Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZOLoVj3hwtLAVhyFGQ3yEvmuPYE.roa
File: ZOLoVj3hwtLAVhyFGQ3yEvmuPYE.roa (raw, json)
Hash identifier: oAxzKOMpvaMGq73FJDoDU4gyBk+G0iMMH++tfM1B6KM=
Subject key identifier: 64:E2:E8:56:3D:E1:C2:D2:C0:56:1C:85:19:0D:F2:12:F9:AE:3D:81
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018249C2E56F3D7342B525BA872E7A661A8C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZOLoVj3hwtLAVhyFGQ3yEvmuPYE.roa
Signing time: Fri 29 Jul 2022 11:41:25 +0000
ROA not before: Fri 29 Jul 2022 11:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207236
IP address blocks: 88.151.56.0/22 maxlen: 22
88.151.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:c2:e5:6f:3d:73:42:b5:25:ba:87:2e:7a:66:1a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 29 11:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64e2e8563de1c2d2c0561c85190df212f9ae3d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:35:8c:ac:aa:11:40:04:99:72:fe:14:0b:4c:
fe:5e:5c:3f:3a:a0:75:0a:88:d5:15:b0:7b:4e:e7:
ae:9a:8f:15:1d:ad:0c:73:59:45:ef:97:02:2e:7b:
d0:e3:56:bb:91:06:7d:1c:5d:00:24:2b:26:20:01:
32:5c:0e:91:22:46:f6:bb:37:90:1c:d1:c1:71:bc:
7e:ff:a1:a2:26:ac:3b:a5:2c:99:69:8f:5b:4d:cb:
a3:fb:1d:f3:3c:1e:f0:c1:18:d8:0c:82:95:56:df:
85:61:a2:b2:82:82:2c:73:1c:7a:5f:6e:63:7e:47:
f0:45:be:e6:92:61:43:ef:a6:7c:9e:44:ba:cc:08:
9a:3c:ef:69:e5:79:a8:29:6b:a0:93:45:52:2a:0d:
a9:27:d3:00:a4:bc:5c:4d:60:a5:49:7b:bd:5b:8a:
f3:fd:d7:a6:af:c7:a1:70:dd:65:e8:12:26:91:64:
ad:35:e7:48:8a:68:42:79:fe:d1:2e:69:04:b1:09:
00:88:f3:2c:d8:50:1f:f2:01:36:ab:d6:2b:d2:8a:
ae:bb:6a:32:24:72:bf:e6:fb:68:0a:f3:49:21:94:
ef:bc:50:82:ad:fa:21:6d:86:ab:1d:3c:8d:61:01:
89:6a:0f:ce:bd:fc:3c:e5:99:d2:81:57:3c:76:e2:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:E8:56:3D:E1:C2:D2:C0:56:1C:85:19:0D:F2:12:F9:AE:3D:81
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZOLoVj3hwtLAVhyFGQ3yEvmuPYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0-88.151.60.255
Signature Algorithm: sha256WithRSAEncryption
63:3e:e5:af:68:f1:1f:4c:d6:70:0c:0b:3c:f2:68:d0:5f:fb:
f5:3c:55:aa:b2:d2:eb:83:3d:d1:56:55:cd:a0:65:09:2d:19:
2c:4a:a7:cc:72:4a:0a:3a:ba:bf:76:82:55:07:a2:41:58:53:
82:b6:e5:6e:09:ec:59:19:c7:ce:00:38:d5:0d:3f:77:a4:b1:
bc:24:88:52:19:a7:d2:54:f3:68:27:2d:ba:f5:d2:5d:cd:64:
4d:dc:0d:fb:d9:b5:70:10:00:9d:9a:f3:30:65:f7:f8:f3:13:
59:16:b6:4b:d6:3c:fd:aa:15:79:c8:b1:2f:c5:65:9f:04:d7:
51:15:07:59:d8:ce:f2:f7:2b:55:b5:03:1f:e9:b2:e7:33:50:
2d:7c:67:76:37:b0:f0:e8:12:1b:24:b9:ab:3f:27:98:fe:25:
71:fd:73:7e:ec:d7:02:3b:3a:45:0b:10:f7:04:d2:25:ef:b2:
58:43:10:38:da:df:1a:a6:0b:be:7e:59:ff:e2:36:fe:f0:88:
84:38:bf:99:43:35:6a:8c:95:85:dd:0c:1d:90:d8:6f:ff:df:
e4:88:ce:87:80:3e:6a:aa:63:98:0c:e6:53:e9:e0:85:bb:30:
56:5f:40:f0:5b:0a:3b:3c:94:9e:04:36:45:57:00:83:75:bd:
99:7c:d0:8b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYJJwuVvPXNCtSW6hy56ZhqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjIwNzI5MTE0MTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGUyZTg1NjNkZTFjMmQyYzA1NjFjODUxOTBkZjIxMmY5YWUzZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDWMrKoRQASZcv4UC0z+Xlw/OqB1
CojVFbB7Tueumo8VHa0Mc1lF75cCLnvQ41a7kQZ9HF0AJCsmIAEyXA6RIkb2uzeQ
HNHBcbx+/6GiJqw7pSyZaY9bTcuj+x3zPB7wwRjYDIKVVt+FYaKygoIscxx6X25j
fkfwRb7mkmFD76Z8nkS6zAiaPO9p5XmoKWugk0VSKg2pJ9MApLxcTWClSXu9W4rz
/demr8ehcN1l6BImkWStNedIimhCef7RLmkEsQkAiPMs2FAf8gE2q9Yr0oquu2oy
JHK/5vtoCvNJIZTvvFCCrfohbYarHTyNYQGJag/Ovfw85ZnSgVc8duL87wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGTi6FY94cLSwFYchRkN8hL5rj2BMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvWk9Mb1ZqM2h3dExBVmh5RkdRM3lFdm11UFlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANYlzgD
BABYlzwwDQYJKoZIhvcNAQELBQADggEBAGM+5a9o8R9M1nAMCzzyaNBf+/U8Vaqy
0uuDPdFWVc2gZQktGSxKp8xySgo6ur92glUHokFYU4K25W4J7FkZx84AONUNP3ek
sbwkiFIZp9JU82gnLbr10l3NZE3cDfvZtXAQAJ2a8zBl9/jzE1kWtkvWPP2qFXnI
sS/FZZ8E11EVB1nYzvL3K1W1Ax/psuczUC18Z3Y3sPDoEhskuas/J5j+JXH9c37s
1wI7OkULEPcE0iXvslhDEDja3xqmC75+Wf/iNv7wiIQ4v5lDNWqMlYXdDB2Q2G//
3+SIzoeAPmqqY5gM5lPp4IW7MFZfQPBbCjs8lJ4ENkVXAIN1vZl80Is=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org