Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/0sYUKRV2P58EcmLMaLNh4lwZg3g.roa
File: 0sYUKRV2P58EcmLMaLNh4lwZg3g.roa (raw, json)
Hash identifier: ukB4579GD4BxPTpG3Di7QxMo637euMtDGOGQzricl3U=
Subject key identifier: D2:C6:14:29:15:76:3F:9F:04:72:62:CC:68:B3:61:E2:5C:19:83:78
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 02A020D2
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/0sYUKRV2P58EcmLMaLNh4lwZg3g.roa
Signing time: Sat 01 Jan 2022 02:53:15 +0000
ROA not before: Sat 01 Jan 2022 02:53:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 88.135.96.0/20 maxlen: 24
213.159.136.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44048594 (0x2a020d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 02:53:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2c6142915763f9f047262cc68b361e25c198378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:00:ee:b1:53:82:78:7f:72:7a:94:b7:3d:
93:3f:cd:99:51:c6:f8:6d:44:ec:fa:18:c0:0e:35:
89:8a:9a:c8:c7:c4:28:4e:2d:bb:28:cf:e6:4d:da:
05:58:f5:c8:db:11:99:d9:8f:1d:2c:54:bd:12:f8:
c7:fa:1b:48:cc:b4:17:29:33:fb:2a:57:44:97:31:
05:4d:ed:f8:16:57:44:15:55:c3:9e:6a:36:aa:d0:
1a:d3:21:4a:83:80:d4:0b:3b:dc:9e:d1:70:f0:e7:
b4:22:57:4c:8e:5f:3b:1c:0a:47:01:ab:61:48:69:
ec:03:c5:ab:81:34:ba:45:1c:49:90:e3:25:df:d7:
bc:08:66:82:1d:30:6c:08:54:8b:1e:01:2b:ca:39:
7f:f3:32:d9:14:db:54:e9:a9:33:e4:90:6a:d8:98:
dc:23:06:22:a8:59:a4:df:76:c0:38:bc:4d:13:ce:
0e:15:ff:7a:cc:53:65:1e:12:b0:93:9e:dd:52:90:
b4:29:c9:29:8c:ab:c7:60:4b:13:38:b2:8a:35:55:
79:92:ed:4e:98:8f:e3:92:75:6c:af:03:26:bf:0b:
e6:06:fd:e4:a1:75:d6:6e:6a:20:cd:be:c1:43:f9:
d7:01:2a:8f:d9:72:71:2c:dc:2f:8a:0c:a7:98:3d:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C6:14:29:15:76:3F:9F:04:72:62:CC:68:B3:61:E2:5C:19:83:78
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/0sYUKRV2P58EcmLMaLNh4lwZg3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
15:16:aa:ff:e5:78:52:34:03:62:9d:c0:32:92:25:2f:a2:b7:
27:3a:46:21:47:6a:bd:71:30:7d:06:e3:32:11:c6:71:b4:03:
64:b8:23:0e:73:19:b3:9c:dc:a4:15:55:86:47:1d:e3:d7:36:
e6:1b:24:15:35:c6:ec:18:76:03:d4:dd:1f:0d:a6:8e:c5:75:
b3:1b:e1:19:02:28:5a:c8:44:59:d3:7b:a4:36:89:5e:a5:43:
d2:76:da:d0:bb:a9:23:01:25:86:bc:35:e5:78:6b:47:23:22:
d3:cf:ee:a1:0b:61:0c:1c:c0:3d:c9:11:af:fc:2c:ec:df:97:
aa:b1:66:04:39:18:00:86:65:20:f4:45:17:84:1c:11:7f:7b:
94:9c:9e:22:34:d1:0e:16:4a:ac:49:ef:72:6b:6c:71:b2:d7:
7a:64:1c:45:4a:45:f6:dc:10:95:d7:76:33:af:d0:be:f8:23:
51:30:51:1b:d3:f3:2c:bb:76:ff:24:fe:bc:12:37:81:39:08:
f6:05:30:4f:1f:75:55:62:b0:70:91:02:b9:c3:f7:df:d4:ec:
e1:7e:52:d0:fe:cb:08:e7:5b:06:8d:7d:31:46:3b:e6:45:a9:
a8:59:5a:a0:40:1f:e1:bf:ca:6f:15:77:7b:bd:4d:2a:db:21:
fc:27:5c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-ams.rpki-client.org