Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ogqmHRr3ywlN1aEvKL3ztFayNXw.roa
File: ogqmHRr3ywlN1aEvKL3ztFayNXw.roa (raw, json)
Hash identifier: QEulgcRK4MKyh5EbCacEZylf47HUqnMe0qs5ip/R4u8=
Subject key identifier: A2:0A:A6:1D:1A:F7:CB:09:4D:D5:A1:2F:28:BD:F3:B4:56:B2:35:7C
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01888A14B32D2D56279C5BA6F813BA2E3CBB
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ogqmHRr3ywlN1aEvKL3ztFayNXw.roa
Signing time: Mon 05 Jun 2023 05:43:12 +0000
ROA not before: Mon 05 Jun 2023 05:43:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47674
IP address blocks: 88.151.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:14:b3:2d:2d:56:27:9c:5b:a6:f8:13:ba:2e:3c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jun 5 05:43:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a20aa61d1af7cb094dd5a12f28bdf3b456b2357c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:63:49:5d:09:d1:5f:18:c2:9b:ad:56:c5:
11:8b:77:ca:f3:52:48:4d:1f:4f:90:82:8e:9f:03:
c3:23:f9:a6:d0:ce:76:79:3a:1e:6b:45:4d:e8:42:
f5:cb:fd:c2:ed:da:e8:68:7c:62:04:13:60:b8:c6:
a8:b1:46:d0:54:64:d5:a7:aa:04:71:95:f9:65:40:
53:cb:89:f8:ee:3b:1a:e5:6e:e6:82:ec:19:fb:00:
40:84:8e:c4:74:4f:41:ba:19:8f:f5:8f:63:7b:01:
f7:50:d7:10:5c:ec:ce:59:cf:9e:fa:7d:b7:61:d9:
e8:6d:36:0d:03:55:ca:14:a8:1a:89:01:c7:59:f9:
01:de:c1:27:be:d2:d4:db:95:c8:e3:cd:2a:1e:d4:
50:e9:b5:aa:c4:f8:78:6f:31:08:d7:14:a6:0d:7a:
60:2c:af:02:24:7f:2a:26:1f:b2:54:a0:4b:d4:af:
34:d8:79:1b:f5:36:10:a0:ad:3a:cc:8f:05:b5:6f:
f8:9f:6c:7a:02:8a:56:e8:75:3c:23:12:08:82:df:
0c:aa:f0:1b:d6:64:8c:15:7a:57:d1:45:ca:ab:64:
d4:ee:ed:82:fb:60:00:7c:31:d5:c2:f9:8d:00:ba:
fb:a9:7d:b5:a7:b4:7b:0b:41:6c:1a:4c:58:84:4a:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:A6:1D:1A:F7:CB:09:4D:D5:A1:2F:28:BD:F3:B4:56:B2:35:7C
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ogqmHRr3ywlN1aEvKL3ztFayNXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.198.0/24
Signature Algorithm: sha256WithRSAEncryption
52:29:c5:ec:29:e8:ad:c3:b5:c1:d9:65:fa:b1:c6:ca:58:0b:
20:3b:2b:58:35:f1:f1:6a:c2:7b:59:a0:35:a4:26:d3:8c:a8:
2a:6e:0d:1d:56:15:60:bf:26:13:dd:29:06:02:a0:c6:11:05:
92:95:67:cf:c0:10:11:ce:bb:de:f7:3c:04:e9:34:b1:08:6d:
37:9c:0a:5e:32:d0:5d:b0:c9:5b:ec:a2:ca:c9:67:8a:33:ae:
7b:1e:ff:c1:c2:91:8b:be:cd:c0:29:e4:24:bc:ea:69:0c:7c:
9b:1c:3a:d9:b2:ff:3c:b8:63:24:50:53:91:38:24:c7:2b:ce:
c1:ca:3e:a6:bd:13:5b:c9:8f:80:69:a3:ca:ab:78:bc:5e:bc:
14:df:d6:6b:a4:76:37:7c:46:1b:63:6e:fc:01:46:df:b4:56:
17:c9:4e:f5:8f:3d:f9:bb:b7:ac:88:47:79:b1:d3:f2:c3:34:
e3:03:ee:88:8e:a7:9f:da:bd:16:de:00:fe:73:df:58:c8:64:
d6:d6:c7:54:d7:87:ea:35:29:71:4b:4a:ac:e6:85:89:ac:27:
2f:92:77:58:97:73:58:6d:c4:3e:f7:43:90:38:1d:80:69:a8:
85:8b:98:4f:ca:2a:c3:ea:e2:56:78:66:19:53:ff:51:27:cc:
a0:5b:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:32 2025 by rpki-client