Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/1-6wGd2-uDgzPMPjKoo_R2p7fu5M.roa
File: 1-6wGd2-uDgzPMPjKoo_R2p7fu5M.roa (raw, json)
Hash identifier: otwL5X0PXwa3hU4PYYOIcvmCbicpUA5FTWMYtrLjKNc=
Subject key identifier: FB:AC:06:77:6F:AE:0E:0C:CF:30:F8:CA:A2:8F:D1:DA:9E:DF:BB:93
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 10BE86FA
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/1-6wGd2-uDgzPMPjKoo_R2p7fu5M.roa
Signing time: Sat 01 Jan 2022 13:02:19 +0000
ROA not before: Sat 01 Jan 2022 13:02:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200176
IP address blocks: 88.199.130.0/24 maxlen: 24
88.199.128.0/23 maxlen: 23
88.199.44.0/24 maxlen: 24
88.199.54.0/23 maxlen: 23
88.199.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280921850 (0x10be86fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 13:02:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbac06776fae0e0ccf30f8caa28fd1da9edfbb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:6f:9f:61:a4:9d:55:21:65:79:78:a5:cc:
b5:34:78:fd:2b:17:0e:98:aa:78:6c:58:11:e9:58:
df:f0:ac:db:8a:52:59:ff:db:bf:4a:44:03:4d:18:
b8:5b:76:0a:5a:00:e6:ed:bf:e8:b6:6f:6e:7a:8c:
95:93:52:c7:f0:da:2a:13:d5:54:a0:33:74:5a:60:
d0:a0:4c:30:5b:40:ce:91:fc:5d:a0:2a:b2:05:ed:
e1:31:06:85:22:7d:1d:16:be:95:01:95:1d:e5:18:
e8:e1:8b:ac:fd:22:ac:cc:7d:86:ad:e6:27:71:c6:
3c:e0:c6:6f:16:17:64:87:ce:3e:72:04:41:00:b0:
80:58:59:19:e1:3d:3a:f3:56:14:3e:22:46:ff:ea:
27:c5:03:16:3f:a5:14:58:bb:ba:22:ec:03:ba:11:
ea:ee:22:84:41:88:bd:72:7c:8b:ff:28:c7:42:04:
92:c4:ee:13:fa:d7:43:a1:2b:c6:2f:9c:94:3b:16:
35:27:d3:41:a1:cb:68:e7:65:f1:40:73:0f:ac:2c:
67:c3:af:cb:1a:7d:97:eb:3b:d6:60:61:b4:5c:6d:
b0:92:ba:d9:e4:89:3b:49:75:54:e3:dc:71:9f:0c:
48:3b:f1:50:18:b2:85:7e:bc:cd:0f:69:bf:4f:e9:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AC:06:77:6F:AE:0E:0C:CF:30:F8:CA:A2:8F:D1:DA:9E:DF:BB:93
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/1-6wGd2-uDgzPMPjKoo_R2p7fu5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.44.0/24
88.199.53.0-88.199.55.255
88.199.128.0-88.199.130.255
Signature Algorithm: sha256WithRSAEncryption
57:42:9c:66:b8:4c:73:fc:a3:43:c6:88:0b:2a:46:5b:12:be:
57:a8:25:b8:40:e3:57:d9:b7:bb:fc:87:16:53:39:7f:40:cf:
2c:8a:71:1e:65:0b:87:0d:47:97:02:83:7f:6c:f4:bb:eb:c9:
71:86:2f:7c:8c:36:e1:7f:d7:ab:53:63:38:cc:ff:69:29:26:
4d:f0:30:68:2f:df:f0:a4:9b:7f:49:1b:81:31:a8:15:fb:04:
05:82:f1:65:2c:ab:7b:f2:72:70:47:77:d5:26:f7:2c:18:17:
52:01:af:50:0c:49:83:c6:ee:ff:95:8d:a0:85:c3:eb:75:fd:
3e:9a:50:ee:c6:70:17:03:ce:57:62:56:fe:c0:19:89:cd:b4:
23:66:81:b4:6d:b2:de:33:42:1e:5f:87:97:0d:0d:10:b1:e3:
b8:a1:20:27:1a:4f:53:01:a1:7e:00:72:c0:37:eb:4d:58:2d:
9f:47:70:18:2b:7f:ae:cc:db:4b:23:c0:0c:0a:de:a1:40:fa:
ea:4f:6e:a5:28:da:90:f5:46:22:95:3c:d3:12:27:69:4a:78:
b1:8f:fb:09:ac:95:88:54:c3:c7:9e:80:d5:43:62:28:1b:67:
6a:26:cc:1c:4a:01:d5:0c:22:a1:f7:18:71:df:a7:b1:79:ac:
f2:87:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:15 2023 by rpki-client on console-fra.rpki-client.org