Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/EKsykJfdlsAKfObyD36Hjs56tgI.roa
File: EKsykJfdlsAKfObyD36Hjs56tgI.roa (raw, json)
Hash identifier: hRIrr7rGccTd7ZztkvLZ8cUwAM2U0bQEIkytAQuzlu4=
Subject key identifier: 10:AB:32:90:97:DD:96:C0:0A:7C:E6:F2:0F:7E:87:8E:CE:7A:B6:02
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 0188E05D61E8F5C18B23D4E993D0FCB5AC93
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/EKsykJfdlsAKfObyD36Hjs56tgI.roa
Signing time: Wed 21 Jun 2023 23:49:56 +0000
ROA not before: Wed 21 Jun 2023 23:49:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398395
IP address blocks: 88.218.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e0:5d:61:e8:f5:c1:8b:23:d4:e9:93:d0:fc:b5:ac:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Jun 21 23:49:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10ab329097dd96c00a7ce6f20f7e878ece7ab602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:0f:8e:f5:65:ab:7a:46:22:74:28:59:36:
8d:df:03:57:6d:55:ef:54:b5:e7:b6:89:0b:9a:78:
fb:70:2b:f3:76:1f:72:e9:27:59:41:16:96:ec:62:
16:bb:2d:82:59:6b:17:9d:41:02:ee:8d:08:3c:70:
94:f1:10:8a:f0:2c:25:5b:05:40:ab:3f:95:60:75:
9e:22:86:8b:43:89:7d:de:de:a7:83:6f:d1:3d:4a:
a6:7c:db:7f:39:1d:ae:19:83:5f:05:86:b5:98:8c:
e3:14:d2:50:e3:85:1b:10:8b:23:90:0d:8f:23:fb:
0e:6d:04:c8:de:f0:04:ee:9a:1e:ad:58:e8:7f:b7:
5f:44:22:5c:c1:06:7f:6e:6e:a7:24:22:33:73:e4:
5c:8b:09:2f:08:e6:40:88:d3:69:57:f7:bb:78:09:
61:74:61:1b:7a:ae:5a:1e:da:f5:95:42:b8:4b:06:
1c:d9:28:6e:ee:77:b2:10:23:34:a3:3d:13:33:76:
a7:22:7f:7d:2e:0e:c3:2b:f9:15:60:3d:43:bc:27:
4d:b5:39:bf:fa:75:15:e2:f0:8b:6c:15:05:eb:e1:
63:d3:a0:69:b7:b1:44:86:cb:b4:29:68:dc:90:2c:
fb:0c:99:f2:81:99:f5:72:40:62:20:2f:cc:9a:9b:
fe:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AB:32:90:97:DD:96:C0:0A:7C:E6:F2:0F:7E:87:8E:CE:7A:B6:02
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/EKsykJfdlsAKfObyD36Hjs56tgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.205.0/24
Signature Algorithm: sha256WithRSAEncryption
88:94:dd:eb:6b:ed:f3:58:37:1e:9d:1c:c4:21:17:e3:eb:fb:
2b:ef:49:17:d0:1c:10:cb:be:57:ae:80:6f:2d:97:8d:81:46:
31:37:4c:db:ee:b7:7d:d2:2f:a0:35:62:40:50:80:99:1a:41:
5e:2e:8e:26:74:27:48:0e:78:68:52:30:f8:44:b9:cc:40:80:
74:32:2a:4b:3b:ba:77:a4:3a:bd:a3:8c:48:b1:ba:ee:23:67:
64:05:00:d5:46:70:c4:52:dc:7f:ca:07:f7:22:e8:83:b7:07:
e8:3d:bb:9f:89:49:49:94:c8:74:4a:b4:57:54:0c:0e:3a:bd:
d0:23:45:80:eb:f1:4c:d6:60:26:a0:e5:84:6d:59:9f:fd:32:
e3:94:b9:ac:02:e9:0b:42:0a:ef:de:fa:61:db:91:c3:81:00:
4a:87:ba:2b:d9:c1:0f:b8:ee:c9:dc:05:db:3c:91:02:bf:73:
6e:94:93:d5:b9:c1:21:80:46:46:f7:43:a1:01:97:6f:45:af:
6a:cc:72:73:71:96:d1:17:60:c2:80:34:a2:c3:c4:07:fe:f3:
d1:0c:f8:40:d0:94:d8:37:82:24:6e:d1:eb:20:6f:47:6f:74:
24:70:f6:26:50:d3:92:ff:32:ed:ac:04:70:e8:5c:33:28:ed:
6b:26:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:53 2025 by rpki-client