Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/naDWTgrtdAXQQsdVivMvCrKPHbo.roa
File: naDWTgrtdAXQQsdVivMvCrKPHbo.roa (raw, json)
Hash identifier: N/+S6uP16mQGGjWf1Xow/yv78HeWISg18BLQJYmsKUM=
Subject key identifier: 9D:A0:D6:4E:0A:ED:74:05:D0:42:C7:55:8A:F3:2F:0A:B2:8F:1D:BA
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0184772E164A65E89445E1116655457B1183
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/naDWTgrtdAXQQsdVivMvCrKPHbo.roa
Signing time: Mon 14 Nov 2022 17:26:59 +0000
ROA not before: Mon 14 Nov 2022 17:26:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211415
IP address blocks: 88.218.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:77:2e:16:4a:65:e8:94:45:e1:11:66:55:45:7b:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Nov 14 17:26:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9da0d64e0aed7405d042c7558af32f0ab28f1dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:07:3d:4a:18:5f:47:50:cf:71:3b:98:37:
77:49:11:e5:a5:fd:ed:72:c0:19:e6:9b:19:f6:eb:
e3:a5:98:73:f0:70:f0:a2:c2:32:82:49:33:63:41:
da:e9:90:b5:b6:35:da:31:7f:91:57:de:9f:dc:4c:
97:87:e7:2a:f0:42:36:37:2d:42:18:fa:d1:f9:8e:
b0:4b:d6:bb:fc:44:95:07:27:90:25:67:e2:6b:51:
5e:c1:27:89:83:f2:af:57:4f:6d:29:d1:58:a6:d2:
6f:38:74:21:f5:1e:1a:6a:31:61:9d:5b:bb:3f:b3:
77:ee:bd:b9:1a:69:98:5c:67:19:02:e1:07:19:ee:
23:98:a6:47:92:e9:6d:ff:f2:96:8b:3c:ff:75:56:
e4:28:a2:10:03:13:0e:18:72:43:72:ce:40:74:29:
00:44:0c:38:0c:fd:8d:24:64:8a:34:21:50:37:92:
f1:7f:bc:53:81:8c:d9:4e:31:38:1d:9d:9b:6d:37:
a2:2a:5a:9d:24:1e:f6:67:ba:e6:9e:0b:23:00:c4:
ab:95:77:48:ea:c5:ab:b0:4f:da:96:ac:10:ee:0d:
66:38:25:43:79:f1:50:c3:e1:02:c9:91:14:34:f3:
e7:e0:42:d6:47:d0:20:c7:67:81:b8:45:3a:d0:f4:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A0:D6:4E:0A:ED:74:05:D0:42:C7:55:8A:F3:2F:0A:B2:8F:1D:BA
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/naDWTgrtdAXQQsdVivMvCrKPHbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.41.0/24
Signature Algorithm: sha256WithRSAEncryption
60:cc:06:e7:81:e4:f4:23:4b:e1:e4:86:99:50:48:12:38:4b:
11:64:05:5d:f6:05:29:ca:59:d6:fc:54:f4:8d:84:58:d3:0f:
9b:64:d2:e9:f3:78:a9:9c:88:1b:01:2b:95:c7:05:56:4d:1c:
9a:ff:47:5c:57:fa:2b:6b:44:71:1a:e7:c6:67:d6:7a:aa:c0:
41:38:6d:b6:27:e0:48:0f:1f:d4:c1:ce:69:c7:dd:a0:34:50:
1c:bb:7a:8f:61:b3:60:58:02:32:fa:b3:4e:60:ad:76:d7:35:
a2:8e:0a:dd:02:2d:b1:3c:8d:e7:3c:fc:ec:a2:90:82:f6:df:
e6:61:4e:9b:dc:53:2e:f4:10:e1:4d:f2:a2:76:63:f3:e5:6e:
cd:41:e9:6a:0a:65:bf:f0:d3:3e:84:9c:bb:47:ab:18:c5:19:
b2:a7:e1:ab:d0:9c:82:63:e2:85:93:8d:8c:ce:7d:32:fb:f6:
5e:d6:78:92:b8:f9:b2:be:03:f4:ba:35:38:ef:9b:db:c3:7b:
d7:3a:8a:6f:31:11:52:25:79:87:7c:5d:af:ac:c2:5b:3b:38:
bb:26:64:29:d2:4a:d8:e3:31:1f:51:86:60:2d:50:db:8b:cd:
ba:37:b9:94:81:2a:36:0a:01:81:1f:25:d3:be:46:06:43:e7:
c8:98:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org