Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/UFBp8GlunWmRgrPY2lNrlknNPsw.roa
File: UFBp8GlunWmRgrPY2lNrlknNPsw.roa (raw, json)
Hash identifier: aTw4nksWQtZNmkAc+jNAUI5uDoBKNqmeq+InczePlAA=
Subject key identifier: 50:50:69:F0:69:6E:9D:69:91:82:B3:D8:DA:53:6B:96:49:CD:3E:CC
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0184E83CA9E13CD6E7E120E2BC722686F012
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/UFBp8GlunWmRgrPY2lNrlknNPsw.roa
Signing time: Tue 06 Dec 2022 16:20:00 +0000
ROA not before: Tue 06 Dec 2022 16:20:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 88.218.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:3c:a9:e1:3c:d6:e7:e1:20:e2:bc:72:26:86:f0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Dec 6 16:20:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=505069f0696e9d699182b3d8da536b9649cd3ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:04:13:7a:20:76:27:eb:db:4c:c0:89:ff:
c4:5c:06:c5:6d:e2:b8:48:a4:87:a5:c8:67:9d:ba:
31:ea:be:2c:c2:33:0a:42:5d:b3:62:1b:d9:b6:fa:
ab:42:ac:5b:a7:af:f8:fe:78:79:6f:56:3f:e0:a4:
5f:43:3f:da:46:d8:ad:ac:fb:6e:f0:24:6e:f6:59:
1a:67:60:04:db:ae:e0:3d:2b:2d:ef:55:95:76:7b:
f6:a3:b3:ee:74:01:36:b7:f7:56:e7:5b:77:f2:c3:
6f:3b:94:83:3c:db:64:2f:93:5e:7d:9e:d6:5b:af:
5a:58:87:79:37:62:83:90:ef:38:8b:25:61:fe:b5:
ce:6b:3e:75:6a:6b:f4:f8:d3:c1:85:dd:48:db:ab:
cc:75:0f:46:e3:79:85:7d:ec:93:6a:7f:e5:e8:c9:
79:ba:b0:b7:76:a3:9b:8c:59:fb:70:0e:4a:70:0a:
6c:21:68:0a:1c:87:7f:c6:f8:a2:9d:4c:e9:cc:24:
8e:a6:7f:95:bf:43:3b:b8:85:09:3c:41:92:80:ff:
6b:65:70:b5:02:8d:df:9a:0e:30:b6:0f:aa:14:31:
3b:a5:e4:e4:b9:7c:2e:9b:f3:6e:21:f5:9f:f0:64:
2f:cb:46:19:14:ee:3a:f1:2b:2c:38:50:cc:e5:97:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:69:F0:69:6E:9D:69:91:82:B3:D8:DA:53:6B:96:49:CD:3E:CC
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/UFBp8GlunWmRgrPY2lNrlknNPsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9c:30:84:dd:20:f9:b5:d4:51:92:92:f1:9f:3e:a1:0d:e4:
20:53:2d:bb:13:b8:51:b8:94:92:23:b7:b5:c6:3b:2d:c0:2e:
33:80:64:24:5f:23:ff:dd:74:0b:3d:a0:2d:f6:8c:74:93:70:
95:5e:49:aa:c1:c6:d3:ae:ab:f5:b3:da:5f:31:f2:7c:63:c4:
b4:83:e9:c9:17:d1:52:b4:72:69:13:02:75:bd:61:c6:3d:da:
ca:d4:48:ee:1c:3d:d7:ce:1f:6b:99:18:4e:a5:e3:a2:7c:a3:
98:32:55:7a:3e:c4:34:8b:1f:5b:dd:db:a0:9b:5a:18:02:a8:
da:10:22:ea:95:39:26:b3:e9:f6:0d:9e:ea:24:0a:35:27:2f:
48:af:35:47:80:38:cc:ca:6f:31:17:c6:0b:a9:36:3f:1e:22:
89:49:5f:67:90:db:57:1e:2a:bb:a6:db:18:58:4f:7a:40:6b:
02:8d:6b:63:9c:4c:19:76:10:a4:02:ac:25:3a:cf:a9:51:5f:
4f:1a:41:a5:d0:72:f4:48:95:3f:08:36:d3:c9:c2:ae:41:eb:
69:7a:85:89:e8:cd:53:90:53:9b:78:d2:a9:cd:8b:bd:6d:4a:
09:4f:cc:0a:0f:a4:3b:b0:03:a4:69:1d:e5:6f:43:9c:ce:79:
da:f6:68:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-fra.rpki-client.org