Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/jyuSaDegHOCgHZMlCNtaZiGnapc.roa
File: jyuSaDegHOCgHZMlCNtaZiGnapc.roa (raw, json)
Hash identifier: 8n7FTqjeR+g6kHYAvq67Z0iTtwPDA8Op4R0guahZzl0=
Subject key identifier: 8F:2B:92:68:37:A0:1C:E0:A0:1D:93:25:08:DB:5A:66:21:A7:6A:97
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D94106F2925E61D4F3444DAA5D61250
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/jyuSaDegHOCgHZMlCNtaZiGnapc.roa
Signing time: Sun 01 Jan 2023 13:44:58 +0000
ROA not before: Sun 01 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26383
IP address blocks: 88.151.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:10:6f:29:25:e6:1d:4f:34:44:da:a5:d6:12:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f2b926837a01ce0a01d932508db5a6621a76a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ed:0f:ba:e4:d6:a0:5e:d6:07:16:4b:83:c8:
ce:1a:90:e5:ef:3c:e7:ff:70:80:3d:a6:a2:58:84:
6a:c8:d8:2d:ce:10:db:d8:0a:c1:d8:29:f3:f0:4a:
6f:31:64:42:22:c8:c3:64:55:43:59:84:e0:a2:49:
f2:46:32:04:62:54:d6:3c:4d:15:e0:ae:b2:be:a3:
e1:e1:fd:48:a0:0c:67:ae:0f:a8:27:28:94:2f:74:
ad:e2:fe:60:24:de:85:91:e1:f9:e9:6f:76:f6:57:
e6:83:09:6a:3b:f2:91:c2:bb:ca:4a:d2:80:cf:fc:
87:a5:b9:05:10:92:2e:df:7c:f9:4e:f5:88:cc:6d:
41:b1:ee:de:12:55:10:59:8d:a8:6c:04:e9:22:2c:
9c:c4:61:e7:8f:14:16:14:b3:46:b1:33:5e:5b:15:
8d:f1:84:78:9a:9a:b2:45:66:78:6d:3c:8a:56:ff:
0f:c3:8e:17:1f:8c:32:02:e2:0e:fe:35:70:9f:01:
57:99:c5:50:b1:06:89:7e:ad:34:c9:c3:d2:ef:ea:
ad:7c:aa:29:47:70:e6:3f:2e:cb:85:4f:f5:40:cc:
da:20:a9:63:c1:06:b8:09:ce:62:00:ea:23:a2:97:
6c:3c:98:dc:7a:3d:a0:5a:59:35:b0:95:30:90:ce:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2B:92:68:37:A0:1C:E0:A0:1D:93:25:08:DB:5A:66:21:A7:6A:97
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/jyuSaDegHOCgHZMlCNtaZiGnapc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.195.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b1:c1:0b:e2:f3:fc:be:00:86:ad:04:ed:e4:ad:5f:6d:e5:
80:32:18:56:e1:b3:61:bb:23:d2:57:a8:fe:f5:5a:ed:72:2b:
68:34:e3:64:6f:d8:b7:68:ee:81:94:6a:b5:b4:3c:10:45:e0:
00:75:ea:a7:d9:2b:0a:1d:c5:30:ca:56:21:f0:7a:ea:1c:eb:
52:a3:59:9d:3b:f4:f4:21:b7:ad:11:b4:09:1e:f1:65:18:33:
bc:58:0b:83:20:65:b2:b4:0b:a4:8f:32:f3:e2:90:b8:16:d9:
64:6c:95:7e:de:ed:62:af:c2:7c:37:5f:f4:ce:fb:bf:49:95:
06:34:11:66:17:31:79:93:a4:82:4f:ee:48:2d:c0:ab:b1:c5:
99:9a:8c:3d:c8:5e:86:ca:de:67:20:bb:5c:e1:7c:cb:5b:10:
96:c4:40:6d:51:44:2c:64:26:90:0e:c6:39:a6:43:d0:00:8e:
0a:25:cf:5c:c6:ec:ca:08:f0:42:fd:cc:c6:89:09:7c:e0:4e:
ff:7f:bc:53:4a:22:55:8d:d3:4c:f9:3b:fd:3d:01:dd:ea:aa:
90:b0:62:1e:ab:be:a2:8e:52:44:6b:15:7e:c3:60:7e:88:8f:
90:2d:cf:a2:0a:af:5a:05:96:d4:79:c8:50:9c:e2:d3:ac:46:
65:f6:0d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:11 2025 by rpki-client