Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YoeyjOIbnduYCW-0IFRpWfw1ka0.roa
File: YoeyjOIbnduYCW-0IFRpWfw1ka0.roa (raw, json)
Hash identifier: UMG+O18Nlb6L9uz0+M6GXti290/jdwL8OEdEk7yeUp8=
Subject key identifier: 62:87:B2:8C:E2:1B:9D:DB:98:09:6F:B4:20:54:69:59:FC:35:91:AD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0183118ACABF2C071BA97E4AEE1BBFF1FA51
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YoeyjOIbnduYCW-0IFRpWfw1ka0.roa
Signing time: Tue 06 Sep 2022 06:44:12 +0000
ROA not before: Tue 06 Sep 2022 06:44:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 88.209.244.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:8a:ca:bf:2c:07:1b:a9:7e:4a:ee:1b:bf:f1:fa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 6 06:44:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6287b28ce21b9ddb98096fb420546959fc3591ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:91:62:2d:18:4c:04:29:89:a0:c5:bf:6f:
63:9f:8a:ad:64:c8:b0:5a:05:6f:05:a4:4a:15:4f:
85:48:44:d5:f4:fa:da:14:45:8b:04:1f:93:c7:fe:
a1:e5:bd:43:85:51:9c:1f:3f:78:53:f7:1c:08:f2:
46:ab:81:f3:bb:72:c2:1a:01:06:93:14:7d:3e:3d:
ea:bb:6f:13:8e:53:bb:0d:37:84:e9:59:87:25:cb:
c2:84:d7:53:ea:03:c2:fc:ea:e8:b8:1f:ae:32:2e:
36:88:a4:c0:91:3e:5a:be:43:e3:15:6c:3a:54:cd:
f5:e0:3c:22:25:08:31:79:5f:04:01:7d:36:e2:cb:
90:bb:47:db:a2:83:1d:f3:46:a0:92:d7:f9:f4:f9:
da:99:ed:f4:0e:92:ec:32:4f:4f:1d:bb:26:13:6e:
2c:93:df:5f:12:5d:00:9f:d5:1f:e3:59:85:6b:cf:
d7:97:34:7e:e7:0b:9f:27:4a:b5:54:9f:f9:75:b6:
00:3e:3f:60:15:83:db:d1:f5:40:31:1c:5c:15:74:
43:0c:14:a2:48:df:90:9d:b4:f1:4e:0c:fa:ea:36:
de:cf:2b:d1:49:a5:b8:24:ad:6a:95:11:09:38:41:
a7:9d:f1:95:5e:4a:8a:4a:f1:ef:41:41:a6:33:e1:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:B2:8C:E2:1B:9D:DB:98:09:6F:B4:20:54:69:59:FC:35:91:AD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YoeyjOIbnduYCW-0IFRpWfw1ka0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.61.0/24
88.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a3:92:56:a3:5c:f3:5b:47:80:7b:66:06:03:b2:3a:d1:5f:
11:22:90:d3:4e:23:c2:65:f1:27:b6:5f:36:1d:81:a8:b7:37:
b0:ab:cc:de:64:1b:43:75:ae:05:11:2a:bd:7c:36:0f:b6:05:
79:76:99:1a:af:cb:c1:84:1a:72:3b:a5:fa:ca:f2:32:02:3e:
fc:8e:e5:cc:10:ca:1d:25:66:09:7b:dd:22:c7:b8:0e:d6:79:
ec:53:1d:78:eb:83:48:4c:f4:43:10:be:df:ef:dc:ee:21:db:
a9:58:5a:f8:2d:9f:75:e2:3c:f9:fb:05:b2:39:e9:fe:f3:04:
2e:17:17:ae:e9:49:f0:93:11:69:78:78:ed:f9:30:82:55:d4:
4d:5d:0d:1b:9c:90:2c:72:62:c8:71:83:25:be:de:79:91:6d:
8c:17:a8:ee:4b:1b:cd:12:cc:20:04:3f:c9:3b:1b:33:d1:40:
6d:97:d7:1c:64:98:26:f4:92:a1:76:91:55:91:bf:93:98:1f:
0b:df:6b:8f:7a:d5:78:98:ea:f4:d6:42:83:f5:de:77:df:7c:
44:15:93:2c:dd:78:4a:65:2e:e8:38:c1:78:aa:bb:bb:bf:8b:
75:66:da:db:74:5f:27:87:35:61:27:f7:0a:66:4a:9c:28:9c:
27:24:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org