Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cZCTFSUzkbvMKtlPuown-djekj0.roa
File: cZCTFSUzkbvMKtlPuown-djekj0.roa (raw, json)
Hash identifier: dUwkDhwDUXpVFuWtx6h3oKdH0/EPC6H1sISsg2Rf8SU=
Subject key identifier: 71:90:93:15:25:33:91:BB:CC:2A:D9:4F:BA:8C:27:F9:D8:DE:92:3D
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01847B3B71E5BC854814AA5E14456353774D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cZCTFSUzkbvMKtlPuown-djekj0.roa
Signing time: Tue 15 Nov 2022 12:20:04 +0000
ROA not before: Tue 15 Nov 2022 12:20:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 88.209.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:3b:71:e5:bc:85:48:14:aa:5e:14:45:63:53:77:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 15 12:20:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71909315253391bbcc2ad94fba8c27f9d8de923d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6e:e8:97:41:65:2f:75:b5:58:c8:03:7c:e1:
b2:ea:59:ab:02:3a:f5:81:73:3b:b4:13:eb:dd:63:
4b:1b:24:35:a0:3c:88:f5:b1:3b:28:7b:d0:6b:e9:
e2:86:8c:20:cd:49:f3:ba:56:d1:e9:cc:2c:d8:27:
ef:ac:12:4c:2e:ce:44:d4:a0:eb:a6:f1:f3:7d:29:
a9:2b:63:1f:94:31:f2:b4:f9:b5:ec:8a:36:68:73:
fc:54:a7:d8:03:03:41:9d:92:f2:57:87:8a:24:04:
21:a9:8e:be:6c:c0:b3:67:f1:d9:56:3f:22:b4:e0:
63:e9:cc:32:4a:db:96:d3:f4:4c:61:28:53:ab:71:
e1:97:81:b8:2a:33:01:e6:28:2b:c3:d1:98:22:28:
30:0d:79:4d:05:15:3e:76:33:72:4b:e8:6d:0a:bb:
8f:53:fc:ca:d7:22:02:b5:79:55:99:12:88:b3:51:
28:a7:56:9e:6c:25:21:cb:bf:11:70:00:3a:e1:5f:
c4:15:58:42:a8:d7:4b:8e:28:97:1d:03:ed:74:04:
c3:63:61:82:ac:06:7d:cd:f2:63:61:8c:00:64:7d:
b7:92:1f:3d:79:dc:fd:a8:68:d4:9a:67:81:78:95:
25:5c:d7:00:12:e5:c4:d4:60:52:90:16:89:d2:74:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:90:93:15:25:33:91:BB:CC:2A:D9:4F:BA:8C:27:F9:D8:DE:92:3D
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cZCTFSUzkbvMKtlPuown-djekj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c0:38:20:8d:d5:12:91:7c:1e:07:45:e6:1a:c4:b8:39:50:
db:6e:7f:84:67:98:a5:cb:b0:eb:f8:bb:c0:0f:2e:8f:73:88:
76:1d:4c:0b:9b:aa:c4:51:ae:d0:a7:60:27:46:9b:ab:3a:9b:
44:5a:ab:fd:b3:1b:e0:aa:9f:cc:80:08:28:5b:0a:21:b9:6d:
4a:9c:42:77:21:8e:68:e1:6c:38:5f:fb:54:7b:71:28:f5:a8:
44:48:94:3c:87:e9:c2:8e:62:1c:ff:c8:f3:e1:11:02:b5:c9:
eb:ec:c3:76:6e:77:a7:fb:16:dd:9f:19:c1:76:fd:ab:a4:76:
99:e6:7e:3f:c1:b1:7c:11:bb:82:b3:5b:65:b4:99:a1:1c:dc:
da:51:a4:8e:f4:d0:fd:67:7b:9a:72:a1:37:be:e7:5b:a0:c2:
05:59:f2:4e:86:a5:35:01:5f:a0:3a:2d:4d:a6:50:52:d8:10:
f1:f5:e0:6e:05:5c:f7:04:a1:03:20:3f:09:e0:e7:99:e3:ac:
9f:4b:f6:e1:7c:ae:ba:80:6f:8b:0f:3c:3a:d2:f9:4f:57:78:
a9:e3:7c:46:64:03:33:8d:a3:56:f0:c8:1c:3c:eb:eb:3f:bf:
0c:a1:6e:7d:3d:0d:ab:22:8b:a5:60:9a:2c:de:01:e0:bc:1c:
b0:e3:cf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org