:B6:C0
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: BE8118
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1hzDBval07Y5ULKhHlmt_PO5tsA.roa
Signing time: Fri 17 Jun 2022 14:22:44 +0000
ROA not before: Fri 17 Jun 2022 14:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 88.218.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12484888 (0xbe8118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jun 17 14:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d61cc306f6a5d3b63950b2a11e59adfcf3b9b6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:f9:26:d4:93:7c:82:b0:84:45:c2:83:91:
d1:4d:a7:04:20:c4:9f:c1:d1:7b:c9:fc:4b:12:d5:
53:58:67:32:2d:c2:72:c3:f1:45:6d:2f:16:41:d3:
c9:7a:e6:e0:e1:9b:2b:15:a6:ed:ff:91:75:3b:17:
2f:a0:f7:9a:42:c3:bc:27:94:37:bf:fc:2c:f6:e3:
22:1c:66:d4:4f:6f:18:8b:f0:d2:a0:fa:e3:10:1d:
d9:56:0b:ea:12:eb:16:65:9f:d3:c0:3c:9e:00:9c:
8f:d8:33:05:94:5a:9b:a8:71:0a:99:29:76:e1:9a:
49:bf:f9:e6:b1:d2:43:51:25:31:53:c7:7f:b5:db:
9a:17:ca:f8:a8:17:d9:92:57:9c:24:57:d2:0d:db:
02:17:6d:91:e8:43:6b:16:bb:76:43:a5:6a:b1:1a:
a3:ab:8b:85:1b:92:4f:42:e9:2d:1a:ed:67:47:dd:
9f:7a:99:93:e8:82:0d:27:45:f1:5f:a5:64:92:4b:
6b:f5:07:86:4b:ad:47:51:00:11:f3:f5:26:00:fa:
7d:43:8d:bc:97:16:0b:ae:9d:cd:25:b6:d3:eb:5e:
0b:e4:e2:7a:2a:75:39:f4:e0:81:8b:6b:b2:d9:1c:
85:91:7d:05:83:8b:e5:2d:09:8e:96:df:e1:d3:4d:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:C3:06:F6:A5:D3:B6:39:50:B2:A1:1E:59:AD:FC:F3:B9:B6:C0
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1hzDBval07Y5ULKhHlmt_PO5tsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:94:e0:bf:d8:16:72:74:46:d5:96:8d:e4:56:c0:e9:7e:60:
dd:6f:77:04:28:c2:40:9b:f0:81:de:a1:ac:7d:f3:39:ea:6c:
5c:d8:ce:43:90:15:81:dd:16:38:e8:d7:a2:0a:ff:2e:88:9b:
a6:5b:46:26:94:14:9d:3f:72:97:f9:48:f1:7a:d8:bc:50:32:
09:db:54:9d:6a:23:8e:a4:f9:e6:6f:93:d7:a4:e5:84:77:4d:
6a:c7:1a:e8:5a:ed:1b:45:f6:82:09:32:53:71:42:73:75:ba:
6c:b5:ae:f6:93:f4:b3:88:1b:e0:85:4a:49:0f:cd:2e:2c:0f:
dd:01:8d:74:77:0c:e2:c2:b9:be:8f:95:fc:49:49:6c:7f:2f:
11:28:53:b6:8c:76:b8:c4:98:74:3f:8c:48:e1:9f:db:32:13:
5a:40:50:63:dc:29:e6:ba:1d:36:33:d1:30:4c:70:5c:36:0e:
4f:5f:6b:66:22:52:73:76:29:80:e6:59:59:d6:e1:a9:ae:66:
7e:0f:09:7d:84:93:34:81:b1:59:62:c3:87:82:69:a8:e8:46:
01:93:38:62:ec:f3:18:25:9b:e2:9b:a7:5a:9e:8f:c2:22:a4:
06:e9:84:1c:7d:c6:c4:14:da:c9:0d:3b:6f:29:ad:a5:c5:68:
cb:d6:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org