Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/88gYh3vVDeudkQMBKsRprmji3wg.roa
File: 88gYh3vVDeudkQMBKsRprmji3wg.roa (raw, json)
Hash identifier: E4tVZkSNciXUYZEJFLY/V46k0bDWH+UosheKS8bbfIQ=
Subject key identifier: F3:C8:18:87:7B:D5:0D:EB:9D:91:03:01:2A:C4:69:AE:68:E2:DF:08
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0FB84D
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/88gYh3vVDeudkQMBKsRprmji3wg.roa
Signing time: Mon 02 May 2022 08:37:42 +0000
ROA not before: Mon 02 May 2022 08:37:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 157.84.32.0/23 maxlen: 23
157.84.40.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030221 (0xfb84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: May 2 08:37:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3c818877bd50deb9d9103012ac469ae68e2df08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:59:b4:40:52:41:23:09:0e:62:08:ab:be:
96:90:0a:b1:b6:e1:95:11:8c:0f:06:32:e0:82:82:
73:90:55:ff:67:05:ba:e2:8c:cf:70:f0:66:f3:bb:
7d:ae:a1:ef:07:c1:26:a7:4c:1a:97:31:2a:30:50:
b7:82:57:53:80:2b:53:7f:be:b6:9d:77:10:28:b7:
7e:b5:4d:cd:1f:53:17:82:00:6f:8c:3b:53:ff:94:
9c:d4:a0:47:ab:ee:23:ee:1c:64:e6:fa:45:28:22:
6b:3f:06:8f:9d:af:e0:cf:0e:af:bd:51:18:49:44:
93:4c:7b:53:32:dd:c3:26:f7:e4:7d:05:72:4b:a6:
6c:bc:f6:ed:70:5b:c6:73:89:43:d3:e9:c8:45:2a:
13:10:c8:b8:8c:e8:bb:75:bc:7b:09:6d:d7:33:be:
ea:cd:aa:92:99:48:c4:a3:7d:d4:f9:ac:cc:94:17:
a0:3f:b3:1e:6d:6c:2d:0f:dd:3e:9f:8a:26:57:7f:
a3:94:5f:a5:ee:68:77:68:66:21:8d:14:3e:80:bd:
66:a8:e7:ba:2f:d0:0c:7f:60:ac:ea:bb:c1:e3:75:
25:09:af:58:5d:b2:2d:99:92:c5:74:e9:04:6a:1f:
56:ed:dd:1e:b2:86:7d:e5:ee:49:49:15:cc:fe:0d:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C8:18:87:7B:D5:0D:EB:9D:91:03:01:2A:C4:69:AE:68:E2:DF:08
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/88gYh3vVDeudkQMBKsRprmji3wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.84.32.0/23
157.84.40.0/23
Signature Algorithm: sha256WithRSAEncryption
98:1d:c0:23:ca:37:84:c0:cf:ec:68:a1:24:f0:21:bb:c8:58:
2e:8a:7d:83:fc:03:99:88:af:88:00:dc:b3:19:75:d3:cc:a3:
17:5b:b2:85:59:e1:a7:6c:28:22:fd:1f:c6:eb:e3:95:06:2e:
02:b3:e8:1e:51:65:1f:ec:66:a3:5f:02:b5:b9:96:bf:ba:32:
85:fa:f3:a0:c6:07:37:15:af:65:a8:99:22:8d:88:39:a8:da:
27:e6:59:63:5e:d1:56:00:4d:c8:f7:5c:2e:52:6f:45:15:d3:
2f:72:52:ec:78:3e:c1:e2:6d:e2:27:a3:8f:54:bf:fb:0a:88:
e3:b6:5e:20:bc:c8:cf:ef:e4:14:5a:a0:dc:dc:ab:ee:b3:2d:
eb:30:09:e1:4f:1f:0f:ee:92:dc:a6:f1:bb:55:9b:e0:ad:10:
d2:b1:d2:f9:3a:c0:f7:28:ba:ec:9b:90:cc:4e:55:03:c3:35:
6e:45:f1:cc:ab:ce:d6:af:d4:5b:92:e9:b4:4d:2b:31:cc:95:
14:aa:26:2e:97:44:88:98:e6:dc:c5:5b:92:80:a9:a3:ef:0e:
41:4e:7d:b5:99:40:50:3b:33:13:5e:6c:35:ba:13:a7:bf:84:
be:be:07:20:54:c8:3e:ab:c9:0a:29:e8:a7:4c:06:98:e3:b0:
ee:1e:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:14 2024 by rpki-client on console-fra.rpki-client.org