Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/F-lLYNxDrF1xorE17wqZlKauNyg.roa
File: F-lLYNxDrF1xorE17wqZlKauNyg.roa (raw, json)
Hash identifier: oGtkd3eXqxm+B6fiM8+fXoqlN+eIb3ClRqjgywzwagY=
Subject key identifier: 17:E9:4B:60:DC:43:AC:5D:71:A2:B1:35:EF:0A:99:94:A6:AE:37:28
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182D8D4A17E298788588A72BFAC345128EC
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/F-lLYNxDrF1xorE17wqZlKauNyg.roa
Signing time: Fri 26 Aug 2022 06:26:29 +0000
ROA not before: Fri 26 Aug 2022 06:26:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 92.52.214.0/24 maxlen: 24
88.209.252.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d8:d4:a1:7e:29:87:88:58:8a:72:bf:ac:34:51:28:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 26 06:26:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17e94b60dc43ac5d71a2b135ef0a9994a6ae3728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:84:5c:2d:d9:ae:d1:09:6e:c4:2e:3b:e5:
4f:a4:1c:e6:f7:28:8f:33:28:c1:65:d4:e7:82:49:
8a:14:90:c1:d4:0c:ab:0d:b3:12:ab:c9:36:bc:5a:
2b:72:84:23:59:2d:43:6f:f6:ff:7e:32:06:37:f9:
5d:89:9b:7e:9f:51:dd:e1:d7:aa:9c:9a:b8:a1:32:
b1:a2:3c:0d:2c:fb:0d:29:65:3f:3c:ec:3a:7d:fc:
dc:a0:70:d7:9c:82:ba:5f:3b:af:d6:1b:c8:d1:37:
a2:3c:58:9e:9c:4a:97:29:83:5b:8e:f6:4f:9d:b5:
2d:1a:bf:ed:f2:a7:df:f4:ce:bb:5a:da:7a:5f:b3:
63:a6:4b:e7:e2:c0:ae:58:7d:f2:7a:6c:e8:eb:a0:
fb:30:a7:9b:bf:bd:fb:48:d9:30:1e:c3:5a:23:ba:
f2:06:b8:82:43:d4:64:88:22:4f:3a:b1:94:fa:3e:
46:41:5e:8a:f3:f7:e0:d2:4a:28:35:76:92:49:56:
7d:dd:30:60:92:3d:26:db:aa:29:bd:29:66:1c:4d:
50:a2:b3:73:e0:00:54:26:0a:2a:a5:71:89:cb:86:
7a:9d:92:76:c9:67:1a:f3:55:00:83:94:a0:dd:16:
47:26:04:b6:0c:90:dd:37:73:9e:8f:58:6d:fc:4a:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E9:4B:60:DC:43:AC:5D:71:A2:B1:35:EF:0A:99:94:A6:AE:37:28
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/F-lLYNxDrF1xorE17wqZlKauNyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.63.0/24
88.209.201.0/24
88.209.252.0/24
88.209.255.0/24
92.52.214.0/24
178.210.248.0/24
Signature Algorithm: sha256WithRSAEncryption
94:3b:5a:d8:15:01:b3:37:e2:72:54:f3:2c:94:ac:e5:58:f3:
7a:4b:4f:ca:78:67:d7:5e:0f:63:85:f7:cf:5e:de:66:3d:cc:
fb:a1:cb:ee:36:82:4c:e3:4a:78:8b:00:77:2c:73:20:21:f2:
19:97:8c:ec:eb:ca:8c:c0:30:ab:e7:d0:64:60:fa:5d:db:a2:
b3:54:bc:63:aa:c3:9a:2c:07:1c:a0:88:ab:7e:51:b4:dc:02:
cc:75:f3:2b:13:a8:3b:d0:02:00:d6:84:e0:8f:ec:2a:b5:70:
a7:2a:f2:94:3a:cd:bd:03:f8:01:75:4f:89:42:60:26:13:fd:
b1:77:3f:4f:ff:fc:ba:cb:f3:dd:dd:c7:46:c6:74:95:93:ac:
08:01:e5:25:29:c4:2f:33:1d:48:ca:57:be:7d:9e:6b:aa:c4:
84:93:5d:89:68:23:65:9f:d6:d3:9d:9b:f3:3d:2a:53:27:c9:
b9:1f:2d:23:17:74:2e:02:57:1e:f8:4f:6e:15:08:59:58:b5:
b2:33:07:c3:74:5b:1e:53:ca:f3:fa:b3:31:84:cc:c8:15:38:
44:97:0d:26:c9:d7:46:31:3a:08:d3:95:eb:0c:24:ed:d3:a7:
47:24:4b:e5:1a:e3:4e:b0:c9:9a:d6:96:0d:5e:ca:12:e9:33:
69:0a:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org