Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9L9TUA2RsJTp4ApemQOf4vhUG5I.roa
File: 9L9TUA2RsJTp4ApemQOf4vhUG5I.roa (raw, json)
Hash identifier: cwDQrA/Mkg9J0WkgJiCXsWJpRhm3oThh6B2VUsJhZGo=
Subject key identifier: F4:BF:53:50:0D:91:B0:94:E9:E0:0A:5E:99:03:9F:E2:F8:54:1B:92
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01854EA91428711C67E49B8C414A4358000B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9L9TUA2RsJTp4ApemQOf4vhUG5I.roa
Signing time: Mon 26 Dec 2022 13:39:41 +0000
ROA not before: Mon 26 Dec 2022 13:39:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 88.209.249.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:a9:14:28:71:1c:67:e4:9b:8c:41:4a:43:58:00:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 26 13:39:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4bf53500d91b094e9e00a5e99039fe2f8541b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:d0:a9:56:ba:26:6f:43:f8:9b:4d:9a:fe:
c9:d3:75:6a:e7:85:7f:4d:f6:d5:8a:2f:5d:c3:0e:
ac:99:cb:68:a2:b8:9c:31:2d:06:79:25:36:42:04:
64:05:b6:e6:3e:9c:ee:5f:51:be:3a:05:1e:18:7a:
e6:1d:fb:1c:a0:b7:de:61:d0:09:a9:93:e1:cc:b8:
61:77:aa:1e:f6:82:7e:46:42:a7:ee:23:d4:65:bf:
f3:8c:1b:07:b3:31:70:e9:2f:85:05:c3:12:6f:1e:
e2:bc:21:21:59:65:2d:a5:51:d2:50:90:27:a1:9f:
f6:a5:19:e8:ef:09:8b:4e:6d:ed:61:bd:2b:1c:9c:
bf:e6:ae:c6:e0:7c:a1:ce:17:14:47:af:5f:ef:40:
94:d7:17:1e:68:81:e4:fd:b5:6d:d9:8e:65:35:0b:
1a:33:a7:c0:bf:c8:24:5f:3b:c4:54:07:1d:09:98:
62:9c:19:b2:25:b2:2c:5f:1a:3e:76:5a:88:3c:ee:
65:98:41:97:90:ee:08:5d:9f:e2:12:bf:5d:ad:4e:
63:c4:e7:b9:bc:16:72:e8:7d:39:d9:5c:50:20:73:
10:0b:e4:e4:0f:70:30:0c:d7:d2:79:a4:d7:62:61:
71:12:a6:34:78:ff:17:84:53:a4:b9:0d:a0:41:51:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BF:53:50:0D:91:B0:94:E9:E0:0A:5E:99:03:9F:E2:F8:54:1B:92
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9L9TUA2RsJTp4ApemQOf4vhUG5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.201.0/24
88.209.249.0/24
Signature Algorithm: sha256WithRSAEncryption
56:89:75:59:e5:8c:a8:db:14:5a:6e:28:05:e0:ab:68:bd:e0:
af:cf:9b:e6:1c:80:a4:d8:41:fb:66:ca:a3:17:1c:6c:56:dc:
78:35:2c:60:5d:4a:ad:30:29:85:54:bd:f6:56:85:ad:70:5a:
1a:2f:d1:8d:07:35:a4:b3:b9:81:23:88:12:9c:23:a9:a9:9f:
52:11:e1:34:6a:eb:7c:d9:9f:2e:40:aa:df:1a:88:35:82:85:
f4:36:a9:7d:a9:ee:a0:48:43:ca:f1:6d:10:b2:58:6f:0c:bd:
36:c2:96:75:56:bd:aa:51:81:43:9e:a2:42:cd:71:cc:53:5a:
70:83:95:c2:f1:21:7b:bf:1f:4f:c9:59:1e:a8:28:e3:61:1d:
e0:66:92:3a:2c:17:59:8a:5a:d2:0c:0f:f4:af:e5:37:cf:ce:
bc:dc:78:78:24:36:d9:09:50:5c:3e:7d:85:a0:3d:5c:8b:37:
05:fd:21:4b:26:26:a7:50:60:a9:bb:08:4e:bc:0b:c3:ae:54:
28:d6:bb:ae:2d:da:7c:87:8e:09:b5:03:d3:df:84:bd:fe:9a:
49:d5:c9:21:de:ba:11:2c:2f:ee:6b:84:16:5e:e4:81:68:28:
9f:ba:a9:a2:e3:42:75:de:52:8f:2b:91:b8:c6:ed:5c:a8:45:
86:84:6e:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVOqRQocRxn5JuMQUpDWAALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjIxMjI2MTMzOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGJmNTM1MDBkOTFiMDk0ZTllMDBhNWU5OTAzOWZlMmY4NTQxYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPPQqVa6Jm9D+JtNmv7J03Vq54V/
TfbVii9dww6smctooricMS0GeSU2QgRkBbbmPpzuX1G+OgUeGHrmHfscoLfeYdAJ
qZPhzLhhd6oe9oJ+RkKn7iPUZb/zjBsHszFw6S+FBcMSbx7ivCEhWWUtpVHSUJAn
oZ/2pRno7wmLTm3tYb0rHJy/5q7G4HyhzhcUR69f70CU1xceaIHk/bVt2Y5lNQsa
M6fAv8gkXzvEVAcdCZhinBmyJbIsXxo+dlqIPO5lmEGXkO4IXZ/iEr9drU5jxOe5
vBZy6H052VxQIHMQC+TkD3AwDNfSeaTXYmFxEqY0eP8XhFOkuQ2gQVEo8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPS/U1ANkbCU6eAKXpkDn+L4VBuSMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvOUw5VFVBMlJzSlRwNEFwZW1RT2Y0dmhVRzVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNHJAwQA
WNH5MA0GCSqGSIb3DQEBCwUAA4IBAQBWiXVZ5Yyo2xRabigF4KtoveCvz5vmHICk
2EH7ZsqjFxxsVtx4NSxgXUqtMCmFVL32VoWtcFoaL9GNBzWks7mBI4gSnCOpqZ9S
EeE0aut82Z8uQKrfGog1goX0Nql9qe6gSEPK8W0QslhvDL02wpZ1Vr2qUYFDnqJC
zXHMU1pwg5XC8SF7vx9PyVkeqCjjYR3gZpI6LBdZilrSDA/0r+U3z8683Hh4JDbZ
CVBcPn2FoD1cizcF/SFLJianUGCpuwhOvAvDrlQo1ruuLdp8h44JtQPT34S9/ppJ
1ckh3roRLC/ua4QWXuSBaCifuqmi40J13lKPK5G4xu1cqEWGhG77
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org