Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/sAS88urmMPaFFofB8thdWi9wCHg.roa
File: sAS88urmMPaFFofB8thdWi9wCHg.roa (raw, json)
Hash identifier: AhdPjTyRexdCS5bkoKGN1JJt/IhDf4T9whGGooDG7bs=
Subject key identifier: B0:04:BC:F2:EA:E6:30:F6:85:16:87:C1:F2:D8:5D:5A:2F:70:08:78
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 059B97D6
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/sAS88urmMPaFFofB8thdWi9wCHg.roa
Signing time: Wed 16 Feb 2022 03:17:14 +0000
ROA not before: Wed 16 Feb 2022 03:17:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 188.214.232.0/23 maxlen: 24
188.214.234.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94083030 (0x59b97d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Feb 16 03:17:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b004bcf2eae630f6851687c1f2d85d5a2f700878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:19:76:a3:40:41:f6:07:c0:33:93:e5:a9:
b8:8b:27:df:db:6e:3b:c0:8d:f1:96:48:0e:c9:96:
41:a0:e8:13:d9:15:a5:a4:e1:88:e1:48:ca:e9:ce:
9b:83:96:d8:72:9a:11:2c:37:a6:5c:54:85:be:ea:
f6:d1:bc:05:f0:ff:24:66:cc:8e:c7:4c:70:38:55:
05:a2:ee:dd:67:a7:19:2e:87:d7:5e:8c:19:2e:c8:
0d:c6:1f:84:33:71:27:d2:df:b9:3c:9a:f6:ab:cb:
b8:9a:5f:7a:28:81:51:65:b2:98:95:bf:e3:99:2d:
11:b8:0e:31:e7:07:95:b2:fa:31:96:06:1f:87:86:
8a:14:da:a6:8f:30:96:1e:72:70:45:42:62:93:b6:
a5:0a:a5:d7:13:4d:a6:ce:0f:40:41:12:b7:49:82:
5a:b8:9b:57:76:1a:04:83:85:b7:da:8a:0c:41:07:
78:4b:6d:e8:f4:98:af:82:f8:14:58:f5:b2:a3:ca:
3c:c0:5c:df:bb:30:80:73:4d:80:cc:f3:0b:48:c9:
05:e8:83:4a:9c:f3:b7:8e:98:0b:b0:c9:66:3d:20:
16:87:c1:43:4a:8c:46:14:0d:f5:97:76:2a:ae:78:
89:c7:f7:b3:ca:56:58:13:42:b8:fb:cf:b2:f9:9d:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:04:BC:F2:EA:E6:30:F6:85:16:87:C1:F2:D8:5D:5A:2F:70:08:78
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/sAS88urmMPaFFofB8thdWi9wCHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:8f:32:b9:d6:4e:94:e7:8a:7a:a2:99:14:f1:3b:dc:96:31:
40:e3:67:00:76:ec:57:cc:d9:2d:01:ef:bb:39:ec:1c:cf:cc:
ed:5c:a1:52:13:25:b2:d0:3d:89:c4:10:46:70:ec:59:7f:c0:
1a:2a:65:13:7b:22:f5:19:bf:9b:48:27:cf:62:46:a0:cb:5f:
22:76:17:13:9b:65:34:82:b0:2a:9f:91:b4:dc:3f:bb:4f:68:
e6:71:bb:aa:ec:5d:7a:74:1c:c9:2d:3b:f6:2c:7a:d2:1f:f7:
a6:10:f8:dc:56:81:2e:cf:71:b1:8a:52:fd:f1:13:4c:80:26:
bb:48:97:64:00:c7:ce:22:ce:02:03:a0:01:42:15:82:0c:41:
77:69:76:63:95:5c:9e:25:46:d2:fa:05:a4:75:c9:33:1b:ed:
64:8d:d8:f3:29:a0:b8:b2:85:07:a2:7d:71:49:2f:32:93:7b:
58:4c:bc:d8:66:ac:b4:84:a4:2f:f3:b3:00:22:c9:59:8c:2d:
79:90:8a:8d:3f:79:e1:1d:5c:11:51:1e:b4:ce:d0:ce:52:b8:
06:41:5f:9d:9b:02:d6:62:e2:4d:67:24:8f:b7:0a:67:c0:6a:
4b:ea:d8:e4:85:56:24:ff:fb:7a:5d:f8:3e:a5:9a:21:d1:ee:
f8:61:ca:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org