Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/oOon6R1KPEete7Fd7w-y82U-S40.roa
File: oOon6R1KPEete7Fd7w-y82U-S40.roa (raw, json)
Hash identifier: ibEdBTV/7vgKXXxQpNgvMI3XUHhAXK2smVE6apS3UoY=
Subject key identifier: A0:EA:27:E9:1D:4A:3C:47:AD:7B:B1:5D:EF:0F:B2:F3:65:3E:4B:8D
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0185173D557B7A673991A96C16360DAC2500
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/oOon6R1KPEete7Fd7w-y82U-S40.roa
Signing time: Thu 15 Dec 2022 19:22:53 +0000
ROA not before: Thu 15 Dec 2022 19:22:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135752
IP address blocks: 88.218.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:17:3d:55:7b:7a:67:39:91:a9:6c:16:36:0d:ac:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Dec 15 19:22:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0ea27e91d4a3c47ad7bb15def0fb2f3653e4b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:ed:f2:28:ff:18:c3:31:b5:64:06:86:0c:
63:2b:36:06:94:18:e3:a1:76:67:0a:bd:fa:48:a9:
75:e4:aa:20:3a:08:00:d8:a6:06:33:1e:89:0f:44:
1a:37:26:f6:76:c1:e7:f6:6d:8b:77:d5:b6:8a:4e:
08:a0:12:0e:67:6b:fd:06:ea:4d:d8:fa:f0:14:26:
06:5b:33:f7:26:ff:4d:23:80:18:fa:df:1a:11:61:
3f:7e:0d:78:7e:86:5d:88:19:e7:44:8b:26:cc:26:
fc:97:e8:dc:e8:9f:93:15:2a:9a:02:f2:c3:12:39:
48:6c:d8:2a:91:6a:79:d7:4e:47:0f:e1:cf:4a:06:
0e:1c:5f:f1:e1:e4:e7:4d:ca:57:dd:0a:2a:15:3b:
8f:e2:48:d6:eb:c3:98:5f:4c:5f:63:e4:6f:71:85:
6c:8d:ed:ca:8b:06:b9:44:2a:cc:ef:1d:75:44:06:
54:9b:9a:41:83:ab:1b:e8:11:b8:05:26:29:8f:17:
05:3d:ca:d7:f8:3f:a6:ce:eb:9b:6e:28:d2:69:af:
ff:88:5d:49:f0:ec:6b:5b:c3:25:10:0d:99:2a:15:
66:7a:22:70:87:92:57:57:00:1d:84:17:97:5d:9f:
43:7a:54:7b:c2:59:ba:ce:db:36:e9:5d:49:d1:7d:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EA:27:E9:1D:4A:3C:47:AD:7B:B1:5D:EF:0F:B2:F3:65:3E:4B:8D
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/oOon6R1KPEete7Fd7w-y82U-S40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c3:17:ae:6a:50:5c:81:1d:3a:57:7f:b9:be:92:07:c1:5e:
51:59:14:92:68:0b:b8:3b:80:f0:b0:1f:32:d5:1a:2c:b7:d0:
ce:81:f2:b2:7e:d5:29:53:55:5b:9a:79:53:b9:a5:5b:d7:50:
72:cb:2c:8f:8c:96:6b:10:63:f2:b7:9a:13:95:f6:da:4e:bf:
0d:28:08:00:24:26:58:d8:c5:7f:bf:27:4d:1c:71:95:c2:5e:
b1:70:c0:fb:13:5a:ee:98:c2:b7:74:6a:73:3f:fb:82:66:42:
34:2d:bd:82:a9:d1:55:c4:55:1d:8f:c6:9d:84:ec:a3:10:f1:
cf:78:d9:c6:f8:89:27:26:b6:08:24:d0:cf:f7:0d:12:07:08:
e4:32:68:07:9d:c8:b1:85:f6:8c:53:40:e7:55:f2:d8:83:b4:
a7:33:03:29:36:4f:cc:77:a5:c3:62:15:4e:5d:1f:40:d7:be:
86:6d:b9:cc:a5:a7:a0:4f:11:fc:b7:63:da:d4:bc:c4:5b:16:
4a:c8:49:2f:29:df:15:78:3d:d5:52:25:af:db:61:76:d0:be:
7c:a9:ab:ed:56:b3:d2:99:59:e3:2d:bc:5e:0f:f6:21:bd:7f:
6b:30:b2:a0:af:18:69:4d:4f:89:20:99:4e:dd:f6:44:48:85:
18:26:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-fra.rpki-client.org