Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/tE9Hywq3925cma2CLjimLC2O7uI.roa
File: tE9Hywq3925cma2CLjimLC2O7uI.roa (raw, json)
Hash identifier: X/rT+uZ29dynegXAvbaqNs6p4cN28XV9oBEExjjOJfI=
Subject key identifier: B4:4F:47:CB:0A:B7:F7:6E:5C:99:AD:82:2E:38:A6:2C:2D:8E:EE:E2
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 05ED04EA
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/tE9Hywq3925cma2CLjimLC2O7uI.roa
Signing time: Sat 01 Jan 2022 11:05:18 +0000
ROA not before: Sat 01 Jan 2022 11:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 88.218.16.0/24 maxlen: 24
88.218.18.0/24 maxlen: 24
193.228.168.0/23 maxlen: 24
193.228.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99419370 (0x5ed04ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 1 11:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b44f47cb0ab7f76e5c99ad822e38a62c2d8eeee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:6e:94:82:96:a5:e4:c1:95:f2:9a:7b:65:
c6:7c:8a:41:cc:ab:28:7d:44:7e:9d:ae:39:1a:22:
55:20:4b:58:aa:b9:a5:d7:ef:0a:9b:53:76:bc:c9:
6c:08:6f:b6:75:d7:7f:c3:fc:ef:af:03:7b:86:71:
91:76:44:e6:27:14:25:f3:04:d2:93:6e:d7:a8:99:
f3:15:73:7c:7b:9f:29:36:8c:65:ff:9b:91:fe:64:
70:b4:f0:57:e0:c0:9b:13:22:e6:f5:4f:24:d3:69:
9b:59:46:c2:a2:12:a3:28:3b:40:7f:e2:de:5c:1a:
a3:f6:32:9d:dc:58:c3:93:b0:6e:3f:34:98:af:26:
e5:40:3b:89:5a:97:d5:14:37:70:7f:d7:9a:2f:76:
80:94:68:dd:31:2b:c9:ee:8d:a5:d3:74:cb:3e:d5:
22:cd:b7:76:b6:7a:d8:2c:69:3f:95:04:c7:65:1e:
53:5f:22:61:3d:8d:74:29:7b:ef:92:83:a6:2f:39:
32:4e:7f:eb:a6:4a:fd:d8:a4:a5:67:fe:88:98:fb:
c4:00:70:2a:ed:19:18:06:e2:7f:06:aa:f2:bd:95:
c5:e2:92:d8:53:f9:36:18:4e:e6:92:0e:70:37:83:
f8:67:d6:58:31:68:ed:6f:c4:af:c5:db:1f:c8:e2:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4F:47:CB:0A:B7:F7:6E:5C:99:AD:82:2E:38:A6:2C:2D:8E:EE:E2
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/tE9Hywq3925cma2CLjimLC2O7uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.16.0/24
88.218.18.0/24
193.228.90.0/24
193.228.168.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:f4:e4:59:e2:12:b1:63:e3:e7:db:8d:32:07:89:b8:82:19:
f4:aa:1d:b2:18:78:c0:b4:30:57:f8:20:4f:45:19:2d:c8:79:
52:28:1b:f1:15:ca:fb:e2:68:d3:d0:5a:a1:a8:b1:82:8f:e0:
0f:eb:95:7d:3a:82:40:b9:8f:cd:44:13:95:6d:c3:59:79:0d:
8d:9c:86:32:71:7d:d1:62:45:30:19:00:ae:2d:40:cf:65:3d:
0d:65:36:78:80:26:4f:a8:8f:1a:08:5b:b5:9f:44:d8:52:66:
b3:f2:65:9e:0c:c5:19:77:8f:51:da:45:bd:ca:66:c5:a8:f0:
fe:fc:b0:8e:f1:a0:6b:3c:80:31:f2:ef:75:9c:28:60:45:ae:
b6:c0:e1:19:15:83:31:03:f5:19:8b:2d:1c:f0:12:25:14:64:
47:f9:38:3c:47:6e:08:5b:c6:25:60:7e:8a:19:b2:74:26:95:
84:42:c0:90:fd:26:39:e2:7f:ed:03:d4:be:8e:ec:29:08:a0:
99:51:d1:d3:51:f1:de:69:dc:7a:92:67:54:24:c5:0e:d0:b2:
a5:c0:1b:ae:2f:64:fb:b6:cb:32:48:59:b6:fd:b8:08:58:82:
79:1c:e2:51:e6:f1:22:49:06:9f:34:e6:40:c0:b5:24:1c:4e:
3b:b6:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org