Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xNz1V0zWj1mH7_Iycn1Crj9Ii_o.roa
File: xNz1V0zWj1mH7_Iycn1Crj9Ii_o.roa (raw, json)
Hash identifier: SEJF3WdoVJXkttsBdxLe0r3u2HwOvjLHIu7u2x9zGuU=
Subject key identifier: C4:DC:F5:57:4C:D6:8F:59:87:EF:F2:32:72:7D:42:AE:3F:48:8B:FA
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01821F9D5E65D7EE128A79BB6663C3CDA676
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xNz1V0zWj1mH7_Iycn1Crj9Ii_o.roa
Signing time: Thu 21 Jul 2022 07:16:23 +0000
ROA not before: Thu 21 Jul 2022 07:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.230.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
88.209.232.0/22 maxlen: 22
88.209.229.0/24 maxlen: 24
88.209.244.0/23 maxlen: 23
88.209.252.0/24 maxlen: 24
83.137.152.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
83.137.154.0/24 maxlen: 24
88.209.204.0/22 maxlen: 32
88.209.204.0/24 maxlen: 32
88.209.200.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:9d:5e:65:d7:ee:12:8a:79:bb:66:63:c3:cd:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 21 07:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4dcf5574cd68f5987eff232727d42ae3f488bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:47:df:8e:60:a9:7c:eb:df:fa:a7:ac:41:
97:6a:1d:64:30:06:a8:38:16:15:01:43:91:7f:44:
7e:34:cf:72:98:9a:e6:11:90:8f:34:6c:bd:6c:c6:
2b:eb:a5:03:70:fc:06:2d:6b:63:99:9a:e6:3b:f3:
d5:00:a8:3d:f5:34:cf:a8:ba:e2:0f:52:64:dc:03:
70:06:aa:45:65:c2:d7:56:f5:f5:2c:f6:1d:df:be:
c5:c1:e8:fc:74:7f:91:5c:04:e1:c9:b1:ca:2a:54:
d1:46:47:5b:94:ac:9f:af:dd:88:45:84:05:6c:47:
7c:b8:db:91:db:f2:95:14:0d:a7:e3:3b:a6:e2:6a:
aa:56:f4:14:45:0e:54:22:b6:4d:85:71:0b:ad:5b:
92:ab:54:6c:e1:2d:86:2d:7b:32:91:e9:d2:d1:82:
11:1a:06:5f:9d:d1:98:da:4b:ce:11:b0:49:8d:01:
b8:c4:e7:87:97:d5:dc:f5:cc:f2:20:23:d3:98:c8:
f5:a2:31:65:72:96:61:e7:bd:8a:a4:95:4a:89:e0:
32:55:77:70:25:40:6b:73:7e:a6:a0:3a:6d:d9:91:
c7:18:fd:a8:f1:9c:9c:41:06:6d:38:1b:49:88:ec:
3e:ab:7e:36:6d:d0:b7:e5:2a:41:ef:9c:5b:e9:99:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:F5:57:4C:D6:8F:59:87:EF:F2:32:72:7D:42:AE:3F:48:8B:FA
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xNz1V0zWj1mH7_Iycn1Crj9Ii_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
83.137.154.0/24
88.209.200.0/21
88.209.229.0-88.209.230.255
88.209.232.0/22
88.209.244.0/23
88.209.252.0/24
88.209.255.0/24
92.52.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b7:b3:85:fc:dd:72:e5:83:03:7f:59:86:b3:e7:7d:f4:33:
cf:d0:9f:c1:84:60:84:25:69:be:bc:01:db:32:35:2c:45:bf:
2a:56:90:54:af:28:e0:b1:2f:f9:97:8c:43:1a:bf:14:32:0e:
ac:78:2b:30:92:f0:c3:67:ac:53:8f:05:3d:e1:fd:ce:fd:b9:
bf:64:db:b1:1d:57:04:f6:09:9e:15:36:b0:d2:f4:48:1e:7e:
b0:53:08:bc:36:c2:c3:e1:c1:c2:80:a7:d3:71:4f:e6:ae:8a:
b4:6d:16:96:53:84:15:a2:1f:56:d5:8f:97:ff:3a:4a:dd:d6:
ec:f3:bc:8a:cf:f1:2f:d3:9d:7f:98:47:46:0d:e3:b2:f3:f3:
f4:7c:20:34:a2:ad:a8:28:78:bc:8a:63:0e:a3:63:54:0b:89:
e5:10:8a:9e:50:42:e8:ab:fa:13:48:ab:7e:26:0d:1b:be:ff:
42:b1:12:be:ff:d1:41:4e:c3:06:de:74:d6:1b:57:38:41:89:
39:a8:29:95:f9:24:ed:70:a2:44:e4:6d:5a:f5:31:8c:d0:30:
7a:35:a1:58:24:47:62:47:7b:34:ee:2a:b3:ec:e4:29:fe:96:
5c:c9:dc:7f:5a:3e:9d:f1:dc:4e:70:fd:c7:b6:e4:d0:47:68:
71:8c:55:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:57 2024 by rpki-client on console-ams.rpki-client.org