Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/foi04ouoCM33PaQyFOmIphIpBAc.roa
File: foi04ouoCM33PaQyFOmIphIpBAc.roa (raw, json)
Hash identifier: 5gfwCvRq6n1E7DU2hiNPZQpgjfc3GsezTc2a3nCgDEA=
Subject key identifier: 7E:88:B4:E2:8B:A8:08:CD:F7:3D:A4:32:14:E9:88:A6:12:29:04:07
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: F6621B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/foi04ouoCM33PaQyFOmIphIpBAc.roa
Signing time: Thu 16 Jun 2022 09:34:47 +0000
ROA not before: Thu 16 Jun 2022 09:34:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 188.215.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16146971 (0xf6621b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jun 16 09:34:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e88b4e28ba808cdf73da43214e988a612290407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:df:d9:ca:61:46:02:28:29:bd:27:2c:bf:37:
6e:20:12:8d:6c:c3:97:0a:b0:0a:2a:8f:66:d8:b1:
0e:b6:3c:98:60:12:c9:d4:e0:00:e5:de:9c:2e:ce:
fb:c9:81:73:f5:28:95:c5:c4:58:6b:10:3b:93:ea:
b6:f2:1b:e7:f9:fc:8d:b7:72:e1:26:14:eb:73:5e:
ce:07:f2:70:c4:f4:82:a1:37:2f:90:ca:ef:8b:5a:
87:c7:e1:80:d2:2b:08:40:84:0c:ff:b0:c8:61:3e:
ff:ac:da:9a:97:e3:c2:d6:db:ec:b3:e3:96:59:d1:
7e:3c:10:75:af:92:7b:00:73:c6:53:bc:da:43:6e:
b2:d1:9b:17:5b:b1:9c:bb:ec:ff:bf:d1:f3:63:b6:
7a:30:c3:33:90:1b:b1:35:24:30:92:bb:cd:3f:9b:
85:51:c9:83:06:53:82:4d:eb:17:77:70:6a:7a:6f:
6e:be:c8:b7:56:f7:fa:26:4a:cc:8e:64:e7:cc:d2:
e3:30:91:25:b1:8c:f8:b2:15:64:b6:7f:58:57:32:
ca:6e:c4:5d:df:ac:49:ec:87:91:c0:b7:9f:6e:b5:
d4:45:4f:38:4d:4f:a9:e9:13:ed:53:1b:ad:d8:56:
e4:bd:68:44:85:6e:49:f3:a6:e9:92:a2:97:d3:be:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:B4:E2:8B:A8:08:CD:F7:3D:A4:32:14:E9:88:A6:12:29:04:07
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/foi04ouoCM33PaQyFOmIphIpBAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:96:31:ca:ee:d8:c6:4a:60:4c:87:8f:30:0d:5e:5e:ea:3e:
fb:8b:8b:9b:94:fc:7c:05:8f:e0:ce:1c:ce:6f:50:bd:61:a7:
b8:fa:dd:d6:9d:6d:cd:ef:15:7b:d6:04:21:0c:bd:12:aa:3b:
65:6c:86:59:31:9b:c9:15:41:8e:2b:90:a9:91:c1:7f:5f:7d:
5e:06:d7:ec:c7:ee:60:5a:c9:4e:30:6d:8c:1b:6d:b4:01:c9:
c3:ba:79:7e:1f:ac:90:28:30:e4:44:fa:a1:66:7f:71:61:bc:
ab:df:96:97:d6:ff:ef:f7:58:ee:dd:03:7a:3f:60:c9:1f:e9:
69:fa:08:70:46:88:41:96:76:84:33:3d:4c:35:03:8e:74:c1:
cf:e8:e9:22:e8:a1:7b:b3:19:70:88:8e:a2:0e:71:b9:5c:5c:
75:af:ff:63:0b:51:34:86:43:f1:db:65:e6:7d:0a:ea:36:84:
05:41:8e:fb:9e:fc:6f:6f:3c:9b:79:6b:13:41:58:a2:4a:30:
bb:d4:f4:27:d1:32:0b:7a:7f:f8:68:d3:6d:77:7a:54:47:98:
33:43:95:f0:fc:00:64:88:86:6e:63:72:ce:74:c3:91:18:53:
46:bd:a2:54:83:89:8d:6a:0e:30:2b:72:c9:e9:96:41:94:62:
35:0a:a7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org