Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OQIOvEPwDZDMYiCzMmZ5pE1kfsQ.roa
File: OQIOvEPwDZDMYiCzMmZ5pE1kfsQ.roa (raw, json)
Hash identifier: ipD9uCXiAUDXK+hE1z/uTv4LDJH8+LOAY5EEawpHcZE=
Subject key identifier: 39:02:0E:BC:43:F0:0D:90:CC:62:20:B3:32:66:79:A4:4D:64:7E:C4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182B4ED6FE66962C8549998E85059DBA9D8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OQIOvEPwDZDMYiCzMmZ5pE1kfsQ.roa
Signing time: Fri 19 Aug 2022 07:07:15 +0000
ROA not before: Fri 19 Aug 2022 07:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 88.151.61.0/24 maxlen: 24
88.209.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b4:ed:6f:e6:69:62:c8:54:99:98:e8:50:59:db:a9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 19 07:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39020ebc43f00d90cc6220b3326679a44d647ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:28:9d:c9:58:37:24:02:f8:c5:11:41:21:8e:
07:a6:38:23:9f:ea:c4:e4:dc:e8:83:0b:21:9f:ac:
6c:ff:93:61:bb:64:a1:8a:07:cb:9c:da:44:f7:b9:
8b:ef:1c:c6:2b:f8:b0:57:54:2d:11:ca:bb:40:d1:
9d:83:57:05:7b:c0:d1:0a:ce:cb:18:db:96:0d:0a:
a0:cc:03:02:e2:8e:05:ce:50:68:b4:2b:f7:8d:6b:
89:1f:ff:7e:63:a8:b1:67:22:ff:dc:10:e6:ba:19:
d9:7b:1d:95:42:55:5f:67:d5:5a:a1:06:9b:56:15:
84:55:08:e0:90:e2:5f:a8:cc:1a:ac:22:1b:dd:0f:
1b:0d:b0:f5:7f:0a:c0:e2:1e:0d:67:48:4c:d1:52:
06:66:17:81:98:2e:f4:71:3e:75:fa:e6:f0:bf:5e:
e5:53:ef:ae:30:5c:3a:b9:7d:2a:13:e3:44:a2:68:
8e:55:34:2a:70:62:23:7e:30:04:96:f9:f8:ad:5c:
bc:f8:ef:d7:5d:38:c2:ed:79:ba:bf:8c:22:c9:be:
8d:1e:d4:15:d9:9e:9d:5e:79:bc:e0:c5:dd:1d:0a:
d4:60:83:9b:d7:cb:2c:84:1f:e4:82:e1:46:04:4b:
23:6b:09:ab:96:97:84:00:d0:b4:6e:f6:c4:a8:fa:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:0E:BC:43:F0:0D:90:CC:62:20:B3:32:66:79:A4:4D:64:7E:C4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OQIOvEPwDZDMYiCzMmZ5pE1kfsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.61.0/24
88.209.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:87:28:82:ae:29:06:11:bc:c3:9d:63:ef:4d:ae:33:26:d1:
c1:02:2e:e7:25:c1:00:c7:6e:63:1a:eb:a1:6f:73:65:a3:47:
a5:f7:e0:16:15:7a:a4:f1:e0:d2:6c:49:cb:96:e5:f9:bf:48:
15:43:fa:a7:2d:73:32:a9:1e:db:a9:3b:4f:7b:b4:f5:5b:dd:
86:56:1e:e5:9b:75:c3:b7:83:8e:c7:5b:16:0d:91:0d:4c:f0:
02:b8:cb:e5:62:57:15:ab:7f:f2:6d:37:75:1e:be:47:c9:97:
d2:67:92:24:16:49:3b:d3:ff:38:ac:95:0a:7a:fd:fd:bb:42:
06:7b:42:c6:ab:26:80:d5:b8:a0:42:96:f9:40:26:d9:ef:4f:
87:63:fc:70:de:60:78:4a:50:cb:55:4f:61:06:82:c6:93:06:
91:ba:dc:2f:77:c8:6c:68:33:c9:1d:83:23:94:45:6d:93:28:
bf:b9:a6:0a:73:c2:0f:25:48:b1:09:a8:e2:17:e0:f1:ce:95:
9f:61:8a:ba:10:99:cc:08:7b:4b:17:90:41:85:91:a3:04:0f:
57:7e:e1:18:c9:0e:d1:0c:9a:f1:71:9e:89:9c:6c:22:37:cd:
97:7e:ac:dd:d9:fd:01:fb:aa:5b:ec:31:ac:75:1e:c0:96:b9:
8f:be:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org