Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Os-N-5NP0RbDpZ7qrI9QHU0zPqY.roa
File: Os-N-5NP0RbDpZ7qrI9QHU0zPqY.roa (raw, json)
Hash identifier: ninZjhy3xPelyTIFGfZqegCMVOwtF8dl/7WjRyItipI=
Subject key identifier: 3A:CF:8D:FB:93:4F:D1:16:C3:A5:9E:EA:AC:8F:50:1D:4D:33:3E:A6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0415A351
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Os-N-5NP0RbDpZ7qrI9QHU0zPqY.roa
Signing time: Sat 25 Jun 2022 11:14:10 +0000
ROA not before: Sat 25 Jun 2022 11:14:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.200.0/22 maxlen: 32
88.209.204.0/22 maxlen: 32
88.209.204.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68526929 (0x415a351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 25 11:14:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3acf8dfb934fd116c3a59eeaac8f501d4d333ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:51:fc:8f:d0:ce:8a:21:df:b0:ac:02:a7:98:
ae:10:90:a6:94:7a:fa:60:ac:34:28:c6:00:44:df:
70:94:75:96:18:6e:ed:2c:70:0d:e0:4c:52:5d:14:
26:e8:e9:34:c3:c7:a2:25:f1:cb:ba:b8:33:ff:9a:
0a:19:d0:08:24:13:8b:a0:56:40:9c:ba:fa:00:a3:
67:21:df:c7:dd:45:b5:64:5b:7a:34:1c:aa:0f:35:
25:0b:ba:94:40:25:8a:ed:40:6f:2c:bb:29:cb:e4:
da:a1:1b:f8:c9:94:b6:ae:b7:b9:1d:35:a8:0c:8e:
f4:e3:2b:34:dd:a5:30:c4:99:67:19:4a:01:dd:1d:
4a:52:ea:64:5f:4e:3c:75:16:c0:dd:c4:93:bb:96:
b4:da:a8:55:8b:5f:dc:48:8a:0a:84:c3:27:f0:b2:
fd:4e:b0:2d:38:b9:02:29:d2:cc:d1:37:5c:6e:e3:
c9:7f:fc:20:b6:0d:99:34:ee:8a:6b:01:92:68:c4:
a0:36:31:bd:33:f8:ab:d2:a6:a5:d0:6d:05:e8:54:
e9:4c:51:7d:c4:30:cc:b2:7f:b7:7d:14:27:38:e7:
d1:d9:8e:12:88:c7:79:bd:ca:d6:e0:64:aa:49:2a:
39:89:10:7b:f9:b7:b4:f5:62:88:b0:34:01:3b:3c:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CF:8D:FB:93:4F:D1:16:C3:A5:9E:EA:AC:8F:50:1D:4D:33:3E:A6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Os-N-5NP0RbDpZ7qrI9QHU0zPqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.200.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:4d:12:9d:48:a7:b5:fa:0b:8e:6c:d9:c3:ff:6e:1a:9f:9f:
72:88:d4:7a:27:86:4c:5d:08:bc:fe:90:20:9f:29:da:e5:9e:
80:2a:89:78:8d:b6:cf:54:8d:a1:d8:71:a1:9d:a1:f1:4a:4a:
be:62:0f:5e:93:76:f1:81:e9:b7:55:8c:a6:81:8a:64:01:99:
dc:64:bf:0e:9b:fc:6e:c7:03:a4:5a:5d:55:c4:12:13:a7:d5:
8a:e4:be:e7:43:d1:8c:88:b9:d2:61:d4:b9:1c:18:d8:b1:6b:
38:3b:e0:42:96:ed:c6:88:a0:69:87:e7:d2:e6:e8:72:58:1e:
98:5c:8f:b2:9e:12:26:fb:ca:cb:37:1a:02:08:d2:30:00:cf:
af:7a:37:de:e6:17:0f:fd:d5:45:ef:ee:04:75:2e:85:3e:d9:
d6:16:9f:2b:89:0e:cc:b8:26:7b:5a:4e:60:c8:bc:c5:e5:b5:
18:3f:c6:79:14:b5:7c:2e:7c:b7:6f:be:ce:a5:88:97:b7:f6:
3d:fc:84:2a:dd:2b:d5:72:3d:f8:ba:23:b3:3e:69:19:f5:3f:
47:cc:42:06:d8:22:0c:b2:9a:31:eb:fa:10:9f:82:b4:d5:3f:
0d:e0:e2:20:11:b6:a7:2a:42:5e:bc:e9:dc:83:7c:27:14:a3:
a1:12:d6:65
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBBWjUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZGFhYTBlMDgyMzYwMzYwYWNkYTM0NzY2NGViODMxNGViMTFkYTEwMB4XDTIyMDYy
NTExMTQxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2FjZjhkZmI5MzRm
ZDExNmMzYTU5ZWVhYWM4ZjUwMWQ0ZDMzM2VhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIpR/I/Qzooh37CsAqeYrhCQppR6+mCsNCjGAETfcJR1lhhu
7SxwDeBMUl0UJujpNMPHoiXxy7q4M/+aChnQCCQTi6BWQJy6+gCjZyHfx91FtWRb
ejQcqg81JQu6lEAliu1Abyy7Kcvk2qEb+MmUtq63uR01qAyO9OMrNN2lMMSZZxlK
Ad0dSlLqZF9OPHUWwN3Ek7uWtNqoVYtf3EiKCoTDJ/Cy/U6wLTi5AinSzNE3XG7j
yX/8ILYNmTTuimsBkmjEoDYxvTP4q9KmpdBtBehU6UxRfcQwzLJ/t30UJzjn0dmO
EojHeb3K1uBkqkkqOYkQe/m3tPViiLA0ATs81OcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ6z437k0/RFsOlnuqsj1AdTTM+pjAfBgNVHSMEGDAWgBTNqqDggjYDYKza
NHZk64MU6xHaEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3phcWc0SUkyQTJDczJqUjJaT3VERk9zUjJoQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGQvNTg5MTI3LTEwOTYtNGM5MS05NmNjLTdlNGQ2ZjZmNmU2Ni8x
L09zLU4tNU5QMFJiRHBaN3FySTlRSFUwelBxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQv
NTg5MTI3LTEwOTYtNGM5MS05NmNjLTdlNGQ2ZjZmNmU2Ni8xL3phcWc0SUkyQTJD
czJqUjJaT3VERk9zUjJoQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1jRyDANBgkqhkiG9w0BAQsFAAOC
AQEAwE0SnUintfoLjmzZw/9uGp+fcojUeieGTF0IvP6QIJ8p2uWegCqJeI22z1SN
odhxoZ2h8UpKvmIPXpN28YHpt1WMpoGKZAGZ3GS/Dpv8bscDpFpdVcQSE6fViuS+
50PRjIi50mHUuRwY2LFrODvgQpbtxoigaYfn0uboclgemFyPsp4SJvvKyzcaAgjS
MADPr3o33uYXD/3VRe/uBHUuhT7Z1hafK4kOzLgme1pOYMi8xeW1GD/GeRS1fC58
t2++zqWIl7f2PfyEKt0r1XI9+Lojsz5pGfU/R8xCBtgiDLKaMev6EJ+CtNU/DeDi
IBG2pypCXrzp3IN8JxSjoRLWZQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org