Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/StS5A_FWxX3S7N3Uigwqq5EEIsE.roa
File: StS5A_FWxX3S7N3Uigwqq5EEIsE.roa (raw, json)
Hash identifier: HmD55iNNMTGwEARVfr1hZjWwzKthapa6O7KniMhvjQo=
Subject key identifier: 4A:D4:B9:03:F1:56:C5:7D:D2:EC:DD:D4:8A:0C:2A:AB:91:04:22:C1
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 670BE4
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/StS5A_FWxX3S7N3Uigwqq5EEIsE.roa
Signing time: Tue 10 May 2022 12:25:02 +0000
ROA not before: Tue 10 May 2022 12:25:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 88.218.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6753252 (0x670be4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: May 10 12:25:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ad4b903f156c57dd2ecddd48a0c2aab910422c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:54:b7:23:57:22:5a:b6:ff:2b:5f:75:83:
ba:14:d3:8c:1c:82:7f:ad:96:36:c6:83:86:c6:fb:
5f:15:69:96:03:eb:3e:8d:5f:31:d3:b2:5e:02:81:
94:12:76:35:d7:c2:c1:9a:c5:16:36:3e:4e:bf:64:
18:14:b0:55:5c:4a:af:08:61:b3:19:cc:50:2c:f9:
ab:9e:56:bc:a8:7a:41:76:e9:bd:0e:e4:5c:f7:3c:
3d:4f:17:16:0a:46:dc:60:94:ce:98:c3:2b:73:cb:
72:95:57:9a:47:34:27:cc:42:1f:9c:8c:5b:f2:dd:
c3:6f:cf:14:13:b7:ff:85:ff:ac:eb:b6:65:1b:8c:
c9:03:3b:4e:74:33:9b:87:ba:4b:84:77:27:f1:cb:
2f:e6:e7:49:3d:a6:fd:03:1a:f2:17:e0:95:c0:c4:
65:66:f1:5c:c7:73:14:36:a7:3e:37:4a:d2:ab:5a:
ea:0b:63:8f:b0:fb:f8:a6:f7:0f:5b:bb:ec:af:ee:
07:0d:fc:2a:36:fc:00:6d:aa:4f:63:10:14:3d:bd:
62:8e:19:25:00:87:4c:ce:26:77:16:fe:5d:7e:82:
8c:6b:88:47:0d:98:2a:00:7e:07:f0:7a:61:ea:c5:
bc:f7:73:7c:44:ea:3b:6e:43:d3:be:35:3a:9e:7c:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D4:B9:03:F1:56:C5:7D:D2:EC:DD:D4:8A:0C:2A:AB:91:04:22:C1
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/StS5A_FWxX3S7N3Uigwqq5EEIsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.41.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c7:24:c1:1d:f9:47:85:d7:5d:f9:47:b0:32:84:42:51:72:
0d:44:e1:19:77:a4:b1:1a:23:8b:a1:c0:71:3b:a3:bc:6a:ac:
ad:1c:3e:22:02:17:b6:04:14:e5:22:fb:37:d0:b3:b3:68:59:
a0:70:7e:db:70:21:e7:e1:81:45:4a:80:01:54:2e:34:d6:d9:
4f:17:5b:d7:64:7f:25:39:13:c8:d6:b4:1e:c5:04:9c:c5:17:
16:ac:ed:9d:2a:67:47:9b:bd:c9:c4:40:2c:8a:9c:a0:9a:21:
f0:b1:20:79:05:e0:a5:4f:73:9f:20:14:c7:8f:f4:28:23:16:
82:35:40:e8:58:a3:ef:44:df:a2:db:a8:22:ef:d7:6c:50:57:
88:93:41:7a:f5:f5:11:e9:a4:6d:d2:d1:80:12:f6:59:30:77:
12:dd:18:fd:0d:05:5d:84:16:cf:f2:13:24:13:2d:5a:c6:ed:
5e:04:2c:24:5c:b5:0c:5c:ef:5f:96:32:86:63:d9:43:f5:c1:
b3:10:e8:44:92:01:f7:83:5f:b7:10:db:9a:bf:38:e9:f7:8d:
98:08:c1:40:e8:11:ca:e2:79:a0:e4:84:a6:b1:29:40:31:1d:
bb:d1:d6:e2:ca:e4:1e:bc:8e:7a:2b:c4:1a:a8:c1:2f:ef:4c:
b6:b0:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org