Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pZfAL4xEZAQLMgR9tXFI4eCyU3g.roa
File: pZfAL4xEZAQLMgR9tXFI4eCyU3g.roa (raw, json)
Hash identifier: dHWHHaaSaLkX85SUtG4BUL0fMo2etWiPWF0FfpwZfuo=
Subject key identifier: A5:97:C0:2F:8C:44:64:04:0B:32:04:7D:B5:71:48:E1:E0:B2:53:78
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01823A8E09DFB44ADCBA792AE38C466C62B1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pZfAL4xEZAQLMgR9tXFI4eCyU3g.roa
Signing time: Tue 26 Jul 2022 12:49:23 +0000
ROA not before: Tue 26 Jul 2022 12:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 88.209.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:8e:09:df:b4:4a:dc:ba:79:2a:e3:8c:46:6c:62:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 26 12:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a597c02f8c4464040b32047db57148e1e0b25378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:57:08:9c:d3:8c:25:6e:44:93:6a:0b:ad:
a5:08:66:47:ac:e0:ff:8a:c8:49:76:ff:40:9a:99:
87:9b:e1:e1:82:41:65:92:5e:08:3c:ac:b1:a1:4f:
a0:bc:25:c7:6b:eb:cf:e0:60:52:1a:8b:ef:f3:9b:
2a:d2:88:2e:bd:44:7a:be:a8:65:75:33:d4:b6:6d:
1f:75:1e:8a:4c:3c:3e:67:87:12:8a:0d:d7:44:cc:
94:84:34:bd:eb:bc:28:c9:f0:cc:b2:f9:f2:7f:29:
f3:81:a1:6f:cb:e7:77:2f:bd:56:3d:f7:2e:1c:a3:
c8:78:a9:2c:c4:06:ac:1e:a1:c9:5c:4b:1a:a4:e0:
03:b5:b7:b8:3f:39:76:9c:e3:af:61:25:e5:33:13:
dd:58:ac:91:d1:87:f8:a4:d7:e9:6b:b1:94:fc:45:
f9:04:9b:fe:07:f7:eb:e8:29:ed:73:23:66:7f:27:
fc:82:0b:d3:74:df:f8:1a:5d:eb:1f:e5:59:48:36:
b8:db:a2:6f:ba:eb:04:f2:52:f3:d5:58:c2:d7:2f:
82:06:e6:41:06:44:27:26:db:69:2f:cd:cb:6a:84:
94:73:46:fe:25:0a:b6:b4:ea:6b:91:2b:3f:e3:b7:
dc:de:bb:09:eb:9f:97:82:de:50:9b:ed:59:f9:fb:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:97:C0:2F:8C:44:64:04:0B:32:04:7D:B5:71:48:E1:E0:B2:53:78
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pZfAL4xEZAQLMgR9tXFI4eCyU3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
87:de:79:5a:e5:5f:0d:aa:bc:a4:c4:b6:29:08:f4:4c:8b:fd:
33:0b:3d:22:2e:be:60:35:27:54:be:c2:6d:eb:42:65:d8:a4:
b2:cb:0a:f1:64:cb:52:9e:28:c7:14:d7:af:a0:94:ed:47:a9:
bc:ff:51:9e:db:ce:b4:a2:0d:57:ff:df:d4:7c:68:e5:00:c6:
54:ba:fd:ae:85:63:71:39:e5:28:c3:34:1f:d9:94:40:0d:a1:
ec:43:ac:22:99:8b:a1:be:26:ad:a7:61:d2:aa:af:44:d3:fa:
bd:24:77:ee:bf:cb:f7:a1:2f:50:7b:7b:67:21:dd:a8:18:9e:
6b:99:14:f0:f5:85:b6:f3:5e:2b:df:38:9a:b2:3e:6e:41:58:
10:75:91:bc:82:75:8a:d7:e8:26:29:20:93:6d:1d:e2:20:93:
b9:f5:ef:10:48:f9:51:07:a4:f7:be:b5:c1:d1:fe:ba:d0:cf:
ed:fd:b3:72:a0:ff:59:48:c1:99:4e:8e:19:90:5a:d9:a7:56:
be:88:5f:93:5b:7c:bf:37:20:ce:b4:ca:3e:86:68:86:96:9c:
ad:68:f5:a5:5d:aa:c7:91:f4:26:73:99:18:b1:39:47:de:bf:
c1:25:1b:90:07:a9:10:f7:ec:20:d8:d9:3f:7a:6e:a9:5c:ca:
d1:0f:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org