Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/4qWpwYJlADimW1pSgSC7ceByBH4.roa
File: 4qWpwYJlADimW1pSgSC7ceByBH4.roa (raw, json)
Hash identifier: IToj42XghUVcm8bjiZsXArRG+XkdAB9/NXQ56VqI0d4=
Subject key identifier: E2:A5:A9:C1:82:65:00:38:A6:5B:5A:52:81:20:BB:71:E0:72:04:7E
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 07843699
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/4qWpwYJlADimW1pSgSC7ceByBH4.roa
Signing time: Thu 23 Jun 2022 05:51:32 +0000
ROA not before: Thu 23 Jun 2022 05:51:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 88.218.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126105241 (0x7843699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jun 23 05:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2a5a9c182650038a65b5a528120bb71e072047e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:88:ba:e1:66:43:44:c1:1d:68:d2:79:6b:
3c:5f:93:ef:38:2d:d5:4a:fd:25:b0:47:2c:3e:e6:
18:38:ad:e8:0f:60:10:1a:0e:b1:69:68:9e:ca:24:
f5:0b:9d:f0:96:85:7c:ad:87:ed:6b:d0:c0:94:6c:
ba:95:76:2b:c5:23:9b:cd:0a:da:53:56:41:f8:00:
ca:ce:e9:f7:de:62:65:11:5e:b0:6c:12:41:5a:05:
ea:c2:65:d9:61:28:3e:f5:cd:5a:89:01:8a:7f:57:
a7:74:aa:ef:8f:14:9f:fd:ac:18:07:ee:ae:c4:f0:
d9:14:cc:a2:c9:8a:ec:cb:b9:ec:87:86:99:df:f6:
0e:56:af:68:55:73:25:4c:17:6d:9f:a6:0f:d6:03:
c6:f6:d6:8d:cd:a3:97:e0:f8:eb:11:26:b3:d2:32:
e9:c5:60:05:46:4f:56:05:55:f5:7a:10:c1:32:b6:
5f:0d:cd:82:a5:9a:3d:50:e1:43:24:35:61:e6:c9:
76:e9:2b:16:ab:38:f0:16:c4:dd:fb:0b:db:93:3e:
6f:96:19:8b:5b:9a:09:7c:b0:10:d0:fc:cd:4f:b9:
ed:f4:cf:3d:99:ee:42:33:ac:22:db:d3:4e:cb:d4:
7b:55:a2:a2:88:5d:cd:d5:3b:12:b6:da:d8:b0:32:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:A9:C1:82:65:00:38:A6:5B:5A:52:81:20:BB:71:E0:72:04:7E
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/4qWpwYJlADimW1pSgSC7ceByBH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e3:7d:9b:7d:89:68:7e:64:46:5e:05:8e:f4:c7:12:2e:42:
4d:24:64:0d:b4:e5:af:b0:a3:5d:32:f7:cc:ff:4f:e0:2a:58:
31:82:5c:2d:47:f8:8f:92:24:e5:79:bb:23:1d:57:21:ce:a8:
23:a8:ab:23:a4:7f:52:30:cb:d1:00:6d:b5:81:3d:7a:69:63:
2b:91:6b:db:25:8b:45:5a:e3:1d:57:7f:e8:5f:25:d5:28:42:
4e:9b:0c:58:c1:93:db:5e:6b:4e:84:7d:07:9b:f4:88:92:9d:
b9:93:26:95:a5:5e:09:05:2e:17:72:33:b6:54:8b:dd:5e:c3:
f9:36:db:e9:e6:51:2d:74:c2:cf:ec:16:c0:52:95:36:b1:b0:
90:67:9e:35:96:c2:6d:19:94:3c:0c:a2:dc:43:b7:96:da:c6:
f4:48:d0:60:12:40:f0:d0:ca:4b:99:89:5f:69:42:2c:ff:bb:
7f:79:00:7b:51:7c:4a:dc:93:97:af:a6:94:32:75:83:51:88:
3b:04:43:3e:34:ab:98:8b:fc:88:19:6f:54:58:a8:b5:23:35:
2b:b8:1c:43:ab:0b:11:9a:78:98:09:27:dd:7d:0e:9d:6f:d6:
db:08:3f:45:4e:6b:7d:df:3e:0b:87:66:09:38:ae:f5:aa:18:
b5:1e:c4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org