Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/aaUpBsnNAP_7PzRUUY3NtM7Nn34.roa
File: aaUpBsnNAP_7PzRUUY3NtM7Nn34.roa (raw, json)
Hash identifier: nyQ27oTVixqDFmfAlJYrbG0hd9uxHkjqhwkfNfXP8pM=
Subject key identifier: 69:A5:29:06:C9:CD:00:FF:FB:3F:34:54:51:8D:CD:B4:CE:CD:9F:7E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0181F7D4D719E8D6EA1898DADE31E0B256B1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/aaUpBsnNAP_7PzRUUY3NtM7Nn34.roa
Signing time: Wed 13 Jul 2022 13:52:09 +0000
ROA not before: Wed 13 Jul 2022 13:52:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.230.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
88.209.232.0/22 maxlen: 22
88.209.229.0/24 maxlen: 24
88.209.244.0/23 maxlen: 23
88.209.252.0/24 maxlen: 24
83.137.152.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
88.209.204.0/24 maxlen: 32
88.209.204.0/22 maxlen: 32
88.209.200.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:d4:d7:19:e8:d6:ea:18:98:da:de:31:e0:b2:56:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 13 13:52:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69a52906c9cd00fffb3f3454518dcdb4cecd9f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:57:cc:87:98:ce:93:f5:ed:96:dd:4d:dd:
47:07:37:97:21:f1:0a:0f:67:c5:5e:ca:28:61:f3:
3c:9a:51:8e:ef:1c:ac:f8:22:57:6b:f1:81:f9:bb:
4a:3b:7c:c7:a2:5b:2f:07:79:82:7d:ac:d6:95:22:
c7:ef:5a:41:e0:59:62:6d:13:7d:6e:4f:aa:b8:76:
5a:17:86:72:95:b4:5e:28:5c:53:ad:ed:7a:4f:b9:
58:e3:3c:f8:30:21:bd:e0:b2:27:54:77:05:59:92:
fa:b2:d4:6a:a0:fe:d0:25:4f:e4:8d:92:23:ea:1c:
a7:d7:7f:62:57:f6:1c:a6:a9:a8:08:58:11:f7:dd:
53:61:c3:f0:36:24:d1:d4:be:60:5e:9d:30:47:9b:
c5:53:24:22:a0:10:cb:c5:69:db:dd:9a:f8:23:ab:
2b:61:d1:c2:53:4e:b2:4e:a4:d5:34:46:6b:4f:68:
4d:eb:7a:67:53:08:a6:69:28:ca:a6:76:b2:44:0b:
a2:de:65:ea:f0:f1:ff:94:ec:e9:61:32:8b:86:63:
d0:49:3b:e3:da:40:d8:76:20:38:4a:97:16:a2:32:
d6:1d:60:dd:e4:13:cf:24:1d:1e:5e:ee:65:2b:4b:
cb:ad:a8:fd:16:90:37:63:13:93:02:74:13:f4:c3:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A5:29:06:C9:CD:00:FF:FB:3F:34:54:51:8D:CD:B4:CE:CD:9F:7E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/aaUpBsnNAP_7PzRUUY3NtM7Nn34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
88.209.200.0/21
88.209.229.0-88.209.230.255
88.209.232.0/22
88.209.244.0/23
88.209.252.0/24
88.209.255.0/24
92.52.214.0/24
Signature Algorithm: sha256WithRSAEncryption
70:58:1d:87:8d:48:8a:b6:19:ec:e1:d2:da:92:18:ec:1d:ae:
a5:ba:82:90:07:b2:41:ce:65:ee:f7:fb:68:10:e9:2e:52:8a:
2b:33:40:78:30:bc:c2:e5:1d:e4:8b:8a:62:d8:f8:54:c1:cf:
c3:11:ba:a1:72:43:45:0f:2f:f6:fe:94:4d:1a:1b:d7:65:d4:
a7:03:0b:e0:d0:a1:e1:c0:05:dd:a8:a7:81:53:10:cc:38:19:
80:be:93:02:92:89:ac:5f:51:bb:55:c7:a9:9d:37:dd:e9:cf:
f0:57:73:53:70:03:9b:5e:4f:75:5e:2b:41:83:9b:37:b0:76:
30:7e:9b:9e:7b:31:6a:30:80:86:06:0e:bd:e1:ef:35:32:bd:
48:ff:13:19:62:64:7d:a1:5e:94:46:c3:0b:72:28:60:67:62:
0a:81:46:6a:3a:ff:c5:ee:38:c8:a3:62:d5:35:41:b3:7b:b6:
09:56:92:c8:0a:42:cb:3f:7a:88:bf:c5:47:c5:be:f6:48:ff:
61:d6:02:d6:a6:35:d0:b5:19:7c:87:e4:d0:35:bd:4e:a1:e5:
3e:f6:21:da:d8:d1:9b:9b:dc:e1:1a:28:d7:90:52:61:b7:80:
87:f3:62:d9:19:59:2a:e2:85:50:d9:32:cd:79:bd:a6:01:e7:
ad:30:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org