Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/Xhr71W70TYwvIjn-rrBE3SYMdTY.roa
File: Xhr71W70TYwvIjn-rrBE3SYMdTY.roa (raw, json)
Hash identifier: bi0lHUOY0M80/y549axqm27cZpxmzIZJVAHVhkgDxJI=
Subject key identifier: 5E:1A:FB:D5:6E:F4:4D:8C:2F:22:39:FE:AE:B0:44:DD:26:0C:75:36
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 0182FA8872E50FC4B51EE6C8CF4D176A3531
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/Xhr71W70TYwvIjn-rrBE3SYMdTY.roa
Signing time: Thu 01 Sep 2022 19:30:22 +0000
ROA not before: Thu 01 Sep 2022 19:30:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209275
IP address blocks: 88.214.40.0/24 maxlen: 24
88.214.42.0/24 maxlen: 24
185.225.198.0/24 maxlen: 24
2a09:9d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fa:88:72:e5:0f:c4:b5:1e:e6:c8:cf:4d:17:6a:35:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Sep 1 19:30:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e1afbd56ef44d8c2f2239feaeb044dd260c7536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:2a:56:3a:55:f9:ca:ac:79:df:d1:b7:8a:
77:4d:e5:b6:18:6a:4d:ca:9f:f8:4f:0d:c0:69:80:
a8:13:4b:0b:a1:92:a1:bc:98:d5:d4:9e:54:e8:5e:
50:7e:49:87:f0:c3:a3:89:12:0f:ff:3e:54:51:8f:
7c:b9:02:3f:e1:06:9c:f5:13:cc:f6:cd:65:a9:ef:
77:b6:2b:50:1c:b2:ec:76:c8:c9:83:9c:d7:dc:25:
ca:ad:c6:44:14:b8:b7:fb:96:5f:35:3c:41:53:0a:
53:a7:5c:16:f2:0a:d6:96:e4:7d:0b:ca:48:51:9b:
d9:0c:6c:02:8e:77:74:b5:df:03:3a:7e:7e:7d:46:
be:39:6f:06:8e:67:09:28:7e:1e:c4:a3:3e:b0:36:
bc:03:1e:58:20:a4:63:4f:b4:03:7f:32:5a:39:c7:
89:e3:6d:88:09:25:7e:7b:fe:fb:5f:87:af:0f:08:
72:ee:36:43:45:53:e3:92:2f:89:b4:7d:ff:ed:72:
e5:73:0a:36:b1:a6:ee:88:c4:f9:9f:82:6d:d1:f2:
d1:5b:e2:1e:b8:f5:92:cf:35:2d:3a:26:5e:7a:0f:
21:a8:fc:e3:1d:97:2f:1f:c6:48:35:79:f7:37:fd:
e7:af:67:8f:84:0e:a4:50:8e:39:3a:4f:4a:fc:e9:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1A:FB:D5:6E:F4:4D:8C:2F:22:39:FE:AE:B0:44:DD:26:0C:75:36
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/Xhr71W70TYwvIjn-rrBE3SYMdTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.40.0/24
88.214.42.0/24
185.225.198.0/24
IPv6:
2a09:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
a1:da:47:6b:5f:1e:dd:c5:f1:a2:b2:6d:1c:ba:c7:11:7c:c5:
a8:d7:33:85:ae:61:b3:f8:c0:36:4b:d4:cc:19:c5:2d:95:2a:
70:06:5f:d7:fd:ef:d4:ad:25:d6:b5:c5:47:41:fb:2e:58:94:
f2:73:8d:a7:f6:41:9b:7c:15:fa:6b:1a:f0:b9:4d:59:d6:7a:
d5:41:3a:68:f6:c6:63:c5:4b:66:79:83:bc:eb:3f:11:dd:91:
25:f7:b0:38:8f:a7:c2:32:54:27:fe:ff:b7:61:57:6f:f0:fb:
a2:d3:c7:4a:19:f5:90:70:77:ea:de:5b:20:1c:ee:27:3a:81:
e5:c2:52:74:fb:43:28:f4:65:d0:18:4b:7d:47:55:1b:bf:00:
42:b8:ed:56:06:68:63:d0:24:07:9b:47:7e:19:20:4e:bf:21:
d4:ba:64:dc:1a:fd:19:58:e2:42:c1:f3:fe:6d:16:f9:a7:52:
ad:94:2c:43:b9:8c:1f:8c:65:ff:a3:64:16:f3:1c:6e:66:7b:
26:61:fd:71:88:6b:d9:80:66:56:f4:5a:b5:27:37:cb:6b:af:
b1:5e:d5:6b:d9:ef:f1:3f:3c:70:4d:4e:55:87:5d:fd:d4:dc:
f1:2e:82:2f:14:bf:1e:be:c4:34:a2:9e:05:00:ba:ae:9a:93:
87:0a:b2:4c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYL6iHLlD8S1HubIz00XajUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDNkYWM4ZWE1NTY5MzQzOWRkMWI4YjQ4MTJiYTcxODM0
ZjEwMzEwHhcNMjIwOTAxMTkzMDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTFhZmJkNTZlZjQ0ZDhjMmYyMjM5ZmVhZWIwNDRkZDI2MGM3NTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK4qVjpV+cqsed/Rt4p3TeW2GGpN
yp/4Tw3AaYCoE0sLoZKhvJjV1J5U6F5QfkmH8MOjiRIP/z5UUY98uQI/4Qac9RPM
9s1lqe93titQHLLsdsjJg5zX3CXKrcZEFLi3+5ZfNTxBUwpTp1wW8grWluR9C8pI
UZvZDGwCjnd0td8DOn5+fUa+OW8GjmcJKH4exKM+sDa8Ax5YIKRjT7QDfzJaOceJ
422ICSV+e/77X4evDwhy7jZDRVPjki+JtH3/7XLlcwo2sabuiMT5n4Jt0fLRW+Ie
uPWSzzUtOiZeeg8hqPzjHZcvH8ZINXn3N/3nr2ePhA6kUI45Ok9K/OkWmQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFF4a+9Vu9E2MLyI5/q6wRN0mDHU2MB8GA1UdIwQY
MBaAFC5D2sjqVWk0Od0bi0gSunGDTxAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84NmJhMzYtNzhiOC00NGJiLTlmYjQt
MjZjN2M5NjNhNzY5LzEvWGhyNzFXNzBUWXd2SWpuLXJyQkUzU1lNZFRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84NmJhMzYtNzhiOC00NGJiLTlmYjQtMjZjN2M5NjNhNzY5
LzEvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAWNYoAwQA
WNYqAwQAueHGMA0EAgACMAcDBQMqCZ0AMA0GCSqGSIb3DQEBCwUAA4IBAQCh2kdr
Xx7dxfGism0cuscRfMWo1zOFrmGz+MA2S9TMGcUtlSpwBl/X/e/UrSXWtcVHQfsu
WJTyc42n9kGbfBX6axrwuU1Z1nrVQTpo9sZjxUtmeYO86z8R3ZEl97A4j6fCMlQn
/v+3YVdv8Pui08dKGfWQcHfq3lsgHO4nOoHlwlJ0+0Mo9GXQGEt9R1UbvwBCuO1W
Bmhj0CQHm0d+GSBOvyHUumTcGv0ZWOJCwfP+bRb5p1KtlCxDuYwfjGX/o2QW8xxu
ZnsmYf1xiGvZgGZW9Fq1JzfLa6+xXtVr2e/xPzxwTU5Vh1391NzxLoIvFL8evsQ0
op4FALqumpOHCrJM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org