Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/w2LOWnvuCAEPmDwJb0P_sav8RtI.roa
File: w2LOWnvuCAEPmDwJb0P_sav8RtI.roa (raw, json)
Hash identifier: SK4NDrkp3zF+bxw1IqXaEJczcn923V2gMbWy2SqXKcE=
Subject key identifier: C3:62:CE:5A:7B:EE:08:01:0F:98:3C:09:6F:43:FF:B1:AB:FC:46:D2
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 031829EF
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/w2LOWnvuCAEPmDwJb0P_sav8RtI.roa
Signing time: Sat 01 Jan 2022 12:04:17 +0000
ROA not before: Sat 01 Jan 2022 12:04:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35011
IP address blocks: 88.80.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51915247 (0x31829ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 12:04:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c362ce5a7bee08010f983c096f43ffb1abfc46d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:e5:64:2a:72:10:70:77:11:56:8c:94:54:
c6:54:e2:3c:34:ff:6a:e7:9f:53:ba:03:1a:5c:fd:
3c:12:4d:e0:96:1d:c9:13:c8:91:d6:40:80:9b:0e:
0c:73:69:ec:66:61:b2:b8:07:b3:36:92:5d:95:0b:
3a:91:ec:a1:a4:7d:86:11:29:5e:ac:cd:28:a2:ba:
e2:fe:27:67:a1:27:b6:88:7a:8d:60:91:7e:cf:e5:
ab:6c:b9:69:ff:df:73:2f:24:9b:c0:04:b7:f0:cb:
7d:c3:c7:ac:ae:05:0c:32:60:88:1b:25:70:c5:1e:
46:d6:c6:96:65:c2:01:48:28:7f:a0:80:62:bc:6a:
be:e0:74:d3:57:de:a3:d7:60:9e:b4:42:bb:7d:30:
19:30:21:4a:0e:f1:fa:81:5d:cb:b6:e2:97:cc:0c:
67:c2:29:c1:0a:99:de:07:27:3b:e0:5b:3d:67:f8:
3f:27:fd:ab:ac:06:4d:e8:9c:6f:1c:d2:5b:9b:17:
0b:14:85:20:31:40:56:0e:b3:65:65:c6:e7:39:dc:
db:da:44:7b:1f:cf:58:85:c7:55:65:63:a1:a8:cd:
35:2e:1c:88:e6:33:e3:09:02:3f:75:a6:9a:4b:e8:
a5:d4:48:f1:f0:01:22:84:c3:14:32:e4:67:13:55:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:62:CE:5A:7B:EE:08:01:0F:98:3C:09:6F:43:FF:B1:AB:FC:46:D2
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/w2LOWnvuCAEPmDwJb0P_sav8RtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.129.0/24
Signature Algorithm: sha256WithRSAEncryption
08:86:41:a2:66:44:d7:0a:82:61:24:e9:2f:09:40:e4:7f:45:
c0:40:00:fc:49:2a:b1:eb:44:43:27:0e:1e:66:32:42:f9:0e:
81:21:11:29:90:2f:43:b5:63:a0:f2:75:0f:ba:7f:9d:22:83:
12:30:a7:92:50:c2:12:f8:77:55:58:25:d4:a9:a3:6e:cc:44:
a6:88:88:b3:15:cc:67:05:ce:49:ec:fb:6b:2b:25:a7:0c:3b:
2c:f9:cd:ea:77:8c:a7:35:78:ef:c6:33:a2:34:9a:0e:90:ef:
5b:ea:ba:63:13:f5:8a:e2:fb:e4:e0:46:eb:ac:52:c8:23:8b:
91:4c:18:51:85:61:ec:fb:2e:26:86:a9:f1:55:40:9e:fa:81:
50:c4:d0:49:ac:57:b0:52:25:7a:eb:10:55:1a:b3:0c:78:78:
17:fa:3b:99:74:c1:af:ac:28:71:a3:ec:e3:38:02:e9:f7:26:
dd:cc:33:36:1a:12:8e:66:ca:73:7b:a4:49:17:8d:da:78:fa:
a6:04:23:aa:a8:32:f7:dd:2b:47:7f:8f:9b:65:89:96:9e:d9:
74:27:17:87:9a:a1:de:d9:fc:50:78:19:85:49:1c:9e:27:b1:
1e:ea:85:76:65:0b:a6:38:af:ee:82:fd:99:a8:66:20:f9:8b:
a6:c5:90:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org