Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/fnG834Fh8i6BimQW8g1DignT7lA.roa
File: fnG834Fh8i6BimQW8g1DignT7lA.roa (raw, json)
Hash identifier: njAIm3FcsDiH5/tUNyf8Lr8anZrMLsSb43FdeVGYqXU=
Subject key identifier: 7E:71:BC:DF:81:61:F2:2E:81:8A:64:16:F2:0D:43:8A:09:D3:EE:50
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 048F358B
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/fnG834Fh8i6BimQW8g1DignT7lA.roa
Signing time: Thu 05 May 2022 10:47:08 +0000
ROA not before: Thu 05 May 2022 10:47:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212345
IP address blocks: 88.218.115.0/24 maxlen: 24
88.218.113.0/24 maxlen: 24
2a0f:52c1:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76494219 (0x48f358b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: May 5 10:47:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e71bcdf8161f22e818a6416f20d438a09d3ee50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:fd:8b:fa:6b:0d:f2:6f:2c:f3:76:6f:69:
5e:55:24:6f:58:7b:fd:13:62:c7:82:c0:6c:cf:bd:
a7:32:d3:e2:44:57:56:12:86:fb:b4:a6:20:f5:93:
69:77:8e:19:8c:e5:f0:b0:cf:dc:67:4d:04:2a:15:
b2:89:e4:03:7a:06:60:f5:cf:8f:89:a9:0e:6b:e5:
ec:f8:01:a0:f8:5f:4b:48:e3:d1:72:19:be:38:15:
2a:11:78:43:9d:d9:99:fc:a8:18:9d:23:e2:14:c9:
c1:28:2e:4f:e0:1a:fa:5d:30:bd:84:ce:7b:49:96:
93:de:6b:4a:29:1a:42:fa:6a:14:7c:32:0e:50:16:
fe:4c:dc:8d:e7:8f:a1:30:27:a8:55:75:dd:46:02:
97:ea:cf:01:1a:51:0d:a7:83:56:4e:2f:74:1c:21:
9b:17:61:3c:e0:be:ca:a6:fc:bf:52:6c:65:91:21:
64:72:43:dc:3c:6b:88:47:de:c4:50:6e:54:41:61:
d2:a6:5c:b9:15:9a:a0:43:0d:84:44:16:85:62:27:
d3:0e:ce:cb:8f:c9:62:92:ff:5d:f0:45:f6:1a:b4:
d1:bb:04:3c:56:d1:f4:77:1f:8e:95:c4:bb:48:71:
3c:53:89:a0:ca:c1:26:5d:34:13:e7:e7:fd:6f:63:
f3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:71:BC:DF:81:61:F2:2E:81:8A:64:16:F2:0D:43:8A:09:D3:EE:50
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/fnG834Fh8i6BimQW8g1DignT7lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.113.0/24
88.218.115.0/24
IPv6:
2a0f:52c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
81:85:c9:26:e7:34:f4:26:a3:c8:20:f9:bc:c2:f7:82:9e:78:
04:13:7d:1f:e2:1d:11:49:e6:ff:a3:1b:6e:30:28:73:c9:0c:
e2:fd:ac:56:58:aa:1c:9e:9d:98:99:76:ee:ff:bc:59:bf:87:
36:8f:b7:d0:7b:c9:17:c7:25:8c:8b:12:b4:c3:8c:f3:9a:23:
07:c5:cc:b5:81:20:36:bf:ff:56:63:4f:db:b9:45:e2:55:cf:
40:55:53:fc:92:6e:ec:cc:db:64:ca:b1:4a:5d:83:1a:1a:6d:
37:32:87:03:dc:f2:9b:ae:36:a6:00:9b:99:58:6c:c0:83:7b:
da:d1:0e:ea:d1:f8:ab:f6:a9:f9:62:49:56:d4:65:22:41:69:
70:9c:05:a8:f1:d7:73:e3:99:64:44:a1:be:15:a3:01:ce:73:
02:e7:3f:8e:77:2b:80:5f:93:4c:43:f2:14:06:90:6e:5c:7b:
03:3a:08:b4:2d:5a:01:fe:b1:43:53:d3:53:a0:94:ed:df:c4:
84:3e:79:dc:fd:27:a1:67:66:4f:7f:42:8b:08:f9:d9:7a:02:
6a:45:a7:b7:42:95:78:ba:57:a9:1f:ed:68:9a:2d:0a:c5:19:
00:aa:a6:a8:f5:91:8e:f0:87:73:3d:d0:16:87:7c:d2:b6:fb:
25:44:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:45 2025 by rpki-client