Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/AGW5NjJ9zbe8UKFSUoLJbM25Vys.roa
File: AGW5NjJ9zbe8UKFSUoLJbM25Vys.roa (raw, json)
Hash identifier: yhR+so7v9krL0h/iEDFh5jRo8Iu+1ZzPWbAFmjyNwqk=
Subject key identifier: 00:65:B9:36:32:7D:CD:B7:BC:50:A1:52:52:82:C9:6C:CD:B9:57:2B
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 10C60F40
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/AGW5NjJ9zbe8UKFSUoLJbM25Vys.roa
Signing time: Sat 01 Jan 2022 13:02:22 +0000
ROA not before: Sat 01 Jan 2022 13:02:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203685
IP address blocks: 88.199.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281415488 (0x10c60f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 13:02:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0065b936327dcdb7bc50a1525282c96ccdb9572b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:54:83:d5:7d:10:be:51:ac:b2:f5:24:2a:
ff:9b:7f:c9:be:64:3a:1d:7a:eb:78:43:57:4b:4c:
4c:07:f4:1b:c8:8d:c6:66:98:dc:34:79:1b:6d:a9:
ca:31:22:3b:2a:33:cc:4b:d6:31:8f:5c:d6:da:e6:
7e:d9:92:ef:9a:ef:18:87:7e:1e:84:96:eb:b7:52:
1e:0a:d8:39:cf:b7:28:8e:36:83:89:63:bf:86:0d:
17:39:ba:f8:4e:2d:49:99:17:1c:48:48:fa:2e:d9:
0d:1a:f3:6a:fe:c2:1c:b9:be:69:5f:96:c1:d0:0f:
c4:6d:da:5c:22:4e:f8:d5:eb:c4:23:a8:86:be:e8:
ee:7c:2e:db:8b:9c:2b:30:cd:76:e9:07:1d:67:59:
b3:67:1b:2a:44:c9:6a:9d:63:80:f9:7d:4d:54:a7:
31:57:1c:57:52:23:f9:5d:bb:16:1e:74:4c:6d:7a:
20:58:17:1c:dd:d9:13:fd:42:ec:60:d7:69:a2:38:
3c:34:81:de:aa:91:37:2b:2a:c1:b6:bc:45:d5:3b:
61:77:82:5e:99:16:4e:31:43:1e:a2:64:4d:94:23:
6a:3f:a4:c3:22:12:98:02:b9:3a:aa:9b:69:a4:b5:
39:03:d1:1e:3f:a8:6b:95:4c:82:b5:14:d9:36:5c:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:65:B9:36:32:7D:CD:B7:BC:50:A1:52:52:82:C9:6C:CD:B9:57:2B
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/AGW5NjJ9zbe8UKFSUoLJbM25Vys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.37.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:69:6d:c7:37:7f:8e:9b:50:93:96:40:bb:55:e7:86:63:bc:
36:94:e4:71:2e:9d:96:51:2d:67:de:ec:af:5f:79:eb:0d:7a:
b7:37:85:8d:6b:46:97:13:ac:8c:2b:81:a1:19:82:71:2f:d7:
06:39:61:ce:27:8a:ea:a6:04:89:62:ac:a7:a1:d5:d2:de:8e:
8c:81:fc:8c:14:35:02:c1:b2:e4:df:a4:38:61:59:10:08:c2:
cb:03:34:2e:46:bd:9f:ca:93:a3:5b:2b:c5:03:48:33:e3:d5:
2a:3c:f3:26:20:51:a0:25:b0:a1:13:a0:6f:9a:a5:49:44:f5:
55:d2:77:4b:dc:16:86:67:cf:bb:41:5f:83:09:3a:0f:26:50:
eb:ec:44:ee:97:c2:f1:97:88:98:e5:a7:c0:40:28:9d:f9:e6:
76:e0:d4:83:a5:f6:0a:7f:2a:81:08:e8:16:b8:62:d1:80:2b:
e8:5f:8d:d4:c2:68:87:d4:02:84:fb:e5:90:8e:98:3c:9f:83:
1e:95:d7:53:d6:71:f2:f1:b4:7f:dc:6c:a2:78:ed:1f:21:16:
ef:ab:3b:05:28:0a:f9:dc:63:16:d2:c9:d4:64:3f:10:86:9b:
37:01:31:cf:4c:5a:cd:b9:31:cc:83:af:bc:00:83:aa:4e:71:
b9:15:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:15 2023 by rpki-client on console-fra.rpki-client.org