Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/waEuovVUVsXb1DQMsVr4Nkrzp_s.roa
File: waEuovVUVsXb1DQMsVr4Nkrzp_s.roa (raw, json)
Hash identifier: PnrCVEXHesqKGCVXl+YuvH/HZi6K5Cl9k1ck1LfuO2g=
Subject key identifier: C1:A1:2E:A2:F5:54:56:C5:DB:D4:34:0C:B1:5A:F8:36:4A:F3:A7:FB
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 6BBA8A
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/waEuovVUVsXb1DQMsVr4Nkrzp_s.roa
Signing time: Wed 11 May 2022 07:59:02 +0000
ROA not before: Wed 11 May 2022 07:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134526
IP address blocks: 88.218.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7060106 (0x6bba8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: May 11 07:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1a12ea2f55456c5dbd4340cb15af8364af3a7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:10:95:25:47:c3:eb:b5:5b:d1:e3:7d:ce:
fb:40:43:05:b7:c2:9d:d6:2d:62:07:03:5d:e9:9a:
4e:c8:b0:ac:ce:d2:47:04:f2:c2:fc:dc:1a:f4:1b:
9e:7b:86:0b:cc:00:95:c7:9c:2a:d4:75:38:b1:d2:
ac:bc:cc:a8:df:d3:68:6f:89:b4:64:2c:07:bd:10:
a2:d3:18:f2:16:07:40:44:e8:e1:02:ee:e5:28:82:
b9:bc:cf:8f:6e:9f:c6:3d:db:88:eb:8a:cc:ba:3f:
3e:1f:76:2f:5c:81:31:bc:b7:30:7d:51:c8:fa:6e:
2f:79:63:8d:30:aa:08:70:80:74:ae:ae:37:47:b8:
59:36:3c:b3:d7:8c:b7:78:f0:82:39:ed:f9:6b:1c:
2e:70:4e:f4:34:1f:89:d3:a7:97:c7:c8:27:bc:63:
67:81:0e:a2:cd:a5:8f:9f:dc:4d:35:df:0e:5a:8f:
d5:13:2d:2e:cd:4e:cf:14:f7:3d:f8:18:71:b1:ef:
b1:82:db:ec:6a:b2:15:fd:ac:7b:39:d4:48:7e:2a:
fe:53:b5:e9:44:60:09:c1:97:c1:bd:1d:2d:71:61:
be:87:9e:bd:a5:4f:78:54:48:69:f0:60:37:18:e2:
ee:98:69:fb:47:78:8a:9c:ea:71:fc:28:5d:8f:98:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A1:2E:A2:F5:54:56:C5:DB:D4:34:0C:B1:5A:F8:36:4A:F3:A7:FB
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/waEuovVUVsXb1DQMsVr4Nkrzp_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d5:78:9e:8c:da:18:23:17:71:3c:71:5e:1f:85:46:99:c2:
4a:3d:0b:f9:b2:11:65:e3:23:1a:e7:76:b8:fc:9c:88:e6:1e:
e0:6d:ff:6f:57:82:c6:f7:4c:e9:ad:55:69:b4:00:a3:97:b3:
a6:3d:c3:40:24:f9:56:9e:e9:e8:20:0a:7d:6e:10:6d:7f:5c:
b1:4d:75:35:55:5f:c5:ad:1c:44:8d:35:74:3d:68:78:27:e3:
76:4f:3e:ba:3a:8b:be:4d:2b:b4:c4:d5:3f:59:a6:f7:ae:27:
a4:ba:ed:5b:85:d6:40:ef:64:f7:dc:33:f5:a1:a0:86:30:8b:
8d:e6:f5:2d:22:c7:ad:31:f0:4e:2f:24:e9:e0:41:59:12:c1:
ca:10:48:5e:26:be:2b:28:1d:31:49:7d:ac:6c:56:ac:96:b0:
8e:a6:cb:87:f2:ef:98:3e:a4:6c:26:c5:6e:ef:2b:ea:11:23:
b1:b1:e1:d7:57:10:1b:94:04:3c:af:4a:2d:29:06:dc:94:c7:
22:0d:f8:60:3f:8e:fa:24:ed:4a:52:a0:0f:54:fa:aa:31:cf:
91:a7:99:92:fc:44:44:8d:b8:24:f9:6a:61:85:2e:bc:cb:90:
f1:2d:59:87:a5:28:4d:65:b4:5e:2d:2e:8e:ec:00:a0:50:85:
0f:53:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org