Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G_KfDD-CLJM6j3r5DdYBp89Y7XI.roa
File: G_KfDD-CLJM6j3r5DdYBp89Y7XI.roa (raw, json)
Hash identifier: bFbTwH1CVZcDt1BmTqnlMDqw04l1TkrihFYfxjmeS90=
Subject key identifier: 1B:F2:9F:0C:3F:82:2C:93:3A:8F:7A:F9:0D:D6:01:A7:CF:58:ED:72
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182A0972B925F87918178DD624EEF09D8BA
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G_KfDD-CLJM6j3r5DdYBp89Y7XI.roa
Signing time: Mon 15 Aug 2022 08:20:37 +0000
ROA not before: Mon 15 Aug 2022 08:20:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47823
IP address blocks: 88.209.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a0:97:2b:92:5f:87:91:81:78:dd:62:4e:ef:09:d8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 15 08:20:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bf29f0c3f822c933a8f7af90dd601a7cf58ed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:9e:e0:8a:ee:55:82:dc:df:b6:81:8f:28:
e4:a5:85:00:49:c3:3e:8f:5d:a4:15:11:1b:1c:2f:
a2:7c:c7:6e:77:4f:d9:55:f4:c3:91:26:3c:5e:a7:
42:e2:72:df:51:ea:b9:e9:4b:1e:3d:ff:e5:cc:0c:
bc:f7:6f:1a:ae:26:aa:4d:e5:3d:0f:2c:e4:bf:de:
09:83:07:f8:11:1e:a7:53:71:b2:40:04:f9:36:c8:
f3:85:20:d6:05:4e:c4:1a:c3:53:30:1e:12:a0:24:
27:36:89:c7:2a:61:ea:19:93:65:28:39:8b:8b:6f:
ea:9c:a3:19:3d:48:98:1d:27:27:ad:69:33:a2:5f:
e7:a2:fc:2f:ad:4d:ae:7c:fd:43:83:6f:b1:b3:54:
1d:c9:8e:e9:9f:fa:69:c5:c8:d3:b3:20:5c:11:e6:
c7:01:7c:67:36:b0:c3:b3:4a:74:b9:54:f4:cf:20:
6e:b2:fc:2e:ac:7c:3e:9c:d1:d9:82:6d:f4:3b:65:
3e:c3:bc:f2:37:e8:3a:85:44:ed:85:4f:f8:04:71:
1a:61:ff:ff:f7:2b:c1:41:84:e6:0d:1b:37:c1:bb:
67:9a:78:0b:a6:7e:b4:9b:7b:ee:4a:ff:4b:35:5c:
26:41:1d:36:80:be:85:6a:25:3f:ea:12:68:4c:8e:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:9F:0C:3F:82:2C:93:3A:8F:7A:F9:0D:D6:01:A7:CF:58:ED:72
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G_KfDD-CLJM6j3r5DdYBp89Y7XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:90:0a:75:fe:c6:31:cd:c7:23:58:14:02:cf:88:8e:1c:65:
e3:79:3c:b9:2f:31:1e:4c:a5:42:e3:ee:99:1c:a3:21:5d:8b:
f8:0a:49:c9:c1:62:59:3f:c5:d2:f8:68:2d:5d:67:76:37:83:
31:80:56:0f:70:16:26:8d:33:58:da:e2:2d:e1:02:80:98:3a:
56:14:b1:d3:d4:19:35:f4:63:db:5a:f6:1c:b3:e7:6f:d1:af:
b0:64:6f:e6:57:f5:75:e3:a2:e6:f9:41:42:c1:fa:40:f5:50:
44:b3:1c:7b:c1:41:4b:8e:1d:5c:01:f9:3d:26:88:f1:33:5e:
79:6a:79:f6:aa:b3:e6:57:7a:1d:9f:f0:56:93:58:f6:46:dc:
7d:cb:8b:6d:e2:02:c0:55:b6:0b:c7:1e:99:b4:c6:e3:ec:11:
7d:45:2b:47:82:68:bd:74:62:79:7e:99:c7:b9:f8:1b:fa:17:
0b:bc:ea:f3:b5:5f:3f:d6:cc:1a:52:94:73:e3:15:d6:dd:2a:
c1:e7:15:12:b3:77:89:bb:47:84:cc:af:1b:0d:2d:76:c3:13:
6f:b2:dc:ae:60:ef:a8:ff:92:6a:36:80:95:7f:e3:7e:56:76:
f8:58:96:55:01:7b:0d:3d:34:11:2b:4b:0d:33:e0:83:68:0e:
49:c2:64:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKglyuSX4eRgXjdYk7vCdi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjIwODE1MDgyMDM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmYyOWYwYzNmODIyYzkzM2E4ZjdhZjkwZGQ2MDFhN2NmNThlZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHCe4IruVYLc37aBjyjkpYUAScM+
j12kFREbHC+ifMdud0/ZVfTDkSY8XqdC4nLfUeq56UsePf/lzAy8928ariaqTeU9
Dyzkv94Jgwf4ER6nU3GyQAT5NsjzhSDWBU7EGsNTMB4SoCQnNonHKmHqGZNlKDmL
i2/qnKMZPUiYHScnrWkzol/novwvrU2ufP1Dg2+xs1QdyY7pn/ppxcjTsyBcEebH
AXxnNrDDs0p0uVT0zyBusvwurHw+nNHZgm30O2U+w7zyN+g6hUTthU/4BHEaYf//
9yvBQYTmDRs3wbtnmngLpn60m3vuSv9LNVwmQR02gL6FaiU/6hJoTI5e7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBvynww/giyTOo96+Q3WAafPWO1yMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvR19LZkRELUNMSk02ajNyNURkWUJwODlZN1hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHnMA0G
CSqGSIb3DQEBCwUAA4IBAQCmkAp1/sYxzccjWBQCz4iOHGXjeTy5LzEeTKVC4+6Z
HKMhXYv4CknJwWJZP8XS+GgtXWd2N4MxgFYPcBYmjTNY2uIt4QKAmDpWFLHT1Bk1
9GPbWvYcs+dv0a+wZG/mV/V146Lm+UFCwfpA9VBEsxx7wUFLjh1cAfk9JojxM155
ann2qrPmV3odn/BWk1j2Rtx9y4tt4gLAVbYLxx6ZtMbj7BF9RStHgmi9dGJ5fpnH
ufgb+hcLvOrztV8/1swaUpRz4xXW3SrB5xUSs3eJu0eEzK8bDS12wxNvstyuYO+o
/5JqNoCVf+N+Vnb4WJZVAXsNPTQRK0sNM+CDaA5JwmTV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org