Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/M_7ErW-W9zjR23Ae-sdN6m7rJWM.roa
File: M_7ErW-W9zjR23Ae-sdN6m7rJWM.roa (raw, json)
Hash identifier: BSE9giHHl5Xy7GZzJ7fBfc1JjvcTpxoe6fm2Kb48EIU=
Subject key identifier: 33:FE:C4:AD:6F:96:F7:38:D1:DB:70:1E:FA:C7:4D:EA:6E:EB:25:63
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0183D7EE3704196D714E3AC310BEC30F07A9
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/M_7ErW-W9zjR23Ae-sdN6m7rJWM.roa
Signing time: Fri 14 Oct 2022 19:17:36 +0000
ROA not before: Fri 14 Oct 2022 19:17:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 88.218.18.0/24 maxlen: 24
193.228.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d7:ee:37:04:19:6d:71:4e:3a:c3:10:be:c3:0f:07:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Oct 14 19:17:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33fec4ad6f96f738d1db701efac74dea6eeb2563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:69:4f:84:c5:f9:9b:72:cb:64:96:c7:7f:
0b:71:b3:86:64:04:71:15:30:72:f5:38:07:5b:37:
78:00:36:71:14:44:c7:b7:33:7f:83:fc:db:74:bb:
89:46:80:ac:a6:cb:b3:0c:3e:33:f0:b1:92:a2:81:
84:c5:c1:a2:5e:dd:b8:71:fd:c8:cf:d0:fd:8a:bb:
2b:da:00:ef:f7:7d:44:80:37:7e:d8:ff:93:07:df:
14:06:23:f8:99:b3:8c:c5:9f:ca:ed:4b:5e:16:63:
f0:64:4c:dd:67:65:43:34:88:cf:a0:c5:f1:27:60:
07:88:19:97:00:4a:80:00:23:07:df:03:3c:62:8a:
47:ff:7e:c8:dd:04:a9:99:21:b0:60:51:e9:0f:9b:
62:99:00:73:88:fe:9a:12:66:ff:b9:5e:ff:04:4f:
fd:1a:18:9f:ea:de:f7:55:c5:18:c1:e2:5e:d1:e2:
b2:98:d9:4c:12:5f:f2:e7:bc:83:e4:e6:a0:0b:af:
90:66:6b:52:a9:13:80:b0:8e:1c:99:d0:2f:4c:f7:
60:83:54:ce:05:82:67:e3:70:bd:75:0f:49:ac:72:
96:22:a5:23:ed:59:41:35:d7:3f:97:3a:1b:9d:ce:
3c:da:79:15:3a:49:f8:b8:33:fd:74:6a:0a:d7:71:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:C4:AD:6F:96:F7:38:D1:DB:70:1E:FA:C7:4D:EA:6E:EB:25:63
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/M_7ErW-W9zjR23Ae-sdN6m7rJWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/24
193.228.90.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ef:32:84:35:69:43:dc:d9:9e:3e:01:2b:cf:56:ec:37:0d:
1a:15:62:17:48:a1:21:c3:7a:26:04:cd:e3:3d:91:37:60:b0:
0f:cc:d3:4c:19:cc:25:15:fa:11:a9:e0:5a:7f:1b:c8:ec:2a:
8e:29:07:bd:86:49:44:53:e5:b9:62:82:ad:6d:5a:26:02:c3:
53:77:57:74:b0:94:16:90:f6:e9:8d:8b:1f:7f:f3:b9:16:ed:
5d:9e:4b:18:68:bc:32:fe:05:b2:5d:0b:0b:67:15:03:37:d0:
05:aa:89:a2:95:12:0c:89:a5:2d:fe:ce:a0:c5:85:c4:44:2f:
83:f9:e9:27:b5:aa:91:49:68:fb:b5:22:65:37:f7:19:48:23:
3e:d5:ca:7a:9e:73:b4:f3:6d:e6:70:d9:5d:de:0b:2b:02:e4:
74:c6:33:66:5a:4d:c2:c7:23:a3:0d:d1:77:3b:93:44:8c:f9:
ed:8e:8b:e2:c8:75:75:4d:8d:76:ae:6b:76:50:ae:1c:83:a9:
71:6f:8b:bb:20:79:4d:ca:c8:7d:b2:50:e7:1d:52:54:77:0f:
7c:18:b8:e9:9b:e6:8c:f3:50:50:af:45:15:40:dd:85:7b:f3:
6d:c9:63:6d:b0:64:2a:35:d7:c5:ef:fb:fb:a3:a1:61:b6:35:
a3:2b:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-fra.rpki-client.org