Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VxZ3zx-f5zCve95eVuTIpXObDoo.roa
File: VxZ3zx-f5zCve95eVuTIpXObDoo.roa (raw, json)
Hash identifier: VANTzZ9zKO0DILTJ5OUssDoAYphuPQkHIoE8uN4AokI=
Subject key identifier: 57:16:77:CF:1F:9F:E7:30:AF:7B:DE:5E:56:E4:C8:A5:73:9B:0E:8A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01846191519557A095E3357C2FC9D3D5AB62
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VxZ3zx-f5zCve95eVuTIpXObDoo.roa
Signing time: Thu 10 Nov 2022 12:43:44 +0000
ROA not before: Thu 10 Nov 2022 12:43:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 88.209.227.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:91:51:95:57:a0:95:e3:35:7c:2f:c9:d3:d5:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 10 12:43:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=571677cf1f9fe730af7bde5e56e4c8a5739b0e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:7c:12:3b:b6:d5:01:a7:13:b0:a4:c9:25:
d4:fe:12:a9:5d:71:5e:2e:86:f9:5b:cd:1b:52:cd:
e9:96:f5:6e:66:07:df:f4:98:7d:4b:26:86:83:f4:
92:87:10:c4:e2:d3:57:37:1b:9f:27:3b:61:58:7b:
6e:f5:98:4d:f0:ea:87:34:c4:ce:1a:0d:30:e5:93:
5b:06:11:12:d9:25:91:a3:b5:10:29:06:de:e2:ba:
18:3d:d1:f7:f8:a8:23:d0:a1:0e:41:74:89:ca:6a:
be:a2:94:15:3b:cc:e9:08:1f:61:17:3f:96:3e:70:
82:4b:aa:de:bb:84:9f:45:1f:d8:bb:28:ea:ed:34:
0f:a0:47:f0:53:ff:e1:4f:1c:52:38:99:d5:02:df:
f9:43:93:2b:86:3a:dd:13:dc:77:07:6f:df:78:17:
53:20:97:05:d2:72:16:f0:06:6f:32:5b:a9:78:1a:
4a:d8:2e:94:39:da:cf:1a:d2:84:07:fa:15:6c:67:
ba:81:85:2e:43:d6:79:e2:d5:8f:45:29:26:15:aa:
b6:51:5e:de:31:06:22:61:b6:2e:62:60:a4:06:e3:
ec:c6:3c:99:e2:19:47:b7:f2:e4:55:ee:9c:2e:10:
89:4b:f6:a0:cd:6e:2c:ac:1f:0f:05:be:f6:2d:c9:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:77:CF:1F:9F:E7:30:AF:7B:DE:5E:56:E4:C8:A5:73:9B:0E:8A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VxZ3zx-f5zCve95eVuTIpXObDoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.63.0/24
88.209.227.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d3:d7:1c:b6:d5:3b:5e:07:f5:f5:03:ae:4a:ba:58:8e:9b:
92:ac:08:92:aa:e0:f2:c2:f0:e7:d9:05:47:5d:c7:93:02:1e:
65:f5:f6:49:1a:29:df:97:32:19:38:be:e8:5e:97:b2:c8:01:
35:97:d8:32:4c:d9:ca:74:37:f9:2d:a0:bf:c3:0c:cb:2f:f0:
96:e5:e9:a7:91:18:8a:bb:63:0c:72:63:2f:ac:45:07:f1:5e:
96:0d:c0:40:ad:c7:d4:00:87:60:c7:cb:02:f0:47:d0:f3:62:
49:51:4c:88:45:2f:4c:eb:54:80:7d:fe:92:40:16:8c:91:6a:
2e:cc:55:0c:c8:db:7d:22:a8:54:db:9b:05:da:0f:8f:0c:01:
d5:ae:be:73:5e:88:43:9c:16:f4:d8:c7:70:e2:51:fa:d9:ae:
63:59:5e:c0:97:d0:d7:75:e6:89:48:9f:ec:1e:55:86:41:a9:
72:82:51:cc:e3:37:eb:21:d8:f4:dc:c1:47:b0:05:70:a7:7e:
29:68:e9:95:38:2e:45:77:7a:ab:71:bd:ca:ad:cf:98:1e:1a:
59:87:10:df:91:17:aa:c0:94:03:5d:92:18:28:37:39:5a:25:
ad:e8:3e:a3:e6:30:71:90:6c:b1:6a:1d:62:d9:f7:80:92:44:
ff:74:95:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org