Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/88wjQIhEaqOBpUzqmK0gckPwGPg.roa
File: 88wjQIhEaqOBpUzqmK0gckPwGPg.roa (raw, json)
Hash identifier: 5hJDefMTrWO9J7pwIvSqThGkHje01G8oQazecNrPVRk=
Subject key identifier: F3:CC:23:40:88:44:6A:A3:81:A5:4C:EA:98:AD:20:72:43:F0:18:F8
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CB0FC5E2B4759FFDD7AAAA075E9E94998
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/88wjQIhEaqOBpUzqmK0gckPwGPg.roa
Signing time: Thu 28 Dec 2023 15:12:58 +0000
ROA not before: Thu 28 Dec 2023 15:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198023
IP address blocks: 88.220.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:fc:5e:2b:47:59:ff:dd:7a:aa:a0:75:e9:e9:49:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Dec 28 15:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3cc234088446aa381a54cea98ad207243f018f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:66:2e:fc:3a:61:a9:43:aa:57:31:bb:54:
ee:b1:f6:5a:83:5b:e8:5b:f4:ea:ac:b0:b5:c1:cf:
ea:a3:70:b9:4e:84:54:11:28:09:cf:f3:e5:a4:5a:
d2:5d:bf:cf:2c:e7:1a:63:82:c3:cb:cc:52:2c:96:
c5:da:50:bd:87:15:6a:44:f7:c1:de:6e:f9:c1:d2:
9d:d4:ac:51:8d:87:47:33:cc:13:91:f5:4d:80:2f:
8a:16:29:88:ee:bb:db:ae:22:31:ab:c4:35:05:33:
ef:2e:0c:c4:7c:83:3a:91:8b:6d:9a:bb:ee:6d:c0:
cf:cb:2b:93:82:90:86:9e:1b:14:d3:70:1d:43:d0:
70:eb:ca:db:5c:05:e2:85:39:ce:05:0f:a4:32:61:
92:5b:b5:56:38:b3:f7:99:00:be:2a:fc:49:b3:f0:
2a:79:c0:8c:b7:72:bf:43:39:03:d8:1c:3e:0d:f4:
47:ff:fd:3d:92:6e:d2:94:60:72:d6:8d:a1:73:36:
50:96:2b:71:c5:7e:1e:d6:bb:10:c0:bb:4d:d9:23:
64:24:e8:bd:dd:cd:f7:d0:c3:e4:17:9a:8b:18:03:
3c:21:5e:1b:c6:e4:b1:fc:74:5d:66:00:fd:0f:11:
cb:61:f7:5d:58:25:61:c6:b8:73:cf:32:73:58:b8:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CC:23:40:88:44:6A:A3:81:A5:4C:EA:98:AD:20:72:43:F0:18:F8
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/88wjQIhEaqOBpUzqmK0gckPwGPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.181.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e0:9e:d9:a9:5a:3b:45:d1:5c:5a:7a:7b:5a:17:c4:3b:c4:
91:23:d3:68:10:5e:38:b6:15:a9:d1:07:62:40:6d:4b:65:de:
f5:5c:d4:a4:8e:77:b3:7e:0e:67:97:d7:12:33:44:78:64:32:
d9:8c:84:3c:99:fa:c6:ec:39:56:4a:81:b7:7b:2c:f1:ef:41:
05:0c:a0:c3:82:b5:72:83:50:37:f4:1b:54:c0:3d:09:88:b1:
39:98:17:f5:ca:c1:31:ac:fb:41:2b:08:fb:e7:97:36:a1:59:
fb:60:0d:9f:a0:65:c7:b6:8e:6d:75:13:ce:7b:e9:9e:88:4c:
83:03:dd:d5:88:20:04:a1:f6:02:5b:0e:5d:8a:32:f0:6e:01:
e5:64:3f:60:49:e4:20:ea:c0:2b:f0:68:4b:8c:b1:40:6a:ab:
0a:eb:8d:c1:3b:0a:4d:f9:db:29:14:8d:ea:03:12:37:da:af:
2d:fb:7c:64:f5:b4:d2:e7:b7:41:7f:e1:b4:63:03:5a:5e:7b:
cb:4c:91:48:da:13:2c:93:0e:71:a8:83:c7:e4:03:82:09:d3:
c3:b7:29:b4:aa:dc:d8:90:ed:5e:3b:19:5e:98:29:5c:1a:f3:
d8:3c:63:e5:00:49:72:d4:3b:84:99:1c:5d:1b:c7:3a:3e:80:
13:4f:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:24 2025 by rpki-client