Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8BWgx4AjTDMIGXL1CnzT7L1D5HI.roa
File: 8BWgx4AjTDMIGXL1CnzT7L1D5HI.roa (raw, json)
Hash identifier: /XKQjzikqlmMGPBqqQhas56WaOYOJPC2KgiEIDaJn9Y=
Subject key identifier: F0:15:A0:C7:80:23:4C:33:08:19:72:F5:0A:7C:D3:EC:BD:43:E4:72
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0A3CBB44898CED7DB89CC2AD0A97B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8BWgx4AjTDMIGXL1CnzT7L1D5HI.roa
Signing time: Mon 02 Jan 2023 05:24:56 +0000
ROA not before: Mon 02 Jan 2023 05:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39599
IP address blocks: 88.220.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a3:cb:b4:48:98:ce:d7:db:89:cc:2a:d0:a9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f015a0c780234c33081972f50a7cd3ecbd43e472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3c:24:23:43:3c:fc:d8:86:bc:59:6b:b8:19:
21:5d:be:f3:da:35:f2:2e:52:1b:57:d7:92:ec:fd:
02:70:31:1c:90:62:1c:ce:bb:a9:8d:09:cd:f8:b4:
5f:7b:84:91:db:dc:72:9e:eb:cf:f0:b4:73:b9:07:
65:27:a7:40:b0:9c:3e:d6:1c:73:a0:5d:45:4a:05:
92:f7:55:28:9e:c6:e0:79:bb:92:f9:1f:62:c4:9f:
26:b4:0d:49:6c:d9:78:61:ec:7c:0d:31:50:96:44:
84:eb:f2:4f:4e:58:17:07:ea:6c:7d:f4:e6:9f:fc:
99:42:dc:08:85:5e:4e:fe:ab:34:02:4c:ac:82:42:
33:bd:23:a8:da:ec:c7:c9:b4:35:2e:90:84:0a:3d:
d7:58:25:1b:51:d9:cd:24:62:82:53:cc:4b:d5:c2:
78:b5:af:26:06:38:15:20:ec:58:47:54:8d:c6:51:
5f:8a:78:61:6b:42:b2:c6:ef:bb:36:01:14:6e:7e:
e2:94:62:4a:55:db:a0:9a:a2:df:46:e4:bf:9f:1f:
a0:d8:32:48:33:1d:7d:2b:f7:8a:e3:20:11:34:b2:
e7:8b:6b:e6:dd:f5:db:38:a2:a7:0a:fb:e9:43:b3:
a7:e2:61:82:7f:9e:20:8c:4b:39:aa:bc:8b:6e:91:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:15:A0:C7:80:23:4C:33:08:19:72:F5:0A:7C:D3:EC:BD:43:E4:72
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8BWgx4AjTDMIGXL1CnzT7L1D5HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.116.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:dd:1c:89:f8:ad:7b:b4:bb:08:08:d8:26:5e:0e:d1:22:7e:
fd:a0:d3:94:d7:8f:43:74:25:56:cd:6d:20:9b:47:90:c1:20:
93:dc:85:57:c1:e9:ce:8c:61:b0:fc:34:c1:ab:6e:11:67:39:
94:3c:37:a1:a5:6e:41:ee:10:1e:34:10:9a:bb:e1:ff:f1:4f:
ac:aa:d3:15:02:5c:71:fa:52:03:82:6a:c1:da:74:a3:ca:aa:
c8:75:3a:ec:f6:db:6e:bf:38:a9:09:ea:6a:88:e7:0f:94:ee:
09:0b:b2:fe:ec:44:a9:76:5a:d9:6f:81:18:33:bf:1e:66:5b:
cf:1c:6b:26:40:df:1a:f8:91:29:b2:9f:30:81:ac:72:1d:38:
54:41:5b:ba:69:85:9f:06:0e:4e:69:87:66:26:72:46:ba:49:
c8:23:01:48:63:0a:97:1c:31:db:42:b3:af:97:a2:62:b8:ff:
f1:9b:3b:5a:93:4e:31:bd:f4:d5:f3:72:93:9f:d5:8c:38:6a:
33:f2:b7:00:d8:03:be:f8:73:c6:3d:79:b5:cd:02:9a:ac:36:
cc:2d:8c:24:52:1b:d9:42:67:3f:39:a9:d5:37:ec:f8:53:cc:
a0:61:ed:86:0f:35:18:75:b1:66:cf:71:8a:fe:e4:0e:51:43:
ef:36:87:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw8KPLtEiYztfbicwq0Kl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjMwMTAyMDUyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDE1YTBjNzgwMjM0YzMzMDgxOTcyZjUwYTdjZDNlY2JkNDNlNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTwkI0M8/NiGvFlruBkhXb7z2jXy
LlIbV9eS7P0CcDEckGIczrupjQnN+LRfe4SR29xynuvP8LRzuQdlJ6dAsJw+1hxz
oF1FSgWS91UonsbgebuS+R9ixJ8mtA1JbNl4Yex8DTFQlkSE6/JPTlgXB+psffTm
n/yZQtwIhV5O/qs0AkysgkIzvSOo2uzHybQ1LpCECj3XWCUbUdnNJGKCU8xL1cJ4
ta8mBjgVIOxYR1SNxlFfinhha0Kyxu+7NgEUbn7ilGJKVdugmqLfRuS/nx+g2DJI
Mx19K/eK4yARNLLni2vm3fXbOKKnCvvpQ7On4mGCf54gjEs5qryLbpEr6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPAVoMeAI0wzCBly9Qp80+y9Q+RyMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvOEJXZ3g0QWpURE1JR1hMMUNuelQ3TDFENUhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNx0MA0G
CSqGSIb3DQEBCwUAA4IBAQBL3RyJ+K17tLsICNgmXg7RIn79oNOU149DdCVWzW0g
m0eQwSCT3IVXwenOjGGw/DTBq24RZzmUPDehpW5B7hAeNBCau+H/8U+sqtMVAlxx
+lIDgmrB2nSjyqrIdTrs9ttuvzipCepqiOcPlO4JC7L+7ESpdlrZb4EYM78eZlvP
HGsmQN8a+JEpsp8wgaxyHThUQVu6aYWfBg5OaYdmJnJGuknIIwFIYwqXHDHbQrOv
l6JiuP/xmztak04xvfTV83KTn9WMOGoz8rcA2AO++HPGPXm1zQKarDbMLYwkUhvZ
Qmc/OanVN+z4U8ygYe2GDzUYdbFmz3GK/uQOUUPvNodW
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:05 2025 by rpki-client