Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/IoUqr7AkQi3MumDub30Z3J_nVpE.roa
File: IoUqr7AkQi3MumDub30Z3J_nVpE.roa (raw, json)
Hash identifier: LSV2sRJSy0l7VlfdWFuSj9cBo5fPifzAwz3jB/Y5S+U=
Subject key identifier: 22:85:2A:AF:B0:24:42:2D:CC:BA:60:EE:6F:7D:19:DC:9F:E7:56:91
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018480F8DCECD6E89AE73B21775BD8C92100
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/IoUqr7AkQi3MumDub30Z3J_nVpE.roa
Signing time: Wed 16 Nov 2022 15:05:03 +0000
ROA not before: Wed 16 Nov 2022 15:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 88.209.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:f8:dc:ec:d6:e8:9a:e7:3b:21:77:5b:d8:c9:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 16 15:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22852aafb024422dccba60ee6f7d19dc9fe75691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:96:3a:d6:18:21:84:22:4c:85:05:5c:98:
82:c7:a5:d6:f4:e6:60:1c:7b:f0:4e:0e:4a:ce:a1:
15:4b:b1:b3:9f:d9:28:14:8f:c8:56:80:cf:6f:90:
c4:75:6a:22:11:19:0a:07:8f:87:78:93:76:50:f1:
30:f0:43:92:f2:9d:8a:ba:36:cf:e9:70:3a:6f:f9:
50:2b:82:e9:93:e0:0c:80:b0:43:38:62:1f:59:0e:
5d:2a:1b:81:4b:71:59:1a:de:2a:76:05:4f:3f:95:
b3:8e:d0:e0:3b:5f:0d:b1:00:53:2a:cd:8e:b2:cb:
fe:41:6d:20:23:8a:d1:5c:5b:85:3e:4b:09:0a:df:
b4:e1:8f:09:b0:0a:58:cf:18:34:a7:db:eb:71:9c:
20:a4:46:8d:c0:1a:91:d5:a2:05:01:5e:df:b6:9a:
0f:ee:14:c9:5f:b1:e1:1c:95:92:4c:5e:61:5b:75:
1b:f4:3a:e7:78:0c:eb:bd:1a:0a:2a:50:8a:db:ab:
a6:c3:ff:66:46:a0:c7:bd:8e:7b:80:6e:b3:46:45:
51:ff:6d:2b:90:01:ff:fb:d8:9e:04:b6:25:06:4c:
7a:a6:23:6a:57:01:af:c0:5d:bf:1b:f6:ef:32:15:
c0:15:87:99:4b:e4:35:c0:da:de:75:17:5e:12:67:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:2A:AF:B0:24:42:2D:CC:BA:60:EE:6F:7D:19:DC:9F:E7:56:91
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/IoUqr7AkQi3MumDub30Z3J_nVpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ad:55:0d:f3:ab:51:9f:2f:64:74:52:47:39:f8:04:11:66:
7f:eb:c3:fe:20:cb:31:e0:ad:67:f8:4d:00:69:fb:03:d5:85:
da:7a:12:24:29:f7:a7:27:07:bd:9c:eb:d5:3a:08:7c:45:f7:
37:17:da:fb:3e:a7:01:f4:54:a0:99:ec:5e:db:10:0a:34:f0:
eb:44:61:51:6d:21:a5:0d:6d:f6:1d:f1:ff:3a:26:e1:a7:eb:
56:03:ed:7b:8e:0e:a8:79:5b:c3:a4:09:74:fd:bc:61:2f:61:
4b:3a:14:20:67:b1:cd:19:28:86:ae:a4:ed:b9:32:8b:ff:3c:
50:b9:4b:42:37:48:04:e9:57:fe:fd:71:60:52:ee:d9:81:e6:
11:0c:dc:f8:1d:14:46:f8:1e:5c:fc:b9:26:17:71:80:b0:c9:
16:47:48:1a:f2:01:f7:2e:15:49:52:11:05:cf:ed:98:72:0d:
35:f7:48:3b:23:50:30:a4:d0:6a:d1:8a:89:51:75:52:b6:4a:
d6:60:7e:b3:b3:2c:61:43:5b:29:e9:cb:ba:da:64:33:01:88:
0f:de:81:e4:4e:93:76:b0:15:2f:f6:8b:9f:ac:0d:eb:af:13:
0e:57:50:d0:dd:27:98:79:55:9f:b4:d6:2c:2b:d8:e4:cf:bd:
b1:c1:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org