Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/u3ilzAFCoIO3pf9DBIQygxMPCjw.roa
File: u3ilzAFCoIO3pf9DBIQygxMPCjw.roa (raw, json)
Hash identifier: osUKttxJGVNbCHrxSD43eMYuSVDL9dBs/0wzmU3eurw=
Subject key identifier: BB:78:A5:CC:01:42:A0:83:B7:A5:FF:43:04:84:32:83:13:0F:0A:3C
Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Certificate serial: 013D51
Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/u3ilzAFCoIO3pf9DBIQygxMPCjw.roa
Signing time: Thu 23 Jun 2022 08:57:26 +0000
ROA not before: Thu 23 Jun 2022 08:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203068
IP address blocks: 88.218.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81233 (0x13d51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Validity
Not Before: Jun 23 08:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb78a5cc0142a083b7a5ff4304843283130f0a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:07:70:86:9e:d9:82:49:cd:d6:b7:4b:15:
20:bc:61:e8:07:3c:07:74:e5:44:9c:b0:d8:25:b4:
0a:5c:04:7a:68:e3:a2:47:f2:19:94:39:ca:a5:1a:
85:b6:54:39:cc:d2:50:c5:39:01:14:2f:92:9f:c0:
f6:8e:e6:c7:34:c0:f2:c7:f9:2e:01:6f:5f:a6:c1:
78:15:a7:a0:ce:19:ef:30:bc:66:0f:14:c7:3b:69:
68:c2:df:0e:26:ce:cc:02:6b:b5:27:52:0f:3a:00:
a8:36:b2:a8:ae:47:b4:c3:ca:3c:b3:2b:e9:35:f0:
1d:8e:7c:7a:27:0a:3a:27:85:6f:04:7c:f3:0c:3d:
73:06:c1:45:56:b7:76:9c:8f:cf:17:09:7a:9f:11:
d8:61:f8:01:f2:4d:f2:7f:10:3c:bd:8a:9f:66:a5:
fb:f0:48:c9:12:ac:c6:6d:78:9f:12:e8:f9:a5:52:
38:f7:d1:7a:ea:f1:a9:87:59:c8:6b:29:d6:2d:f1:
2a:ef:66:99:9c:de:ec:fb:7d:1f:81:dc:a3:28:55:
14:bd:2d:bb:77:0c:10:59:d6:53:49:b3:7d:16:43:
da:68:46:94:ed:88:76:b7:d8:2b:3d:ad:d3:87:4d:
98:bd:98:9c:4c:d9:93:28:f4:3d:b8:91:d2:73:60:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:78:A5:CC:01:42:A0:83:B7:A5:FF:43:04:84:32:83:13:0F:0A:3C
X509v3 Authority Key Identifier:
keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/u3ilzAFCoIO3pf9DBIQygxMPCjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.159.0/24
Signature Algorithm: sha256WithRSAEncryption
63:27:2d:bb:89:b2:5d:e2:f4:d1:79:93:fe:fa:8b:09:20:e5:
1f:b2:1f:a1:1d:f7:a3:5f:93:1e:41:20:77:f0:fb:a6:f5:d2:
fd:60:5e:e9:22:07:c7:87:37:3a:6f:6b:63:47:4e:9d:68:54:
49:90:13:f6:80:25:c6:d6:e4:73:c9:bd:a1:5e:4e:b4:45:d1:
fd:a5:12:55:fb:89:3e:56:d3:0a:e3:ab:82:d5:54:a4:d7:37:
bd:e2:7b:ea:be:eb:99:75:96:44:e0:2f:f0:b1:82:87:f3:04:
fc:60:4d:cd:8a:24:93:c0:8b:cc:1c:37:47:78:9d:e4:30:1f:
a4:67:1c:82:87:e8:e4:b4:0d:31:46:f4:c1:a3:be:8c:6d:2f:
5a:85:9a:55:b7:ea:ff:1d:92:d1:42:b1:d7:3a:03:df:e5:1a:
d9:78:10:6e:1a:ea:4b:8b:f1:c5:7d:80:f9:66:7d:7e:a6:87:
40:52:e4:55:37:ea:d8:cb:20:eb:91:1d:cf:2e:92:88:ca:ca:
5b:b7:81:b2:38:5d:81:fd:36:30:27:48:ea:62:65:ed:4e:8c:
f9:41:91:a9:d8:eb:4a:70:e5:75:f4:61:c6:42:cc:ca:f5:79:
80:3c:b7:ab:bd:72:e2:4a:51:1f:df:e8:e0:5d:e4:ca:10:95:
99:eb:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:28 2025 by rpki-client