Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/S1oqwzRviMnZDi_M6QvOTSj1dcs.roa
File: S1oqwzRviMnZDi_M6QvOTSj1dcs.roa (raw, json)
Hash identifier: bpFFLlrhZcNkqdrvkfP6z3rOBCLJC7stKe6iXKBRAyE=
Subject key identifier: 4B:5A:2A:C3:34:6F:88:C9:D9:0E:2F:CC:E9:0B:CE:4D:28:F5:75:CB
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 03416F7A
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/S1oqwzRviMnZDi_M6QvOTSj1dcs.roa
Signing time: Sat 01 Jan 2022 08:01:18 +0000
ROA not before: Sat 01 Jan 2022 08:01:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51559
IP address blocks: 88.214.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54620026 (0x3416f7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Jan 1 08:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b5a2ac3346f88c9d90e2fcce90bce4d28f575cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:5b:a4:b0:cc:b9:6c:06:33:7d:24:d2:a7:
f7:9c:c5:66:f6:0b:b4:8a:17:0e:57:82:ce:89:96:
a0:fc:a6:cf:b0:cb:5f:08:46:61:ba:4d:f3:33:20:
30:f7:b7:ce:94:96:c8:38:58:53:df:55:ba:00:2d:
26:4b:0c:05:3b:c1:06:1f:e0:76:5c:b4:2d:99:fc:
b2:17:77:e6:72:76:7d:21:ac:34:6f:a7:e7:f5:a6:
e0:d3:10:44:43:e2:0d:f8:67:e5:d8:de:b2:96:ac:
d9:d5:24:24:f4:8e:9e:ee:6a:00:25:f8:52:07:1a:
7c:78:cb:2e:68:5f:76:19:6f:ae:a8:c7:8d:82:7c:
a1:d3:69:a4:c7:93:ba:1e:77:c9:1d:04:18:6b:e9:
11:a3:ce:98:6e:b1:d0:12:41:65:a8:60:47:bb:a6:
df:0f:02:6e:a8:1e:34:ca:b7:69:eb:d2:1a:91:28:
3e:5f:31:70:b9:87:ae:f5:8b:86:85:d1:6a:76:1f:
32:36:c9:2a:d9:d8:6e:d8:cb:d1:8b:5e:3b:6c:6b:
1c:8c:cf:d5:24:3f:1a:72:24:f5:b4:d2:01:86:bd:
6d:43:49:bd:3e:48:2b:a9:7b:58:ef:2b:cb:38:c8:
46:37:88:8a:fc:93:14:44:36:da:07:68:cc:15:a7:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5A:2A:C3:34:6F:88:C9:D9:0E:2F:CC:E9:0B:CE:4D:28:F5:75:CB
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/S1oqwzRviMnZDi_M6QvOTSj1dcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.43.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b0:0c:86:e2:f9:fb:d6:22:69:e3:18:8c:c2:c8:41:79:16:
c6:a2:8b:ac:51:8a:cb:c7:9c:8a:db:18:0e:73:76:3b:55:6f:
c5:5a:0b:15:e9:af:35:3d:de:ce:db:b9:3c:05:05:49:7d:56:
c5:b7:2c:11:4d:5f:d5:ae:2f:41:21:a5:18:df:6f:9e:93:f3:
c8:77:89:f0:78:92:61:bc:b2:ea:4b:9a:56:94:dd:7d:ee:f0:
24:52:7f:5e:32:bf:1a:b0:02:43:a5:be:87:1f:2e:d6:7d:ea:
ff:7a:2f:ef:10:b5:82:2d:44:bb:89:71:b1:be:df:bf:fa:1b:
51:e5:61:f0:0d:4b:d0:5f:bc:ac:46:12:a6:79:c6:e0:63:23:
92:d3:70:f9:ba:2d:28:81:60:b8:3a:86:e7:b1:ed:cc:54:69:
e8:98:c6:4e:fb:5d:50:1b:cd:8b:64:f1:19:44:83:51:59:81:
41:e4:e8:d6:d1:df:18:b7:05:b4:e3:ca:64:6b:a9:59:33:63:
b0:64:53:ee:18:5f:75:89:29:d2:20:61:0c:9b:97:54:f0:93:
ff:7d:49:aa:f9:2f:dd:35:58:62:fe:f6:1f:c9:94:5e:92:da:
3a:cd:3b:24:24:41:bf:e3:66:51:7a:3d:02:e5:24:97:c9:ac:
37:f2:d8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:45 2024 by rpki-client on console-fra.rpki-client.org