Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/dxm6nYQO0SQ6bAdmEkYms833UWo.roa
File: dxm6nYQO0SQ6bAdmEkYms833UWo.roa (raw, json)
Hash identifier: qZi3CmZamD7P/FLNTpAunf00Ws3x02ArWNr37MlzvnI=
Subject key identifier: 77:19:BA:9D:84:0E:D1:24:3A:6C:07:66:12:46:26:B3:CD:F7:51:6A
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 0220BB93
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/dxm6nYQO0SQ6bAdmEkYms833UWo.roa
Signing time: Sat 01 Jan 2022 03:59:31 +0000
ROA not before: Sat 01 Jan 2022 03:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 88.214.59.0/24 maxlen: 24
185.249.196.0/24 maxlen: 24
194.156.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35699603 (0x220bb93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Jan 1 03:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7719ba9d840ed1243a6c0766124626b3cdf7516a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:d2:87:49:a8:f5:13:65:95:ea:b8:54:0c:
14:4e:19:0a:dd:b9:7c:50:e6:ae:e6:81:da:72:e1:
12:49:13:89:53:40:ec:ce:3f:1d:52:27:d9:87:f4:
a4:d9:15:8e:c1:16:9e:5e:31:38:fe:4e:f8:3e:5f:
62:08:ec:ac:3a:41:76:a6:c3:41:9f:d9:87:15:e1:
15:08:f8:da:df:7f:c6:a7:1f:d7:6b:ae:21:fd:0b:
59:e3:ff:eb:d6:be:78:a7:18:c3:df:46:3b:c1:9f:
93:19:5e:2f:07:7d:6f:4b:5f:cb:e3:d9:21:18:c4:
2a:7f:06:63:51:97:4a:de:ed:9f:29:fa:e2:a4:14:
9a:7a:81:0a:99:40:7b:d3:90:11:ac:2c:f1:45:0c:
02:88:f8:d5:eb:8a:48:91:36:80:55:87:1b:ca:b2:
44:0a:3b:17:e9:89:d4:dc:f4:b6:73:50:b8:47:0d:
ad:52:31:74:7b:96:60:fc:bb:b6:fa:a0:5c:4b:36:
c6:27:de:30:4e:b5:df:76:60:bb:9d:33:b4:25:c5:
45:79:4d:ff:5a:1b:2f:63:93:ef:78:2c:90:a0:81:
ed:70:70:4e:c3:61:52:03:fa:9d:60:0a:7a:20:86:
27:2e:90:70:c0:97:3a:12:7c:39:95:31:6f:8c:51:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:19:BA:9D:84:0E:D1:24:3A:6C:07:66:12:46:26:B3:CD:F7:51:6A
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/dxm6nYQO0SQ6bAdmEkYms833UWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.59.0/24
185.249.196.0/24
194.156.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fe:fd:5f:86:ab:86:b1:7b:ec:84:9d:8e:f6:2e:3d:23:8c:
54:f8:21:b5:14:09:2c:62:cd:78:1d:ef:de:de:df:63:54:ec:
0a:57:fe:4c:74:e6:67:10:46:59:98:75:de:dc:56:53:37:ff:
e0:42:18:45:e2:08:16:75:45:4e:7b:ad:08:3c:41:4d:1d:7d:
8d:40:1f:f7:25:70:e3:38:68:bf:7c:e5:dd:2e:e5:cf:10:e6:
35:a4:56:d1:94:98:91:bc:20:48:36:d9:37:8f:7e:fc:aa:e4:
88:a2:1c:74:40:35:bf:63:68:37:46:8c:4b:aa:7a:b2:79:23:
a9:55:3a:21:12:47:d8:06:93:a4:5a:8a:6d:83:ba:85:e1:79:
10:bf:2b:01:c6:9d:77:19:49:2a:b9:62:1c:83:7c:09:31:b1:
ab:10:49:25:8d:46:e6:27:4b:db:43:89:2a:39:b6:6b:e5:35:
f0:22:ef:ca:63:21:c8:fe:87:09:72:6c:a4:af:86:6f:d3:dd:
f9:d7:10:86:b2:4e:aa:d3:75:81:37:b4:c6:91:0f:9d:48:fe:
d1:bd:01:61:99:d7:31:48:71:32:57:9f:28:63:2f:2d:7f:67:
7f:b3:e7:cf:6d:9a:15:0d:86:ee:a5:82:a7:08:7c:4c:7d:4c:
62:05:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:49 2023 by rpki-client on console-fra.rpki-client.org