Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kgKZB6s1R26TlQ5tbCDnlUnP9Zw.roa
File: kgKZB6s1R26TlQ5tbCDnlUnP9Zw.roa (raw, json)
Hash identifier: LublN4KO92sR5ENE9OLq3BP2sRbe6vvpGB0fKKtQrQU=
Subject key identifier: 92:02:99:07:AB:35:47:6E:93:95:0E:6D:6C:20:E7:95:49:CF:F5:9C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A88436C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kgKZB6s1R26TlQ5tbCDnlUnP9Zw.roa
Signing time: Sat 01 Jan 2022 04:52:08 +0000
ROA not before: Sat 01 Jan 2022 04:52:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201113
IP address blocks: 195.136.162.0/23 maxlen: 23
88.220.154.0/24 maxlen: 24
88.220.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982008684 (0x3a88436c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92029907ab35476e93950e6d6c20e79549cff59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:42:78:e8:96:25:7a:56:0d:f2:d4:81:0e:
d4:79:c7:56:3f:8c:a3:3a:e3:a1:cb:b0:1e:4c:15:
ed:3b:d5:45:82:05:f6:3c:86:35:70:6b:07:d5:75:
bd:02:bc:ba:73:25:03:c0:53:7d:94:8d:d3:b9:27:
b7:9e:6b:47:fc:9c:10:fa:b3:68:26:d0:56:64:e4:
70:ee:53:8e:8a:0e:9a:75:30:b7:97:40:dd:5d:72:
46:4a:0e:ab:a6:2b:07:7d:e6:f8:f9:d5:2d:05:5e:
7e:dc:af:d0:e2:9a:9a:b4:3e:5d:17:7e:64:ce:32:
ca:e6:94:d8:cf:57:23:45:ea:ae:42:65:68:be:a5:
ad:03:6c:f5:23:ab:44:06:4c:11:7c:80:6d:1b:ec:
ae:8c:93:0c:96:41:6c:26:ce:9d:8f:c9:45:d4:df:
74:51:cc:92:cf:cf:2a:97:42:f5:b0:c8:f6:c7:ec:
5e:68:11:9c:12:36:54:12:3b:69:59:d8:ef:cc:db:
69:ba:03:7f:e6:51:ab:f1:3f:a1:5c:03:10:fa:ed:
49:6d:f0:8c:f0:8c:1f:72:af:ab:6c:22:01:46:8a:
9b:c7:ea:a4:bc:45:7d:a7:58:58:02:8b:45:91:45:
c8:77:f1:81:5b:b3:90:e0:d0:de:da:24:d4:96:01:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:99:07:AB:35:47:6E:93:95:0E:6D:6C:20:E7:95:49:CF:F5:9C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kgKZB6s1R26TlQ5tbCDnlUnP9Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.154.0/24
88.220.167.0/24
195.136.162.0/23
Signature Algorithm: sha256WithRSAEncryption
32:b1:c7:4d:64:19:9a:2d:22:09:cb:da:3c:41:8d:31:46:07:
a4:b9:d9:98:52:84:b6:8e:7e:ad:41:bc:16:82:18:29:68:e6:
de:b7:20:c7:a4:2e:72:34:26:4c:8a:3a:1c:8a:e5:cf:73:57:
97:c7:d5:fd:34:dc:48:b7:22:64:8a:8a:5a:28:a4:a6:e6:6e:
10:a5:5e:55:96:ec:34:66:a0:04:92:e6:ee:6f:95:3a:75:72:
c2:0b:31:f8:9b:34:cc:35:22:b2:e3:36:fb:d1:53:98:51:c2:
d8:c5:c2:86:99:7d:c6:a6:e5:d1:ab:88:da:23:1f:d4:bb:c4:
47:5f:fb:ed:c1:43:57:30:7e:e6:e5:16:19:36:10:c2:ed:a8:
fb:0a:5a:47:18:46:b7:91:1d:10:db:59:1d:1b:c6:27:f1:3e:
3d:5a:c8:cf:2d:2f:c0:55:be:9d:c0:60:1a:fd:32:e1:72:5a:
54:29:ea:0d:96:4d:77:81:43:21:0a:75:fa:8a:fc:ab:99:b5:
0b:36:2b:8b:78:39:21:22:f6:61:f1:7d:93:f4:76:6a:8e:9c:
6d:60:31:c7:47:9a:2e:d2:6b:ca:24:5e:2f:d7:ec:d2:8e:db:
b4:dd:91:75:ed:b8:fa:1d:8a:2a:6a:51:7e:29:fc:df:aa:8d:
85:e7:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org