Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/af_WthFbTR-r_D3mSbkNrNNwVEM.roa
File: af_WthFbTR-r_D3mSbkNrNNwVEM.roa (raw, json)
Hash identifier: 6ENkUkLEnVlz9hSHtYxx6taE9FunBkZJ1de1/B0wW50=
Subject key identifier: 69:FF:D6:B6:11:5B:4D:1F:AB:FC:3D:E6:49:B9:0D:AC:D3:70:54:43
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A9506B2
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/af_WthFbTR-r_D3mSbkNrNNwVEM.roa
Signing time: Sat 01 Jan 2022 04:52:17 +0000
ROA not before: Sat 01 Jan 2022 04:52:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206880
IP address blocks: 88.220.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982845106 (0x3a9506b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69ffd6b6115b4d1fabfc3de649b90dacd3705443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:22:16:f2:b4:0e:c8:f9:92:f2:e1:70:98:
2e:97:13:73:0c:cc:3b:50:e7:34:2f:c7:c5:2c:43:
21:2d:2f:41:33:21:c5:db:87:63:53:63:9c:9e:51:
c1:34:91:ef:87:32:31:3e:ed:56:e6:f1:c3:53:0c:
83:75:28:24:5d:cb:72:21:52:cf:09:32:03:1f:89:
8a:0c:73:fd:bf:6a:74:4a:fc:ef:2a:78:97:00:25:
55:7a:8e:30:80:b2:95:66:55:89:bc:c1:b9:39:09:
6a:de:d7:07:b3:70:95:3b:98:5a:9b:2d:c2:30:bf:
a1:ac:56:c4:08:80:43:5e:d8:9f:b9:75:26:13:13:
a6:17:29:df:6e:42:4c:a5:82:2f:9b:1a:db:95:22:
60:42:9e:df:d8:07:56:ad:88:48:63:fa:d0:42:b7:
05:ae:2f:f2:74:35:65:fa:c9:fb:d5:2d:1a:ed:6a:
48:55:c0:7b:0b:b5:a4:82:09:fd:d6:59:ff:91:98:
d9:45:dd:3e:a2:41:6f:1d:77:ca:fd:e9:52:c6:22:
29:c8:88:1b:89:d8:f6:8b:7c:1e:b0:e1:e1:e9:46:
d4:da:8b:c0:18:66:bf:85:1b:e9:20:19:37:3d:46:
dc:eb:d0:29:e5:ae:b7:df:a6:9e:6a:9c:12:d7:ee:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FF:D6:B6:11:5B:4D:1F:AB:FC:3D:E6:49:B9:0D:AC:D3:70:54:43
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/af_WthFbTR-r_D3mSbkNrNNwVEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.71.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6c:cd:57:5e:29:cc:8e:b8:96:80:cd:29:98:93:65:f2:b5:
77:8d:89:be:40:86:ea:10:00:9c:b6:fe:0a:c9:4e:48:2c:e9:
f6:b8:74:02:99:71:28:d0:98:4e:aa:cd:4a:6c:3a:41:f4:fe:
e3:06:e8:87:ec:92:7c:9b:ef:81:e3:a4:3a:9b:9b:0c:35:60:
99:d7:a7:c5:83:f9:a6:bb:7c:e2:8e:02:fa:8b:5a:69:8c:db:
a2:dc:90:93:6a:f9:60:db:e8:17:4c:76:ad:2b:24:2f:d9:ed:
7e:c9:bf:5b:ab:8b:17:08:40:e5:9e:f5:47:ec:3b:c9:af:04:
c9:47:9d:83:8c:2b:65:57:f4:6f:90:ea:f1:3e:9d:38:f4:df:
6e:57:52:42:55:3e:db:af:5b:78:c6:19:9f:f5:b6:62:b5:a5:
c7:83:c7:78:2e:a7:5e:49:7d:92:4d:ea:78:16:06:85:0c:ab:
99:fb:3e:12:d6:d8:c5:4b:db:1a:90:ff:50:c4:30:f6:6a:e9:
39:18:90:15:d3:39:40:32:84:d5:8a:69:4d:09:1a:27:12:b3:
8c:69:df:ed:33:1d:b3:df:55:2c:00:5c:f2:66:17:a3:6d:57:
88:2f:44:67:bb:4d:c2:59:95:61:b5:03:38:b0:af:7c:af:dd:
b5:47:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org