Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kf7S6r_xk4itwORvwehdL9_m-lA.roa
File: kf7S6r_xk4itwORvwehdL9_m-lA.roa (raw, json)
Hash identifier: m8f/GPWGwZyraam0emPL5BUXJkDt1H/Cvba57+Ax0mU=
Subject key identifier: 91:FE:D2:EA:BF:F1:93:88:AD:C0:E4:6F:C1:E8:5D:2F:DF:E6:FA:50
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0183654D05216F2BE12330D1A23668C14841
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kf7S6r_xk4itwORvwehdL9_m-lA.roa
Signing time: Thu 22 Sep 2022 13:04:49 +0000
ROA not before: Thu 22 Sep 2022 13:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141718
IP address blocks: 88.151.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:4d:05:21:6f:2b:e1:23:30:d1:a2:36:68:c1:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 22 13:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91fed2eabff19388adc0e46fc1e85d2fdfe6fa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:f0:d0:7c:06:1d:ae:00:a4:20:95:a3:b6:
74:4c:f3:43:57:ba:23:9c:08:06:a7:5c:18:12:b9:
ad:12:a4:bc:4a:df:3e:a1:a7:85:a7:ed:5b:4c:0c:
26:a8:67:df:7a:df:42:be:74:28:50:03:d8:c3:5d:
0c:72:24:7e:f1:7f:0c:d4:9f:fe:46:c0:38:6f:05:
7f:70:f0:35:87:27:bf:fc:39:8d:2e:4e:89:53:07:
2f:3a:74:48:96:18:4c:76:c4:68:9e:95:64:24:1a:
03:d0:a1:f1:82:60:d3:de:01:8b:53:13:4e:07:02:
a5:ae:9c:82:c6:77:f6:be:d3:74:a2:3f:45:b6:e8:
eb:fb:e9:28:5b:2e:35:e4:11:bd:42:b2:45:fe:fa:
61:4c:e3:0a:45:96:7a:45:72:58:23:9b:ee:42:89:
1a:0d:0e:3b:5b:9c:fc:71:3d:d2:34:ca:2a:7f:5d:
52:a1:6c:61:fa:f1:b2:30:da:54:23:92:b4:c8:94:
e5:28:9b:ed:26:04:98:a4:d0:40:ac:07:cb:33:cd:
85:38:4a:b3:64:dd:87:8a:5b:a6:d0:44:6e:c3:69:
fd:f9:08:e5:eb:d5:2c:e8:80:7e:89:70:0f:68:5a:
94:51:6f:3b:d6:a8:52:b6:d3:2f:3b:e4:e7:5b:3d:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FE:D2:EA:BF:F1:93:88:AD:C0:E4:6F:C1:E8:5D:2F:DF:E6:FA:50
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kf7S6r_xk4itwORvwehdL9_m-lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.198.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0b:65:21:eb:e0:ce:f1:6e:79:ee:40:bb:8d:6f:5b:50:8f:
76:06:7b:51:bd:f4:f2:25:4b:5a:8b:42:9d:af:20:5b:b8:e8:
4f:a0:f2:7b:56:1b:d5:51:a9:16:af:03:0e:e9:65:6b:72:21:
ea:c2:41:8c:4a:c8:f2:6b:e2:e2:f7:2b:9b:76:40:c6:d7:5b:
0c:d0:f8:23:cf:8b:11:e4:b4:77:6a:1c:52:34:a4:61:ca:f1:
af:3e:b2:15:0d:44:9a:f0:d5:ea:cf:8e:cc:7e:4b:59:07:27:
fa:f9:98:5f:9b:f0:05:d8:c4:32:f4:cd:d4:5f:f2:3b:d5:72:
6e:e3:0f:ea:e0:a5:c6:e8:78:3f:d3:28:f0:05:b8:6d:71:4e:
31:d0:48:54:2e:70:4f:76:5c:82:c8:9c:09:9c:b4:d5:77:39:
38:cd:0f:b2:ad:8a:52:2b:72:28:d6:ab:b4:ba:01:91:99:95:
81:7a:5f:c7:2c:8c:8f:a2:eb:ab:d2:e6:dc:fa:69:0b:0d:b1:
2b:7b:14:8d:db:ed:e0:78:ba:2d:0c:44:08:a6:83:7c:bf:84:
32:55:62:d7:ae:95:85:9d:5d:61:8d:29:21:6f:23:40:8d:d0:
11:5d:a9:af:6f:fc:4e:be:e8:dd:0e:bb:f6:f4:85:a8:21:e6:
5a:6d:c2:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNlTQUhbyvhIzDRojZowUhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjIwOTIyMTMwNDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWZlZDJlYWJmZjE5Mzg4YWRjMGU0NmZjMWU4NWQyZmRmZTZmYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWHw0HwGHa4ApCCVo7Z0TPNDV7oj
nAgGp1wYErmtEqS8St8+oaeFp+1bTAwmqGffet9CvnQoUAPYw10MciR+8X8M1J/+
RsA4bwV/cPA1hye//DmNLk6JUwcvOnRIlhhMdsRonpVkJBoD0KHxgmDT3gGLUxNO
BwKlrpyCxnf2vtN0oj9Ftujr++koWy415BG9QrJF/vphTOMKRZZ6RXJYI5vuQoka
DQ47W5z8cT3SNMoqf11SoWxh+vGyMNpUI5K0yJTlKJvtJgSYpNBArAfLM82FOEqz
ZN2Hilum0ERuw2n9+Qjl69Us6IB+iXAPaFqUUW871qhSttMvO+TnWz0nRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJH+0uq/8ZOIrcDkb8HoXS/f5vpQMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEva2Y3UzZyX3hrNGl0d09SdndlaGRMOV9tLWxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJfGMA0G
CSqGSIb3DQEBCwUAA4IBAQAlC2Uh6+DO8W557kC7jW9bUI92BntRvfTyJUtai0Kd
ryBbuOhPoPJ7VhvVUakWrwMO6WVrciHqwkGMSsjya+Li9yubdkDG11sM0Pgjz4sR
5LR3ahxSNKRhyvGvPrIVDUSa8NXqz47MfktZByf6+Zhfm/AF2MQy9M3UX/I71XJu
4w/q4KXG6Hg/0yjwBbhtcU4x0EhULnBPdlyCyJwJnLTVdzk4zQ+yrYpSK3Io1qu0
ugGRmZWBel/HLIyPouur0ubc+mkLDbErexSN2+3geLotDEQIpoN8v4QyVWLXrpWF
nV1hjSkhbyNAjdARXamvb/xOvujdDrv29IWoIeZabcIn
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org