Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/euBCswIxD2OL7K1Wtk48ZLWQHS8.roa
File: euBCswIxD2OL7K1Wtk48ZLWQHS8.roa (raw, json)
Hash identifier: gLOw51q+dNYZQ0qKAJ8r2SvzoixLVB4GjzxiR4POj0w=
Subject key identifier: 7A:E0:42:B3:02:31:0F:63:8B:EC:AD:56:B6:4E:3C:64:B5:90:1D:2F
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 0B63D327
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/euBCswIxD2OL7K1Wtk48ZLWQHS8.roa
Signing time: Wed 29 Jun 2022 06:43:02 +0000
ROA not before: Wed 29 Jun 2022 06:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13004
IP address blocks: 88.218.139.0/24 maxlen: 24
188.120.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191091495 (0xb63d327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Jun 29 06:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ae042b302310f638becad56b64e3c64b5901d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:33:97:46:88:50:a8:53:4f:d8:1d:cb:53:
6d:f0:9f:24:02:da:7e:19:99:17:03:40:c5:28:2a:
d1:44:2f:58:d7:f5:30:65:e1:9c:bc:12:f5:1c:23:
68:7c:68:71:e9:3f:6b:75:7c:eb:51:db:f9:0c:9e:
3f:c8:e3:dc:84:78:a9:d5:53:0a:76:83:dc:e0:b0:
17:d8:1d:74:28:1e:3d:20:e6:65:9b:a4:a3:97:a1:
fb:0f:bb:83:3b:c9:03:6c:0c:82:c9:ed:9b:07:01:
68:d0:b0:5a:58:ba:65:77:c4:25:0d:1c:6a:3f:be:
68:bd:01:9f:f9:60:52:6f:c5:26:aa:57:ac:a2:68:
1e:21:98:f4:35:a1:37:5a:c0:b9:18:ed:6b:43:93:
e4:94:22:57:d6:a5:3f:06:58:3e:9a:4f:8d:50:57:
5f:3b:87:e1:76:ce:af:4f:1c:a2:98:3e:53:1a:33:
4d:fd:99:62:49:66:02:c2:3a:60:3d:06:0e:18:56:
81:51:24:f7:d5:9d:f5:e6:80:9e:3f:d6:c1:bc:33:
9a:a7:9f:78:95:c9:36:ff:a0:35:43:8e:4b:35:3b:
b3:90:6f:07:a3:66:f5:c3:bc:96:72:21:17:0b:4e:
32:ac:29:3b:4e:da:61:f2:59:1c:3d:dc:8b:22:2e:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E0:42:B3:02:31:0F:63:8B:EC:AD:56:B6:4E:3C:64:B5:90:1D:2F
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/euBCswIxD2OL7K1Wtk48ZLWQHS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.139.0/24
188.120.127.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ae:d8:9e:42:25:5c:5d:69:6e:69:55:55:0d:a5:34:d2:98:
85:69:f8:59:6c:74:b7:5b:d3:11:63:9c:40:24:4a:84:46:ac:
12:56:8c:02:02:f0:6b:f2:c5:ca:10:1a:73:b2:06:8a:40:49:
23:84:2d:f7:bf:e9:24:a3:9c:ea:65:ad:27:9d:b8:2a:c9:15:
52:64:17:e0:52:69:33:1b:d4:e9:4d:94:a3:f5:53:f9:1f:cc:
30:97:04:c9:fc:0c:20:31:ad:db:2d:d5:c7:58:e0:ec:4a:df:
89:ae:c7:d9:66:38:35:45:d5:5f:cd:e6:b4:11:84:67:99:11:
6c:81:f6:2d:35:8b:61:c3:30:90:17:31:c2:db:db:91:6f:4f:
21:6d:97:74:c9:e0:c5:e1:8d:33:60:29:88:69:70:7f:a0:36:
1c:e0:4d:42:4d:88:c0:06:76:df:c6:d0:18:35:42:64:07:a5:
c2:dc:66:2a:60:27:77:92:6e:2a:a7:fa:f4:01:28:40:9b:d5:
20:d8:3a:56:2b:76:6a:0e:3a:c7:11:d9:0d:10:0d:89:92:81:
55:aa:d7:bb:8d:03:a9:63:32:22:bb:25:a8:16:47:c7:35:bf:
a3:cb:18:53:14:e1:d1:7d:09:68:f7:64:cc:c6:2a:21:2d:ee:
23:08:75:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:10 2024 by rpki-client on console-ams.rpki-client.org