Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/fBU6CdJhuY46FobBsVTxc_EO9aI.roa
File: fBU6CdJhuY46FobBsVTxc_EO9aI.roa (raw, json)
Hash identifier: NpWAIBGGAGDtN5jTulFRqLByG1KEUIc1DPFMxf5aZkQ=
Subject key identifier: 7C:15:3A:09:D2:61:B9:8E:3A:16:86:C1:B1:54:F1:73:F1:0E:F5:A2
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 0387E476
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/fBU6CdJhuY46FobBsVTxc_EO9aI.roa
Signing time: Sat 01 Jan 2022 07:59:22 +0000
ROA not before: Sat 01 Jan 2022 07:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212296
IP address blocks: 88.135.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59237494 (0x387e476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Jan 1 07:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c153a09d261b98e3a1686c1b154f173f10ef5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:78:e7:e4:78:87:4e:ce:eb:e8:79:97:34:
33:f1:8f:40:df:be:fe:93:aa:55:3f:82:3a:7d:74:
eb:3c:43:22:1f:d7:9a:c3:98:dc:51:5c:3b:b1:27:
b5:3c:b1:73:7e:4a:cb:9a:12:e1:3e:89:43:ca:e5:
2e:f6:ca:a2:b1:6f:e9:13:a3:5c:3d:a2:2c:90:b0:
63:80:bf:de:97:e9:6f:04:99:2a:cc:b9:20:b6:28:
66:74:63:83:d6:d4:8b:06:e1:03:e8:7c:6a:b7:0b:
98:32:d7:37:13:93:d4:19:38:64:12:88:2b:d0:4b:
34:ce:6e:b0:38:0e:7b:e0:f9:bc:4c:1f:2e:39:ed:
70:5f:9f:01:55:0b:1c:08:7e:2c:72:06:2c:39:82:
7c:eb:1d:91:58:66:a8:3c:f4:df:83:0a:af:86:c0:
91:e6:82:a1:7b:43:c8:0f:5b:c5:7b:f0:f1:05:3c:
f0:a4:94:54:eb:91:b1:24:ec:37:1b:8b:d2:95:80:
28:70:96:75:94:03:b0:e6:23:ec:b6:c1:07:7e:4d:
a6:49:e7:fb:97:25:47:d5:44:28:95:fe:79:3d:c2:
cb:a3:52:0a:80:65:f1:fd:0d:64:21:bc:1f:db:45:
82:d1:b1:11:54:8b:7a:cc:ed:53:16:fc:05:4e:d8:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:15:3A:09:D2:61:B9:8E:3A:16:86:C1:B1:54:F1:73:F1:0E:F5:A2
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/fBU6CdJhuY46FobBsVTxc_EO9aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.68.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fe:96:c0:fa:3d:ae:10:af:64:0a:a2:bb:32:06:74:0a:38:
da:8f:29:69:e8:c7:b0:f2:53:3c:63:8f:fc:ad:39:09:c7:c1:
f4:56:ef:ce:6a:de:ac:a6:94:73:4a:d1:6e:f0:52:e5:37:ac:
2f:af:ee:23:e7:97:58:9a:b4:f0:20:72:7d:42:1c:32:7e:3a:
97:2f:8a:3d:eb:07:fa:7a:4a:45:68:80:1e:11:db:1a:07:dc:
39:cf:6e:57:67:61:90:db:84:31:4c:2e:56:d5:dd:da:7b:af:
bb:c4:f8:ad:2a:17:2c:3a:d0:d8:f6:01:bd:50:a0:4b:f7:05:
07:e5:da:bb:63:db:38:2f:a6:5d:78:35:27:39:1c:ba:cf:51:
0f:2a:6b:44:d2:f2:e4:be:84:2f:ce:97:09:4a:5f:e8:04:87:
92:6d:2c:4a:43:02:c8:2f:35:a9:5c:32:a7:20:f4:03:e0:93:
b3:13:13:e5:5f:81:a7:72:81:66:22:90:27:32:66:31:56:3f:
fb:65:bf:f5:16:15:23:66:9e:67:38:d3:10:95:4c:67:f2:fb:
65:0f:9e:5d:63:27:af:af:6f:ca:b4:20:2f:5a:7e:76:2f:f4:
53:ec:3f:a4:e6:92:0a:b9:7f:2e:69:72:33:0b:32:fe:42:70:
bb:b9:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:53 2024 by rpki-client on console-ams.rpki-client.org