Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/bfolEXk4U83RF3aW9xPOJfd5uOc.roa
File: bfolEXk4U83RF3aW9xPOJfd5uOc.roa (raw, json)
Hash identifier: JQHi0Oy+NEr65D4S8uvlvRi6XPWFE/3TVJheYMXcezs=
Subject key identifier: 6D:FA:25:11:79:38:53:CD:D1:17:76:96:F7:13:CE:25:F7:79:B8:E7
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 36AB10EA
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/bfolEXk4U83RF3aW9xPOJfd5uOc.roa
Signing time: Sat 01 Jan 2022 04:03:43 +0000
ROA not before: Sat 01 Jan 2022 04:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47886
IP address blocks: 88.84.152.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917180650 (0x36ab10ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jan 1 04:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dfa2511793853cdd1177696f713ce25f779b8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:b5:1a:39:42:76:80:16:c6:b7:25:47:55:
9d:87:f3:e1:63:b1:00:37:e1:1e:d3:6b:45:30:fc:
0c:45:3a:d6:1d:a7:e5:64:bf:df:5f:2a:4f:fe:2f:
ae:5f:79:d5:b6:e9:e4:cf:77:cc:51:fd:90:ec:01:
fc:8e:aa:5e:82:67:f1:d2:f7:b5:05:78:c6:08:b9:
88:30:0b:83:5e:2d:66:76:4c:16:91:4b:82:48:28:
e6:74:49:20:76:2f:a8:33:c5:94:2a:8b:c9:c6:25:
2b:38:a8:fe:3f:27:6d:6c:0d:72:d9:30:d6:aa:db:
b6:45:50:b7:c7:b1:1d:b5:2a:08:5d:8d:be:91:a8:
1f:49:bd:da:27:44:0b:0c:44:65:d1:d7:f0:2b:f4:
5f:4d:a4:7a:23:b4:e0:0f:8f:67:90:76:ad:ac:11:
ae:00:af:14:a1:86:14:bb:de:0e:31:43:4d:b9:68:
0c:37:41:13:14:f2:95:3d:02:8d:20:9d:93:b1:fe:
db:dc:84:30:bd:51:68:50:6e:d4:18:88:b7:ac:38:
08:f3:df:eb:0d:bf:d5:34:d9:f0:ca:53:2d:8f:50:
6d:1b:21:7e:ee:34:c4:b2:6f:e0:b5:15:19:08:3a:
7d:73:ac:7c:0a:fc:b6:a3:09:91:ee:32:c1:de:3a:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FA:25:11:79:38:53:CD:D1:17:76:96:F7:13:CE:25:F7:79:B8:E7
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/bfolEXk4U83RF3aW9xPOJfd5uOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.152.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:9f:68:50:b2:26:a1:21:cd:e6:b7:0c:00:42:3e:41:88:1d:
f5:8f:0e:88:9c:30:94:f1:7e:2e:73:6f:14:9e:b9:1d:08:6a:
01:ea:f6:5b:c0:be:d8:0b:70:78:75:9d:5e:5c:90:98:ac:86:
64:78:04:39:19:c3:4d:ab:72:5f:98:b8:2b:2f:9b:b1:43:e6:
61:c4:7e:ff:2f:5a:a3:59:86:f5:b3:9b:b5:f2:d8:a0:54:52:
69:8a:ce:c6:5b:76:a0:c9:5a:49:47:51:0e:7f:d5:56:41:12:
a9:08:f4:15:29:1d:88:28:bc:21:fc:75:a2:7b:e4:b1:15:3b:
f8:48:96:c1:66:c3:c3:50:b6:84:49:4d:ed:2c:cc:64:19:56:
ac:b0:24:2a:a4:ef:54:b5:ec:3e:6d:92:3f:4d:6a:9e:40:03:
fd:6c:f1:05:fc:ac:ec:c3:94:1a:fb:89:58:30:3f:bc:70:b3:
9f:5c:8e:6e:b7:8f:c7:67:40:da:b9:72:04:e2:f5:76:b2:17:
88:2c:ae:9b:e0:15:7a:a4:4d:dc:a2:e8:91:15:11:99:c5:34:
13:52:94:0d:6d:80:0c:4a:0c:33:2a:c0:38:b4:0c:30:57:a9:
6a:ad:48:9d:5d:fd:13:14:8e:71:fd:ae:a1:55:25:3f:52:42:
16:9e:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:27 2024 by rpki-client on console-fra.rpki-client.org