Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/y17EAdGIiPE2cb7RsZS93iUGQss.roa
File: y17EAdGIiPE2cb7RsZS93iUGQss.roa (raw, json)
Hash identifier: 276ZC617lgd79Much68KKeSWRJf6Uot62sbS2uy3snE=
Subject key identifier: CB:5E:C4:01:D1:88:88:F1:36:71:BE:D1:B1:94:BD:DE:25:06:42:CB
Certificate issuer: /CN=02b798bf1b6118db3f38fe69b9d8aa0277c04a0b
Certificate serial: 0183A8017FCB334F90AD085450F46556FC55
Authority key identifier: 02:B7:98:BF:1B:61:18:DB:3F:38:FE:69:B9:D8:AA:02:77:C0:4A:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AreYvxthGNs_OP5pudiqAnfASgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/y17EAdGIiPE2cb7RsZS93iUGQss.roa
Signing time: Wed 05 Oct 2022 11:56:53 +0000
ROA not before: Wed 05 Oct 2022 11:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 88.151.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:01:7f:cb:33:4f:90:ad:08:54:50:f4:65:56:fc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b798bf1b6118db3f38fe69b9d8aa0277c04a0b
Validity
Not Before: Oct 5 11:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb5ec401d18888f13671bed1b194bdde250642cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:ca:fb:05:9d:8a:9c:7e:90:f2:26:54:18:
e6:36:a4:fa:93:cf:bb:02:ec:30:09:d2:8a:d3:c9:
89:99:31:52:32:50:f4:ed:27:bf:fa:c9:ba:f1:9a:
f4:f9:64:51:30:3f:ed:71:93:b0:5b:b6:2a:14:f8:
43:ec:29:23:94:b0:59:7b:6b:73:79:a9:a2:2f:6f:
4b:11:b7:ee:df:39:e9:c9:1a:95:ca:4e:0a:33:d3:
8c:89:76:b9:73:71:30:7b:8d:50:ee:58:d9:cf:97:
0e:17:ca:36:64:04:09:a8:5d:ca:7a:08:2e:f6:aa:
1d:ff:3c:21:d5:d3:97:70:b7:d9:75:34:0f:fb:bb:
93:ca:4c:a9:af:2a:3d:74:d2:1e:ac:ab:ab:a1:7c:
92:8d:b6:ff:47:50:62:1f:ab:74:7c:8d:fd:63:94:
7a:0b:ed:fb:d4:da:13:5d:ef:87:ad:e9:38:c5:48:
b9:f2:a9:ed:fa:5e:92:77:2e:25:7a:c6:84:d7:10:
e2:77:2b:db:3d:db:63:f3:e5:c8:99:63:e4:83:56:
36:61:69:3d:b6:50:8d:ac:fd:d7:4c:c2:e8:6f:bc:
c0:55:7b:bc:27:2b:4c:73:7e:ef:25:7e:93:0b:f3:
c2:99:fa:97:eb:33:38:85:6e:93:00:76:ff:22:af:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5E:C4:01:D1:88:88:F1:36:71:BE:D1:B1:94:BD:DE:25:06:42:CB
X509v3 Authority Key Identifier:
keyid:02:B7:98:BF:1B:61:18:DB:3F:38:FE:69:B9:D8:AA:02:77:C0:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AreYvxthGNs_OP5pudiqAnfASgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/y17EAdGIiPE2cb7RsZS93iUGQss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/AreYvxthGNs_OP5pudiqAnfASgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.9.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a8:f4:96:e8:3f:51:0d:72:d3:81:d0:c7:a2:13:86:b3:d2:
f0:d0:5d:d7:4d:48:78:33:e9:99:8b:9e:b1:b4:1b:fe:c3:fa:
24:a2:02:d2:53:76:31:71:bc:e2:94:0e:12:6e:6d:4a:59:46:
c7:8a:03:e6:b1:1f:1a:96:1f:0b:9b:fe:d3:02:8e:70:82:f5:
dc:db:4a:f7:26:38:d3:fe:18:55:0f:51:83:77:90:d2:c9:22:
d1:cd:cb:ae:56:9e:4e:1c:b2:b7:07:02:f0:33:58:6f:15:8c:
7f:94:44:b1:9e:90:ca:5f:c2:5c:4a:52:3b:7c:dd:a1:58:96:
05:66:f7:e1:e2:ee:ef:78:a3:ca:57:02:45:5a:c9:70:88:d0:
bf:ca:8c:df:40:9a:47:49:40:1d:73:6f:3b:30:76:cf:f2:59:
39:39:87:53:00:9a:83:15:70:48:67:80:cb:a2:f5:16:c5:2b:
53:62:d2:b8:3f:e8:9c:6e:84:ee:f1:74:25:e9:b2:47:6e:7a:
12:31:7a:63:c6:06:f1:82:4c:05:e7:48:63:d9:1f:7e:79:74:
a6:52:56:3e:4f:84:52:13:a2:6b:52:6f:23:fa:bd:5e:c7:19:
cd:af:90:dc:ff:61:d4:85:a8:1b:96:33:ce:c4:25:6e:7d:28:
28:6c:46:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-fra.rpki-client.org