Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/kn1B7UV9Fq9hKFyi7GM2o8wM9F8.roa
File: kn1B7UV9Fq9hKFyi7GM2o8wM9F8.roa (raw, json)
Hash identifier: Zaxei8PpzbxJIdMJSYkbkdRaryiYgmNOnOpYHBqlUpQ=
Subject key identifier: 92:7D:41:ED:45:7D:16:AF:61:28:5C:A2:EC:63:36:A3:CC:0C:F4:5F
Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial: 0182CA3D1080F4A10AEA12A6BD9F9E63C897
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/kn1B7UV9Fq9hKFyi7GM2o8wM9F8.roa
Signing time: Tue 23 Aug 2022 10:26:15 +0000
ROA not before: Tue 23 Aug 2022 10:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35448
IP address blocks: 88.213.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:3d:10:80:f4:a1:0a:ea:12:a6:bd:9f:9e:63:c8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
Validity
Not Before: Aug 23 10:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=927d41ed457d16af61285ca2ec6336a3cc0cf45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:86:ae:ee:87:ab:2e:45:2f:40:bc:89:43:
68:e2:64:13:ef:0c:13:78:fb:0b:d1:d2:2c:93:d0:
5e:8d:24:03:04:68:18:01:c4:f2:98:da:a5:e2:9f:
b6:bb:72:1e:14:10:38:c2:52:6b:a4:d6:8a:9b:2f:
c7:88:59:92:b4:47:87:33:12:e9:4a:67:24:66:01:
d7:7c:1d:37:f2:79:8b:60:86:6f:13:0f:3c:d6:3e:
99:68:26:86:95:0f:06:27:af:e0:42:85:86:ab:30:
c1:ec:21:ef:4c:0c:1f:bc:ef:67:b5:4e:ff:b8:28:
d1:fc:6c:48:05:47:06:df:d4:71:da:99:e9:72:01:
4c:fe:46:17:85:81:f4:6a:46:d8:c7:d0:19:1a:8b:
ac:88:60:ca:30:2a:d1:ed:51:5b:c4:cb:6b:6d:c4:
71:d4:d3:0e:ac:cf:b3:14:70:26:91:49:c5:6c:26:
ec:af:ed:75:f5:23:59:e9:e2:f0:5a:d1:c1:e8:b7:
e2:ba:4c:bb:b1:a8:cd:ff:7e:79:b1:5e:21:24:6f:
45:02:03:03:f2:a6:62:c0:fa:8b:07:ed:e5:80:53:
dd:33:1f:a2:91:f9:75:4d:35:2f:df:7d:6a:bf:cf:
2d:1b:e0:5e:3f:84:f5:a8:0d:b2:e4:8c:21:27:18:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7D:41:ED:45:7D:16:AF:61:28:5C:A2:EC:63:36:A3:CC:0C:F4:5F
X509v3 Authority Key Identifier:
keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/kn1B7UV9Fq9hKFyi7GM2o8wM9F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.213.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ec:52:73:2f:ea:37:36:e9:a3:59:82:5c:1e:43:9b:a6:3b:
c6:34:e4:6a:d4:0b:10:19:6c:80:21:21:c8:c0:ce:d2:d4:cd:
ae:b1:37:fc:f8:6c:1f:18:d5:aa:22:63:5e:b5:ab:33:cd:04:
ef:a8:93:68:c9:a0:e7:71:2b:9f:d8:d2:5a:ac:20:52:8e:71:
f9:5d:bd:7f:a6:60:a5:90:10:5d:4e:81:e4:8a:e4:ff:67:47:
cf:f6:3f:d2:55:c2:72:9b:d6:f3:5f:f3:7b:44:d0:c3:d4:5e:
56:49:a7:0e:ef:44:d7:0c:46:52:14:e2:bf:ef:bb:e8:16:b7:
d0:45:47:f8:2e:ce:f9:8d:8d:a8:23:a1:c0:67:6e:10:8e:98:
72:6b:55:25:7e:c0:39:35:5d:67:ee:cd:df:09:80:9f:01:ce:
5f:dd:ee:1b:da:02:e4:8d:27:52:f3:55:7e:d7:3e:2b:4c:0b:
84:a9:d3:45:0b:91:5c:1e:16:92:4d:9b:ff:7f:0d:45:21:e4:
9d:43:c6:2b:5d:36:9c:3a:77:5b:3e:19:a1:43:e8:62:c5:93:
b6:30:25:46:7c:6d:e4:1e:a7:d1:47:86:e2:d3:17:93:3b:e0:
cb:6b:2b:9f:0a:8c:59:2b:6f:91:72:0f:02:f1:7c:dc:a1:e4:
ed:51:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:30 2023 by rpki-client on console-ams.rpki-client.org