Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kddzI69skoxyLh_PgW0Pc6w331s.roa
File: kddzI69skoxyLh_PgW0Pc6w331s.roa (raw, json)
Hash identifier: SjJdl2yRijj5fcQmIXkrrOZTh9OChShLKSQY7+9hAOE=
Subject key identifier: 91:D7:73:23:AF:6C:92:8C:72:2E:1F:CF:81:6D:0F:73:AC:37:DF:5B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0184E678D3B3F4D5720E641C5E1111C30995
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kddzI69skoxyLh_PgW0Pc6w331s.roa
Signing time: Tue 06 Dec 2022 08:06:28 +0000
ROA not before: Tue 06 Dec 2022 08:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 88.209.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:78:d3:b3:f4:d5:72:0e:64:1c:5e:11:11:c3:09:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 6 08:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91d77323af6c928c722e1fcf816d0f73ac37df5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d7:25:71:22:3d:30:04:c6:aa:48:1f:8f:3d:
f7:c8:60:59:d8:2f:1e:2f:14:9a:b3:4b:8b:fc:cf:
60:79:0b:64:fb:73:67:17:e4:21:2f:d3:69:8b:31:
a5:dc:07:66:84:ed:e8:1f:a1:e3:a1:a6:50:a9:0c:
5d:ab:a8:de:eb:c2:03:62:ab:be:87:9e:28:c4:36:
83:01:3d:16:87:cd:12:51:4f:3a:2d:17:1d:23:49:
4a:e2:39:13:b5:64:d1:f1:22:fd:73:8d:36:d0:cc:
7f:f5:c4:02:1e:59:9f:ec:55:76:f5:1d:2c:9e:73:
f5:02:0a:02:25:35:67:2f:e4:39:08:01:b4:51:07:
8a:ad:98:af:0f:7c:d1:85:c2:e4:f6:b1:2e:c7:9a:
7c:2c:89:2f:71:2b:3c:fb:af:f9:1f:b1:3a:51:f7:
2c:7e:b0:46:c6:8f:15:52:f3:7c:89:18:2d:aa:f4:
41:fd:0d:68:0d:27:61:dc:70:c2:23:a8:26:55:fd:
d8:a1:b8:1a:23:47:3c:da:7c:5f:6e:cc:e8:10:bb:
e3:99:e4:07:b6:6c:86:c6:90:0c:75:df:ad:db:76:
9d:1f:4a:97:58:e5:ad:2f:dc:f1:6a:83:31:c4:d9:
cb:e1:d4:9d:a9:14:06:b7:45:b3:a9:de:01:67:1b:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D7:73:23:AF:6C:92:8C:72:2E:1F:CF:81:6D:0F:73:AC:37:DF:5B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kddzI69skoxyLh_PgW0Pc6w331s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.226.0/24
Signature Algorithm: sha256WithRSAEncryption
31:96:f7:e1:08:e8:c5:d7:5c:d9:54:c3:45:49:37:f7:0f:2f:
5b:6c:c1:4e:14:18:15:15:5b:c9:73:47:47:6f:2f:1f:4b:1d:
19:f5:15:84:de:43:0f:f7:62:8b:e0:b8:7c:fb:87:b6:2d:61:
30:27:17:aa:64:57:30:c9:5c:96:b1:26:19:74:8c:94:66:eb:
ba:28:4d:85:48:81:ce:7c:e6:f8:27:9b:ac:0e:68:71:16:66:
6b:af:31:0d:52:27:47:5e:c9:21:22:cd:c2:83:47:68:92:35:
be:57:78:50:03:8e:c9:bb:e9:06:fa:44:fd:ac:52:71:e5:bf:
0a:8c:2e:95:04:6c:38:28:e8:1f:6f:17:8f:58:fb:26:49:de:
42:b7:03:93:fe:85:fb:90:1f:ee:6f:e0:27:a8:e0:16:c4:38:
34:35:e9:29:f3:74:dd:b7:99:ac:0c:4e:62:1a:b7:f4:ed:62:
0d:30:90:18:59:4d:94:0d:6e:fb:64:74:68:5a:af:80:88:c2:
09:75:27:92:cc:61:a9:e7:e7:d1:a7:c6:bb:93:b2:c9:25:b6:
19:0f:43:21:72:4b:d2:fb:07:0b:9f:5b:54:43:d4:60:ce:16:
8c:c0:fc:31:96:59:f6:90:23:22:fe:24:87:ee:f1:2b:2b:36:
35:4b:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org