Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eCwBJvDfef1--5JjkK673TYHbqk.roa
File: eCwBJvDfef1--5JjkK673TYHbqk.roa (raw, json)
Hash identifier: 0W/i4trsXOBgTRj2ZboXMCSNrXyMPQz+rCdjshGwqeQ=
Subject key identifier: 78:2C:01:26:F0:DF:79:FD:7E:FB:92:63:90:AE:BB:DD:36:07:6E:A9
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0183DA975E6EDB88653DA48B9CDA158BA3A5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eCwBJvDfef1--5JjkK673TYHbqk.roa
Signing time: Sat 15 Oct 2022 07:41:36 +0000
ROA not before: Sat 15 Oct 2022 07:41:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 88.209.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:da:97:5e:6e:db:88:65:3d:a4:8b:9c:da:15:8b:a3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 15 07:41:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=782c0126f0df79fd7efb926390aebbdd36076ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:90:14:50:19:ed:79:0a:cf:2f:2f:e7:de:
90:8b:fa:69:a7:06:46:1b:ba:27:b4:b5:85:ed:e9:
8c:70:ab:00:2c:d9:7d:3c:ea:06:39:85:a6:c6:9e:
de:db:bc:cf:1c:bc:05:e2:87:3b:85:00:f8:3f:42:
bc:2b:d0:2f:04:5f:39:b4:0f:27:f0:e5:15:7c:b8:
6a:43:c0:cf:34:ed:2a:2d:69:15:5c:a0:a1:25:a4:
a4:7a:2f:44:11:77:40:3f:c1:12:41:eb:40:89:20:
e9:42:a7:2a:29:d4:f7:52:da:7b:a3:4a:1a:e8:05:
0f:c3:a7:78:d1:19:b1:85:0b:b7:94:db:8f:3a:0f:
9c:43:a2:0f:1c:85:dd:a7:0d:f5:4e:10:40:7f:46:
60:21:14:3b:88:96:89:00:a5:e6:62:16:0c:8f:55:
42:7f:cf:d6:66:be:2d:e5:e0:de:cb:32:c8:cc:91:
58:13:7e:70:28:a7:e9:b5:0e:ec:8e:88:5b:c4:f5:
8d:b2:ab:53:ec:44:d7:60:0a:f3:01:7d:93:ab:34:
13:e0:4c:37:46:72:6e:81:59:7e:96:cd:60:e1:18:
5d:5a:1e:9d:4d:ed:6b:b7:09:52:b4:e3:bd:0f:16:
b3:87:04:67:c8:4f:f0:47:4c:b0:d2:69:88:00:f8:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2C:01:26:F0:DF:79:FD:7E:FB:92:63:90:AE:BB:DD:36:07:6E:A9
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eCwBJvDfef1--5JjkK673TYHbqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.252.0/24
Signature Algorithm: sha256WithRSAEncryption
28:77:63:74:09:4c:e4:5c:b8:db:6a:31:1a:0e:75:a3:dd:2a:
5f:c0:ac:dd:05:8d:c4:a7:c1:65:47:e8:14:cc:13:39:ef:1f:
8d:0e:d8:be:46:61:eb:53:53:c3:dd:ee:4c:cb:78:23:64:66:
f8:67:30:61:1f:f4:a9:b5:c1:53:97:de:de:ed:cb:57:72:5d:
33:c6:c2:a2:21:bb:95:e7:77:26:55:39:a5:25:bf:66:73:23:
74:cd:14:83:48:89:ab:66:b5:16:09:8e:7b:bf:0c:07:53:08:
6e:01:06:29:31:70:53:ee:c3:d7:ea:7a:8f:48:b9:18:8a:90:
60:35:1f:9f:bc:8b:b4:a6:b8:86:cb:b5:9c:af:cd:03:d6:92:
da:96:76:8d:82:04:66:55:c9:3c:29:43:33:4d:a5:70:e7:7e:
7c:74:f7:cb:a4:20:f3:2b:00:2c:09:dc:6b:44:d5:d9:4b:eb:
8f:bf:88:ff:ac:ee:4d:f1:35:28:02:e2:f9:6d:c1:a8:bb:58:
4e:2c:ba:4f:87:91:d0:5c:16:0d:b1:70:90:e0:7a:6b:67:0c:
0a:0d:fa:ab:16:27:fa:ad:e4:7a:c5:50:51:81:8f:7f:f9:32:
04:cc:df:45:28:a3:87:b5:f2:bc:10:ac:b0:9c:14:ce:67:5e:
e4:d1:94:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPal15u24hlPaSLnNoVi6OlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjIxMDE1MDc0MTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODJjMDEyNmYwZGY3OWZkN2VmYjkyNjM5MGFlYmJkZDM2MDc2ZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SmQFFAZ7XkKzy8v596Qi/pppwZG
G7ontLWF7emMcKsALNl9POoGOYWmxp7e27zPHLwF4oc7hQD4P0K8K9AvBF85tA8n
8OUVfLhqQ8DPNO0qLWkVXKChJaSkei9EEXdAP8ESQetAiSDpQqcqKdT3Utp7o0oa
6AUPw6d40RmxhQu3lNuPOg+cQ6IPHIXdpw31ThBAf0ZgIRQ7iJaJAKXmYhYMj1VC
f8/WZr4t5eDeyzLIzJFYE35wKKfptQ7sjohbxPWNsqtT7ETXYArzAX2TqzQT4Ew3
RnJugVl+ls1g4RhdWh6dTe1rtwlStOO9DxazhwRnyE/wR0yw0mmIAPhD7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHgsASbw33n9fvuSY5Cuu902B26pMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvZUN3Qkp2RGZlZjEtLTVKamtLNjczVFlIYnFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH8MA0G
CSqGSIb3DQEBCwUAA4IBAQAod2N0CUzkXLjbajEaDnWj3SpfwKzdBY3Ep8FlR+gU
zBM57x+NDti+RmHrU1PD3e5My3gjZGb4ZzBhH/SptcFTl97e7ctXcl0zxsKiIbuV
53cmVTmlJb9mcyN0zRSDSImrZrUWCY57vwwHUwhuAQYpMXBT7sPX6nqPSLkYipBg
NR+fvIu0priGy7Wcr80D1pLalnaNggRmVck8KUMzTaVw5358dPfLpCDzKwAsCdxr
RNXZS+uPv4j/rO5N8TUoAuL5bcGou1hOLLpPh5HQXBYNsXCQ4HprZwwKDfqrFif6
reR6xVBRgY9/+TIEzN9FKKOHtfK8EKywnBTOZ17k0ZQI
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org