Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/pEdOuBmVvzKr5s0oCwOlVS401cc.roa
File: pEdOuBmVvzKr5s0oCwOlVS401cc.roa (raw, json)
Hash identifier: edfAho21XwGeidTq/qudbbSnEnMf88lw8qof6dmGKkg=
Subject key identifier: A4:47:4E:B8:19:95:BF:32:AB:E6:CD:28:0B:03:A5:55:2E:34:D5:C7
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 36A9307C
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/pEdOuBmVvzKr5s0oCwOlVS401cc.roa
Signing time: Sat 01 Jan 2022 04:03:42 +0000
ROA not before: Sat 01 Jan 2022 04:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21371
IP address blocks: 88.84.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917057660 (0x36a9307c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jan 1 04:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4474eb81995bf32abe6cd280b03a5552e34d5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:f2:99:25:3a:c7:83:94:9b:fa:8b:68:38:
ef:c1:3c:0d:6f:e0:28:13:8e:dd:72:4e:41:01:da:
77:72:fc:34:0a:d2:72:80:af:81:b6:0c:ae:37:0e:
8b:b2:47:c6:f2:4c:29:7c:78:42:40:98:e5:2e:b7:
71:6e:53:e9:bb:2b:5a:c4:39:be:6f:fd:09:29:93:
b7:ad:50:0c:ba:68:28:de:62:c9:2d:ef:cb:bd:98:
4e:97:3e:fd:4e:7a:7c:9d:e9:35:b2:64:5e:e5:05:
4a:43:82:67:88:1d:e2:10:ee:3a:81:92:b8:81:e5:
79:4e:8a:fc:0c:0b:22:13:c2:a0:3d:27:f5:48:db:
16:5a:40:a2:12:de:4e:e1:09:f8:b2:e9:32:5d:b2:
61:3a:6a:c5:9b:aa:ec:65:37:73:6f:81:48:e7:f1:
f4:84:c6:35:30:f2:f1:ba:5e:0c:4d:1e:58:11:fc:
73:29:7d:54:bc:cb:c7:ea:8d:d4:af:81:20:e5:6a:
d8:e5:dd:5e:4b:a7:a8:b8:a3:f0:34:79:91:04:60:
d3:85:f1:86:f4:02:6e:98:da:3e:af:83:6c:6d:e9:
04:0f:76:3f:78:e5:1e:49:33:35:de:b1:5f:5a:5d:
d1:e3:42:22:cb:31:c0:97:53:2f:32:53:c7:2f:fd:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:47:4E:B8:19:95:BF:32:AB:E6:CD:28:0B:03:A5:55:2E:34:D5:C7
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/pEdOuBmVvzKr5s0oCwOlVS401cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.128.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:5c:11:a0:e0:b4:ba:4b:2d:1f:9b:56:0c:35:53:0a:0f:88:
35:b2:f9:b0:02:7a:5c:5c:69:b1:11:7d:c9:61:80:f4:6e:72:
01:fa:13:7b:31:af:d8:d0:fe:85:50:68:d8:0b:a2:4e:dd:22:
b8:8a:51:57:e3:34:83:d9:c5:05:a0:78:76:34:d9:c6:61:78:
a3:1b:3e:44:9a:23:09:f1:a6:be:ef:47:b7:4e:c2:b6:27:64:
2c:94:f6:6a:d7:72:2a:6b:70:fd:74:89:fa:dc:97:45:9b:dc:
6f:59:01:10:ef:49:d9:0a:5e:1a:1a:59:fa:82:a4:54:3a:dd:
d5:12:5f:56:e3:cd:2b:ef:b3:08:6b:1d:f6:d4:8f:91:8f:67:
41:44:16:55:5d:6f:eb:b4:0c:d5:fd:de:ff:12:7b:af:cc:57:
30:0e:3b:81:ca:e2:1d:a0:ae:a6:9a:63:c4:d4:74:5c:fd:6f:
37:98:ac:2f:3b:07:c3:73:16:7b:2d:09:d5:56:15:b5:c2:41:
03:83:a8:4a:16:f2:a3:97:ef:75:b1:3c:8d:fe:92:cd:72:5a:
8b:4f:6e:39:05:22:c4:cb:a1:84:1a:9d:da:52:01:03:d6:0e:
07:01:86:91:9e:c6:bf:04:90:3d:15:50:1a:67:e6:82:cc:63:
cd:a0:c7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:30 2024 by rpki-client on console-ams.rpki-client.org