Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/74X-5kGqMgRSlH05X0MTPCi7igc.roa
File: 74X-5kGqMgRSlH05X0MTPCi7igc.roa (raw, json)
Hash identifier: N3ZDsNiscgMzskEZESNvuN5glI0lmSteF0+uW0CvxEo=
Subject key identifier: EF:85:FE:E6:41:AA:32:04:52:94:7D:39:5F:43:13:3C:28:BB:8A:07
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3BC2F76B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/74X-5kGqMgRSlH05X0MTPCi7igc.roa
Signing time: Thu 05 May 2022 06:14:19 +0000
ROA not before: Thu 05 May 2022 06:14:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 88.220.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1002633067 (0x3bc2f76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: May 5 06:14:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef85fee641aa320452947d395f43133c28bb8a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:c4:96:84:e1:cd:2f:a2:48:14:55:f3:0b:
24:1e:f5:14:ed:71:a8:80:ce:0e:7e:90:67:be:84:
de:9e:63:b7:16:b9:bb:a7:b8:77:d7:de:6d:af:f8:
18:32:81:50:54:1f:b6:80:37:d8:56:20:71:ac:8e:
98:b2:0f:c2:df:68:1f:9f:ef:ff:17:a4:85:2a:ed:
7e:66:8c:3b:3c:d8:a0:a5:2d:5a:a0:42:bc:87:cc:
11:a7:f2:e9:58:6a:08:30:9e:49:9b:5b:9d:56:ec:
56:71:11:7e:9f:d1:1d:4e:4d:bd:02:8d:96:87:63:
31:b2:38:2e:b4:4a:9c:8c:a5:2e:d1:c4:7e:ee:3d:
b6:ba:92:1c:a8:0b:ff:08:a5:5a:12:c2:d1:4d:4a:
74:c7:9b:d4:8e:a0:06:7a:eb:a7:94:0d:ae:e7:c4:
0e:67:6c:fe:79:50:cb:5b:12:24:8f:02:ab:42:a2:
8d:5d:9c:69:e9:38:55:5e:bc:e7:da:89:ea:a1:bf:
7c:4d:68:85:ba:ab:b4:5c:7a:04:f1:9b:4d:77:e0:
28:b5:89:f8:31:6e:c1:d9:36:f2:b7:6e:b1:25:28:
71:5e:76:6c:bc:f9:ee:22:e7:9d:01:46:b7:4f:01:
e3:0a:5b:81:a4:07:56:85:44:e0:a4:20:0c:ff:ee:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:FE:E6:41:AA:32:04:52:94:7D:39:5F:43:13:3C:28:BB:8A:07
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/74X-5kGqMgRSlH05X0MTPCi7igc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.193.0/24
Signature Algorithm: sha256WithRSAEncryption
28:29:60:2e:e2:3f:18:1e:8c:c4:39:83:3e:4b:94:74:de:cf:
e0:44:e0:4c:54:c0:a3:1c:ed:fd:19:dc:1e:67:70:c2:c1:41:
d2:73:2a:28:9a:f5:0e:a5:78:64:8e:58:41:bb:2e:3b:d4:2e:
85:72:6e:f0:ba:95:8e:16:4c:56:1b:51:bc:5c:16:b6:b0:59:
c8:a8:cd:6c:eb:6f:15:a5:87:67:d8:f2:36:d6:2c:02:b7:44:
bb:67:f6:27:2e:d6:49:80:af:bf:e1:a5:11:99:b2:bb:fa:b1:
aa:76:0d:c0:64:6c:1d:52:0e:c8:cc:50:b1:b3:18:f7:5b:10:
38:fd:5d:6a:b7:bc:f6:d1:26:bb:a6:eb:cc:c6:e3:ea:60:27:
07:c1:ab:35:78:13:8d:dd:e5:90:33:55:55:65:76:01:b6:67:
33:a8:9d:0a:03:17:cd:02:e2:91:ef:99:69:ce:47:45:a9:20:
70:dc:0c:82:1b:17:df:15:f3:64:3f:d7:b1:4a:ab:9a:2b:ff:
22:c2:a8:b4:eb:48:36:38:f7:40:5c:bf:7b:b3:1f:31:9d:ed:
da:6e:80:e2:9d:06:fc:84:2f:42:9f:4b:16:56:0e:54:b3:7d:
5b:a4:f1:68:19:22:fc:a4:14:87:18:38:e0:7e:09:0b:06:6c:
4f:e1:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:19 2025 by rpki-client